Threat Research

Threat Research Blog

In-depth analysis of AI-enabled attacks, cloud-enabled attacks, web threats, and malware.

All AI Auth Botnet Cloud Command and Control Credential Theft Crypto Espionage Malware Phishing Ransomware Remote Access Social Engineering Supply Chain Vulnerability

A Real-World Look at AWS Best Practices: Logging

September 23, 20219 min read

BazarLoader: Using LoLBins through Office Documents to Deliver Payloads

BazarLoader: Using LoLBins through Office Documents to Deliver Payloads

September 22, 20214 min read

Who Do You Trust? Challenges with OAuth Application Identity

Auth Credential Theft

Who Do You Trust? Challenges with OAuth Application Identity

September 14, 202112 min read

Microsoft Office Document Triggering New Zero-Day

Vulnerability Malware

Microsoft Office Document Triggering New Zero-Day

September 13, 20214 min read

Hive Ransomware: Actively Targeting Hospitals

Ransomware Malware

Hive Ransomware: Actively Targeting Hospitals

September 10, 20219 min read

A Real-World Look at AWS Best Practices: Networking

September 7, 20217 min read

Cloud Threats Memo: Continuing Trends in Risks to Remote Working

Vulnerability Remote Access

Cloud Threats Memo: Continuing Trends in Risks to Remote Working

August 26, 20212 min read

A Real-World Look at AWS Best Practices: Storage

A Real-World Look at AWS Best Practices: Storage

August 24, 202111 min read

Netskope Threat Coverage: BlackMatter

Ransomware Malware

Netskope Threat Coverage: BlackMatter

August 23, 20218 min read

Netskope Threat Coverage: LockBit

Ransomware Malware

Netskope Threat Coverage: LockBit

August 12, 20214 min read

New Phishing Attacks Exploiting OAuth Authorization Flows (Part 3)

New Phishing Attacks Exploiting OAuth Authorization Flows (Part 3)

August 12, 20218 min read

New Phishing Attacks Exploiting OAuth Authorization Flows (Part 2)

New Phishing Attacks Exploiting OAuth Authorization Flows (Part 2)

August 10, 20217 min read