Threat Research

Your Streaming Box Is Someone Else's Exit Node: SOCKS5 Proxies and the Traffic Laundering Economy

16 July 2026·1436 words·7 mins

Threat Research Cybercrime Threat Intelligence Network Security Endpoint Security

How the traffic laundering economy turns jailbroken FireSticks into residential proxies, and what defenders can actually do about it.

IronWorm: A Self-Propagating npm Worm Built to Steal Machine Identities

8 June 2026·1142 words·6 mins

Threat Research Supply Chain Security Non-Human Identities DevSecOps Malware Analysis

A practitioner breakdown of the npm worm that sweeps environment variables on install and republishes itself through Trusted Publishing.

Reading the 2026 Verizon DBIR: AI Is the Catalyst, Not the Threat Actor

19 May 2026·2357 words·12 mins

Threat Research Industry Reports Threat Intelligence Ransomware Vulnerability Management

The largest DBIR ever published, read for signal. Where generative AI actually shows up in the data and where the fundamentals still rule.

How Hackers Talked an AI Into Helping Them Build a Zero-Day

13 May 2026·1491 words·7 mins

Threat Research Zero-Day Prompt Injection Threat Intelligence Agentic AI

Google caught the first AI-assisted zero-day in the wild. How attackers talked a model into helping, and why the method matters more than the exploit.

FIRESTARTER and the Detection Gap CISA Just Made Official

28 April 2026·1417 words·7 mins

Threat Research Detection Engineering Threat Intelligence Network Security Incident Response

CISA and NCSC published a joint analysis of FIRESTARTER, a backdoor that survives reboots and evades signature detection on Cisco edge devices.

Operation Masquerade: FBI Disrupts APT28 Campaign Across 18,000 Hijacked Routers

16 April 2026·1326 words·7 mins

Threat Research Nation-State Threats Network Security Threat Intelligence Identity Security

How the DNS hijacking attack chain worked across 120+ countries, and what practitioners should be checking in their own environments.

CPU-Z and HWMonitor Hijacked: Inside the CPUID Supply Chain Attack

12 April 2026·945 words·5 mins

Threat Research Supply Chain Security Malware Analysis Threat Intelligence Endpoint Security

How the April 2026 compromise of CPUID’s site turned CPU-Z and HWMonitor downloads into a multi-stage malware delivery chain.

Two FortiClient EMS Zero-Days in Two Weeks: Why Your Endpoint Management Server Is the Target

9 April 2026·1599 words·8 mins

Threat Research Zero-Day Vulnerability Management Endpoint Security Threat Intelligence

Why endpoint management servers are a high-value target, how both flaws were exploited, and the actions practitioners should take today.

IBM X-Force 2026: AI Is Speeding Up Attacks, But Basic Hygiene Failures Are Still the Real Problem

11 March 2026·805 words·4 mins

Threat Research Industry Reports Threat Intelligence Supply Chain Security Identity Security Vulnerability Management

What the IBM X-Force Threat Intelligence Index 2026 says about AI-accelerated attacks, and why basic hygiene failures still cause the damage.

ATM Jackpotting: The Emerging Threat Draining U.S. Cash Machines

22 February 2026·2845 words·14 mins

Threat Research Cybercrime Threat Intelligence Malware Analysis Endpoint Security

A threat that matured abroad has found a home in the US. How ATM jackpotting works, why it keeps working, and what the industry guidance says.

↑