Threat Intelligence

How TTP-based Defenses Outperform Traditional IoC Hunting

Incident Response, IOC, Ransomware, Threat Intelligence /

How TTP-based Defenses Outperform Traditional IoC Hunting 2025-11-12 at 18:16 By Etay Maor Behavioral detection allows defenders to recognize activity patterns like privilege escalation, credential theft, and lateral movement—often ahead of encryption or data exfiltration. The post How TTP-based Defenses Outperform Traditional IoC Hunting appeared first on SecurityWeek. This article is an excerpt from SecurityWeek […]

How TTP-based Defenses Outperform Traditional IoC Hunting Read More »

LevelBlue Futures Report: Retail Leaders Reveal Security Concerns

Artificial Intelligence, Reports, Threat Intelligence /

LevelBlue Futures Report: Retail Leaders Reveal Security Concerns 2025-11-12 at 16:09 By The future of retail cybersecurity: Explore insights from 220 retail executives on managing AI-driven threats and closing the cyber resilience gap. 44% of retail organizations report a sharp increase in cyberattacks, underscoring the urgent need for stronger cybersecurity defenses across the sector. 34% […]

LevelBlue Futures Report: Retail Leaders Reveal Security Concerns Read More »

Dissecting and Understanding APT Threat Group Activity

data breach, Emerging Threats, Security Research, Threat Intelligence /

Dissecting and Understanding APT Threat Group Activity 2025-11-06 at 16:45 By Trustwave SpiderLabs CTI APT Groups Prioritize Espionage and Data Theft: Approximately two-thirds of all Trustwave SpiderLabs-tracked APT group activity is motivated by espionage, targeting government, defense, and telecom sectors primarily in the US, Ukraine, and Russia. Top Attacker Nations: China (41%), Iran (12.5%), and […]

Dissecting and Understanding APT Threat Group Activity Read More »

Google uncovers malware using LLMs to operate and evade detection

APT, Artificial Intelligence, cybercriminals, data theft, Don't miss, Google, Hot stuff, LLMs, Malware, News, Threat Intelligence /

Google uncovers malware using LLMs to operate and evade detection 2025-11-05 at 20:53 By Zeljka Zorz PromptLock, the AI-powered proof-of-concept ransomware developed by researchers at NYU Tandon and initially mistaken for an active threat by ESET, is no longer an isolated example: Google’s latest report shows attackers are now creating and deploying other malware that […]

Google uncovers malware using LLMs to operate and evade detection Read More »

Google introduces agentic threat intelligence for faster, conversational threat analysis

agentic AI, Artificial Intelligence, Google, Google Cloud, Mandiant, News, Threat Intelligence, VirusTotal /

Google introduces agentic threat intelligence for faster, conversational threat analysis 2025-10-21 at 19:00 By Mirko Zorz Security teams spend much of their day pulling data from reports, forums, and feeds, trying to connect clues across multiple sources. Google says that work can now happen through a simple conversation. A new way to interact with threat […]

Google introduces agentic threat intelligence for faster, conversational threat analysis Read More »

Microsoft: Russia, China Increasingly Using AI to Escalate Cyberattacks on the US

Microsoft, Threat Intelligence /

Microsoft: Russia, China Increasingly Using AI to Escalate Cyberattacks on the US 2025-10-17 at 20:17 By Associated Press The U.S. is the top target for cyberattacks, with criminals and foreign adversaries targeting companies, governments and organizations. The post Microsoft: Russia, China Increasingly Using AI to Escalate Cyberattacks on the US appeared first on SecurityWeek. This […]

Microsoft: Russia, China Increasingly Using AI to Escalate Cyberattacks on the US Read More »

Maltrail: Open-source malicious traffic detection system

Don't miss, GitHub, Linux, malware detection, monitoring, News, open source, software, Threat Intelligence, traffic monitoring /

Maltrail: Open-source malicious traffic detection system 2025-10-15 at 08:30 By Sinisa Markovic Maltrail is an open-source network traffic detection system designed to spot malicious or suspicious activity. It works by checking traffic against publicly available blacklists, as well as static lists compiled from antivirus reports and user-defined sources. These “trails” can include domain names, URLs, […]

Maltrail: Open-source malicious traffic detection system Read More »

Notepad++ DLL Hijacking (CVE-2025-56383): CVSS 8.4 or CVSS 0.0?

