#threat-intelligence

Articles tagged with #threat-intelligence

What the Teams Vishing Research Looks Like From a 911 Center
Two vendor reports describe a social engineering campaign aimed at ordinary enterprise networks. Here is what stood out reading them from a public safety seat.
Jul 31, 20268 min read234
PamStealer Skips the Process Chains Defenders Watch. Not All of Them.
A macOS stealer that routes its most detectable stages -- the download, the credential check, the keychain read -- through native frameworks to skip the process chains defenders key on. Quieter than most commodity stealers. Not quiet.
Jul 2, 20269 min read23
Your Agent Framework Is a Pile of API Keys on a Public IP
The low-code AI tooling everyone stood up in 2025 is now external attack surface -- and attackers are reaching it in hours.
Jul 1, 20269 min read10
There's No Patch for FortiBleed. Public-Sector Networks Are Where That Hurts Most.
No CVE, no patch -- a credential campaign that harvests the exact conditions under-resourced government and public-safety networks tend to produce.
Jun 27, 202612 min read4
Four Failures, One Excuse: "Patch Faster" Was Never the Answer
The exploit window did collapse this spring. The bugs that walked through it were decades-old design failures, not clever exploits -- and the industry is still selling speed.
Jun 23, 20268 min read8
I Handed Claude Code the Keys. Turns Out I'm Not the Only One Using Them.
What happens when an attacker, not you, is the one holding the agent's keys.
Jun 16, 202611 min read12