Threat Intelligence

CVE-2026-109618 - PHP2Shell a week on: crashes on the web, root on PAN-OS Vulnerability

CVE-2026-109618 - PHP RCE CVEs leaked before the patch was out Vulnerability

CVE-2026-88771 - Exploited NetScaler pre-auth command injection Vulnerability

Two Kinds of Bot 2 min read

Ukraine struck three of Yandex’s five data centres from 8 October. Within days a Cloudflare chart was circulating as proof that Russian bot networks had gone dark, and President Zelensky …

Early rogue AI agent activity and attempts to hack found on urlquery.net Byte

Flare names the Australian operator behind TeamPCP Byte

DoppelCart: 119,000 domains in probably the largest documented fake-shop network Byte

Inside a Russian-Speaking Operator's Ukrainian IP Camera Toolkit Byte

Illegal Streaming Fronts a $7M Dropcatch Domain Operation Byte

Orchestration Has No ATT&CK ID 5 min read

MITRE ATT&CK can tell you an attacker dumped credentials (T1003) and moved laterally over SSH (T1021). It cannot tell you those two steps were chosen, sequenced, and executed by an AI agent with …

The Top 10 Most Prevalent MITRE ATT&CK Techniques Byte

GitLab Threat Intelligence on North Korean Tradecraft Byte

2025 Top 20 Chinese Cybersecurity Enterprises 6 min read

On December 29, 2025, the Internet Society of China (中国互联网协会, ISC, an industry association affiliated with MIIT) published the China Internet Enterprise Comprehensive Strength Index (2025). Buried in …

Anatomy of the One Fox Toolkit 3 min read

When EclecticIQ analyzed a 2023 Cobalt Strike intrusion at Taiwan’s Directorate General of Highways (MOTC), the most useful artifact wasn’t the malware. It was a filesystem path leaked in …

The Knownsec Leak: China's Cyber-Espionage Exposed Byte

Censys 2025 State of the Internet Report Byte

The Rise of Collaborative Tactics Among China-aligned Cyber Espionage Campaigns Byte

MITRE Attack Flow v3.0.0 charts how attackers chain ATT&CK techniques Byte

Kimsuky leak in Phrack exposes a credential theft playbook Byte

Threat Actor surveilled via Huntress EDR Byte

Inside Salt Typhoon: China's State-Corporate Advanced Persistent Threat Byte

An inside look at NSA (Equation Group) TTPs from China's lense Byte

An inside look at NSA (Equation Group) TTPs from China’s lense Byte

Backdooring Your Backdoors - Another $20 Domain, More Governments Byte

Tracking down exposed Gophish admin panels with urlscan and Censys Byte