Security Research, Threat Intelligence, Vulnerabilities /

Notepad++ DLL Hijacking (CVE-2025-56383): CVSS 8.4 or CVSS 0.0? 2025-10-04 at 01:35 By A vulnerability on a popular source-code editor has been recently released along with a proof-of-concept (POC) exploit, but the security community isn’t so sure that it’s a legitimate flaw. This article is an excerpt from SpiderLabs Blog View Original Source

Notepad++ DLL Hijacking (CVE-2025-56383): CVSS 8.4 or CVSS 0.0? Read More »

From Folding to Folded: Hacking High Volume Mailer Machines

Managed Security Services, Security Research, Threat Intelligence, Vulnerabilities /

From Folding to Folded: Hacking High Volume Mailer Machines 2025-09-30 at 16:00 By John Jackson The Quadient DS-700iQ is a high-volume folder-inserter machine designed for automating the process of assembling, folding, and inserting mail into envelopes for large mailing operations. It features a modular design that can handle complex mailing jobs, supports multiple feeders and […]

From Folding to Folded: Hacking High Volume Mailer Machines Read More »

Unit 221B Raises $5 Million for Threat Intel Aiding Hacker Arrests 

Cybersecurity Funding, funding, seed funding, Threat Intelligence, Unit 221B /

Unit 221B Raises $5 Million for Threat Intel Aiding Hacker Arrests  2025-09-23 at 16:05 By Ionut Arghire The company will expand its platform’s capabilities and accelerate investigative collaboration and go-to-market efforts. The post Unit 221B Raises $5 Million for Threat Intel Aiding Hacker Arrests  appeared first on SecurityWeek. This article is an excerpt from SecurityWeek […]

Unit 221B Raises $5 Million for Threat Intel Aiding Hacker Arrests  Read More »

Silent Push Raises $10 Million for Threat Intelligence Platform

Cybersecurity Funding, funding, Silent Push, Threat Intelligence /

Silent Push Raises $10 Million for Threat Intelligence Platform 2025-09-15 at 17:53 By Eduard Kovacs Silent Push, which provides Indicators of Future Attack, has raised a total of $32 million in funding. The post Silent Push Raises $10 Million for Threat Intelligence Platform appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View […]

Silent Push Raises $10 Million for Threat Intelligence Platform Read More »

Static feeds leave intelligence teams reacting to irrelevant or late data

cybersecurity, data security, Flashpoint, monitoring, News, report, Threat Intelligence /

Static feeds leave intelligence teams reacting to irrelevant or late data 2025-09-15 at 07:12 By Anamarija Pogorelec Boards and executives are not asking for another feed of indicators. They want to know whether their organization is being targeted, how exposed they are, and what steps need to be taken. A new report from Flashpoint argues […]

Static feeds leave intelligence teams reacting to irrelevant or late data Read More »

Ransomware Losses Climb as AI Pushes Phishing to New Heights

cyber insurance, phishing, Ransomware, Threat Intelligence /

Ransomware Losses Climb as AI Pushes Phishing to New Heights 2025-09-09 at 16:39 By Kevin Townsend Based on real-world insurance claims, Resilience’s midyear report shows vendor risk is declining but costly, ransomware is evolving with triple extortion, and social engineering attacks are accelerating through AI. The post Ransomware Losses Climb as AI Pushes Phishing to […]

Ransomware Losses Climb as AI Pushes Phishing to New Heights Read More »

Cutting through CVE noise with real-world threat signals

automation, CVE, cybersecurity, Don't miss, enterprise, News, Nucleus Security, Threat Intelligence, vulnerability management /

