https://cybersecpro.me/categories/threat-research/Recent content in Threat Research on Juan Carlos MuneraHugo -- gohugo.ioen© 2026 Juan Carlos MuneraThu, 16 Jul 2026 00:00:00 +0000https://cybersecpro.me/posts/iptv-streaming-security/Thu, 16 Jul 2026 00:00:00 +0000https://cybersecpro.me/posts/iptv-streaming-security/How the traffic laundering economy turns jailbroken FireSticks into residential proxies, and what defenders can actually do about it.https://cybersecpro.me/posts/ironworm-npm-worm/Mon, 08 Jun 2026 00:00:00 +0000https://cybersecpro.me/posts/ironworm-npm-worm/A practitioner breakdown of the npm worm that sweeps environment variables on install and republishes itself through Trusted Publishing.https://cybersecpro.me/posts/2026-dbir-ai-as-catalyst/Tue, 19 May 2026 00:00:00 +0000https://cybersecpro.me/posts/2026-dbir-ai-as-catalyst/The largest DBIR ever published, read for signal. Where generative AI actually shows up in the data and where the fundamentals still rule.https://cybersecpro.me/posts/ai-jailbreak-zero-day-google-gtig/Wed, 13 May 2026 00:00:00 +0000https://cybersecpro.me/posts/ai-jailbreak-zero-day-google-gtig/Google caught the first AI-assisted zero-day in the wild. How attackers talked a model into helping, and why the method matters more than the exploit.https://cybersecpro.me/posts/firestarter-cisco-backdoor-detection-gap/Tue, 28 Apr 2026 00:00:00 +0000https://cybersecpro.me/posts/firestarter-cisco-backdoor-detection-gap/CISA and NCSC published a joint analysis of FIRESTARTER, a backdoor that survives reboots and evades signature detection on Cisco edge devices.https://cybersecpro.me/posts/operation-masquerade-fbi-apt28-router-dns-hijacking/Thu, 16 Apr 2026 00:00:00 +0000https://cybersecpro.me/posts/operation-masquerade-fbi-apt28-router-dns-hijacking/How the DNS hijacking attack chain worked across 120+ countries, and what practitioners should be checking in their own environments.https://cybersecpro.me/posts/cpuid-cpu-z-hwmonitor-supply-chain-attack/Sun, 12 Apr 2026 00:00:00 +0000https://cybersecpro.me/posts/cpuid-cpu-z-hwmonitor-supply-chain-attack/How the April 2026 compromise of CPUID’s site turned CPU-Z and HWMonitor downloads into a multi-stage malware delivery chain.https://cybersecpro.me/posts/forticlient-ems-double-zero-day/Thu, 09 Apr 2026 00:00:00 +0000https://cybersecpro.me/posts/forticlient-ems-double-zero-day/Why endpoint management servers are a high-value target, how both flaws were exploited, and the actions practitioners should take today.https://cybersecpro.me/posts/ibm-xforce-threat-intelligence-index-2026/Wed, 11 Mar 2026 00:00:00 +0000https://cybersecpro.me/posts/ibm-xforce-threat-intelligence-index-2026/What the IBM X-Force Threat Intelligence Index 2026 says about AI-accelerated attacks, and why basic hygiene failures still cause the damage.https://cybersecpro.me/posts/atm-jackpotting/Sun, 22 Feb 2026 00:00:00 +0000https://cybersecpro.me/posts/atm-jackpotting/A threat that matured abroad has found a home in the US. How ATM jackpotting works, why it keeps working, and what the industry guidance says.