Cyber threat intelligence analyses and reports
55 posts found
Extortion actors are BCC-ing journalists on breach claims to pressure victims into paying. Here's how the tactic works and how to verify a claim before amplifying it.
A practical incident response tabletop exercise example for security teams, with scenario design, injects, roles, metrics, and common failure points.
A vulnerability intelligence workflow guide for SOC and CTI teams to prioritize exploitable risk, reduce noise, and drive faster remediation decisions.
A signed, attested npm package shipped malware. Inside the Mini Shai-Hulud worm, the Pwn Request chain that hijacked TanStack's CI, and why provenance isn't tr
Learn how to analyze phishing headers to trace sender paths, spot spoofing, validate auth results, and improve email triage in SOC workflows.
Learn 12 phishing email indicators that matter to SOC teams, analysts, and defenders, from header anomalies to payload behavior and sender spoofing.
When should teams patch critical vulnerabilities? Timing depends on exploitability, exposure, compensating controls, and operational risk.
Learn how to investigate beaconing traffic using timing, DNS, JA3, and flow analysis to separate malware C2 from routine software noise fast.
A ransomware campaign analysis example for SOC and CTI teams, covering intrusion flow, telemetry pivots, actor assumptions, and defense actions.
Dark web monitoring guide for SOC and CTI teams: sources, collection methods, validation steps, and limits of monitoring exposed data.
