Research, analysis, and practical guidance on the threats, vulnerabilities, and adversaries shaping today's security landscape.
Explore the latest researchGo beyond headlines with analyst-led context, defensive guidance, and clear takeaways for security teams.
A deep-dive threat intelligence report on APT29 — the SVR-backed group behind SolarWinds, the DNC breach, and attacks on Microsoft and HPE — covering their TTPs, malware arsenal, detection guidance, and mitigations.
Read analysis
Anyone working in cybersecurity knows that understanding your infrastructure requires more than checking what happens internally. Many risks come from externally exposed services, outdated technologies, or poorly configured systems. To see these problems clearly, OSINT tools have become essential.
Read analysis
In today's interconnected digital landscape, information flows constantly between individuals, organisations, cloud infrastructures, mobile devices and third-party services. This continuous exchange creates a dynamic ecosystem where data becomes one of most valuable assets and one of most vulnerable.
Read analysis
Originally, Chrome extensions were designed to enhance productivity and personalize the browsing experience, but over time, they evolved into a powerful attack surface. Threat actors quickly realized that extensions have privileged access to browser data, including cookies, sessions, browsing history, and sometimes even credentials. This makes them an ideal vector for silent data theft.
Read analysis
A newly disclosed critical vulnerability in Triofox (CVE-2025-12480) exposes organizations to unauthenticated access, full administrative takeover, and rapid escalation to remote code execution. Actively exploited by threat actors, this flaw turns publicly reachable deployments into high-risk entry points for deeper network compromise, making swift patching, isolation, and thorough hunting essential for defenders.
Read analysis
Appearing during the initial months of 2025, Codefinger has rapidly attracted the attention of cybersecurity specialists because of its highly advanced tactics and rapid growth across various industries. Suspected to be conducted by a well-planned group of attackers, Codefinger combines traditional ransomware functionality with highly advanced evasion and data extraction strategies.
Read analysisSee how Cypho turns external signals into prioritized action.
