Threat Research

Threat Research Blog

In-depth analysis of AI-enabled attacks, cloud-enabled attacks, web threats, and malware.

All AI Auth Botnet Cloud Command and Control Credential Theft Crypto Espionage Malware Phishing Ransomware Remote Access Social Engineering Supply Chain Vulnerability

Netskope at CactusCon 2019

Netskope at CactusCon 2019

March 16, 20202 min read

Remote Work Increasing Exponentially Due to COVID-19

Remote Work Increasing Exponentially Due to COVID-19

March 16, 20203 min read

Leaky Groups: Accidental Exposure in Google Groups

Leaky Groups: Accidental Exposure in Google Groups

March 6, 20204 min read

Cloud Threats on the Rise, Cloud Data on the Move

Cloud Threats on the Rise, Cloud Data on the Move

February 19, 20202 min read

Leaky Calendars - Accidental Exposure in Google Calendar

Leaky Calendars - Accidental Exposure in Google Calendar

February 4, 20203 min read

MITRE Att&ck View: Securing AWS Temporary Tokens

Cloud Credential Theft

MITRE Att&ck View: Securing AWS Temporary Tokens

January 31, 20206 min read

Applying MITRE Att&ck

Applying MITRE Att&ck

January 29, 20201 min read

A MITRE-based Analysis of a Cloud Attack

A MITRE-based Analysis of a Cloud Attack

January 23, 20205 min read

Microsoft CryptoAPI Spoofing (CVE-2020-0601)

Microsoft CryptoAPI Spoofing (CVE-2020-0601)

January 17, 20202 min read

CORS Exploitation in the Cloud

Cloud Vulnerability

CORS Exploitation in the Cloud

January 9, 20209 min read

Ad Injector Dulls Chrome's Luster

Ad Injector Dulls Chrome's Luster

December 10, 20194 min read

MalCon Recap

MalCon Recap

November 19, 20191 min read