Threat intelligence, emerging attack vectors, and actionable security insights from our team.
Google/Mandiant M-Trends 2026 ranks voice phishing the #2 initial breach vector worldwide — and #1 in cloud environments. AI-driven TOAD kits and deepfake meetings explain the surge, and why awareness training is the only defence that scales.
Flare traced roughly 130,000 infostealer logs exposing FIFA credentials in the year before the 2026 World Cup — from a search for free PDF software through HijackLoader and Lumma Stealer. The full infection chain, IOCs, and defences.
Kali365 abuses OAuth Device Authorization to hijack Microsoft 365 sessions without credentials. Analysis of the technique, IOCs, and defenses.
A five-phase campaign targeting executives across 20+ industries uses adversary-in-the-middle techniques to hijack sessions, rendering MFA ineffective.