Cutting through CVE noise with real-world threat signals 2025-09-04 at 09:02 By Sinisa Markovic CISOs are dealing with an overload of vulnerability data. Each year brings tens of thousands of new CVEs, yet only a small fraction ever become weaponized. Teams often fall back on CVSS scores, which label thousands of flaws as “high” or […]

Cutting through CVE noise with real-world threat signals Read More »

Detecting danger: EASM in the modern security stack

Don't miss, Expert analysis, Expert corner, Hot stuff, monitoring, News, Outpost24, threat, Threat Intelligence /

Detecting danger: EASM in the modern security stack 2025-09-03 at 08:03 By Help Net Security In today’s complex threat environment, the challenge for security professionals isn’t just defeating threats – it’s finding your vulnerabilities in the first place. That’s where External Attack Surface Management (EASM) tools come in. EASM can identify the many weaknesses that […]

Detecting danger: EASM in the modern security stack Read More »

China’s Salt Typhoon Hacked Critical Infrastructure Globally for Years

China, Cyberwarfare, Featured, Salt Typhoon, Threat Intelligence /

China’s Salt Typhoon Hacked Critical Infrastructure Globally for Years 2025-08-28 at 17:21 By Ionut Arghire China-linked APT ‘Salt Typhoon’ exploited known router flaws to maintain persistent access across telecom, government, and military networks, giving Beijing’s intelligence services global surveillance reach. The post China’s Salt Typhoon Hacked Critical Infrastructure Globally for Years appeared first on SecurityWeek. […]

China’s Salt Typhoon Hacked Critical Infrastructure Globally for Years Read More »

Can AI make threat intelligence easier? One platform thinks so

analytics, automation, CISO, cybersecurity, data collection, Don't miss, GreyNoise, News, Threat Intelligence /

Can AI make threat intelligence easier? One platform thinks so 2025-08-28 at 07:38 By Mirko Zorz When analysts at RH-ISAC found themselves spending 10 hours a week just collecting threat intelligence, they knew their process wasn’t sustainable. They were manually tracking blogs, RSS feeds, and social media channels, but it took too long to separate […]

Can AI make threat intelligence easier? One platform thinks so Read More »

Making Cyber Threat Intelligence Work for Your Organization: The Intelligence Paradox

Threat Intelligence, Tips & Tricks /

Making Cyber Threat Intelligence Work for Your Organization: The Intelligence Paradox 2025-08-28 at 00:09 By Nigel Hardy Transform threat intelligence into actionable insights with contextualized data that aligns with your organization’s unique cybersecurity challenges. Strengthen your cybersecurity posture by mapping your attack surface, prioritizing threats, and focusing on what matters most to your business. Partner […]

Making Cyber Threat Intelligence Work for Your Organization: The Intelligence Paradox Read More »

AI is becoming a core tool in cybercrime, Anthropic warns

Anthropic, Artificial Intelligence, cybercrime, cybersecurity, News, report, Threat Intelligence /

AI is becoming a core tool in cybercrime, Anthropic warns 2025-08-27 at 17:32 By Anamarija Pogorelec A new report from Anthropic shows how criminals are using AI to actively run parts of their operations. The findings suggest that AI is now embedded across the full attack cycle, from reconnaissance and malware development to fraud and […]

AI is becoming a core tool in cybercrime, Anthropic warns Read More »

Using lightweight LLMs to cut incident response times and reduce hallucinations

Artificial Intelligence, CISO, cybersecurity, Don't miss, Features, Hot stuff, Incident Response, LLMs, News, research, security operations, strategy, Threat Intelligence, tips /

Using lightweight LLMs to cut incident response times and reduce hallucinations 2025-08-21 at 09:03 By Mirko Zorz Researchers from the University of Melbourne and Imperial College London have developed a method for using LLMs to improve incident response planning with a focus on reducing the risk of hallucinations. Their approach uses a smaller, fine-tuned LLM […]

Using lightweight LLMs to cut incident response times and reduce hallucinations Read More »

Scroll to Top