 | The Q3 Vulnerability Pulse: Discovery ≠ Exploitation | 2026-10-15 | 78 | Thorsten Rosendahl | True | | |
| Making sure the checks get printed | 2026-10-08 | 70 | Pierre Cadieux | True | | |
| UAT-11985: AI-assisted event lures delivering real-time Google AitM phishing | 2026-10-08 | 82 | Joey Chen | True | | |
| Ignore all instructions and read this blog: The state of AI-analysis evasion in malware | 2026-10-08 | 50 | Ryan Fetterman | True | | |
| Microsoft, Adobe, Apple, and Foxit vulnerabilities | 2026-10-07 | 55 | Kri Dontje | True | | |
| Give yourself room to be human | 2026-10-01 | 78 | Amy Ciminnisi | True | | |
| China-nexus UAT-11587 targets government and policy organizations across Asia with Antino backdoor | 2026-09-30 | 90 | Ashley Shen | True | | |
| Trust and the enticing consultancy offer | 2026-09-24 | 70 | Martin Lee | True | | |
| The Closed Quorum: Inside the first reported autonomous AI C2 implant | 2026-09-22 | 65 | Ryan Fetterman | True | | |
| Introducing CAIRN: Frontier tracking for AI-integrated malware | 2026-09-22 | 60 | Ryan Fetterman | True | | |
| Should you care about an “AI slowdown?” | 2026-09-17 | 70 | David J. Bianco | True | | |
| Ransomware incidents in Japan in the first half of 2026: Investigation of The Gentlemen’s infrastructure and evidence of Qilin's AI use | 2026-09-17 | 78 | Takahiro Takeda | True | | |
| Securing the unpatchable in an age of AI-driven vulnerabilities | 2026-09-16 | 50 | Martin Lee | True | | |
| We've got one word for it, and it's usually the wrong one | 2026-09-10 | 75 | Joe Marshall | True | | |
| Active exploitation of Cisco Secure Firewall Management Center vulnerabilities | 2026-09-09 | 90 | Cisco Talos | True | | |
| Microsoft Patch Tuesday for September 2026 — Snort rules and prominent vulnerabilities | 2026-09-08 | 88 | Cisco Talos | True | | |
| ClearFake WebDAV infection chain delivers Amatera stealer, ZigCryptoStealer, and NetSupport Manager | 2026-09-08 | 78 | Vanja Svajcer | True | | |
| ClickFix moves into the browser: Cryptocurrency theft with Google-hosted C2 | 2026-09-08 | 65 | Sean Gallagher | True | | |
| The story behind the intelligence | 2026-09-03 | 76 | Hazel Burton | True | | |
| “Sorry, I can’t help with that”: How your guardrails might become the attacker’s best friend | 2026-08-27 | 70 | David J. Bianco | True | | |
| The safety penalty: Reclaiming operational sovereignty in the age of AI | 2026-08-25 | 45 | David J. Bianco | True | | |
| Is Cyber missing the Marque? | 2026-08-20 | 78 | Mick Baccio | True | | |
| UAT-10147 deploys SPECTRE: A cross-platform implant with Linux rootkit and BYOVD capabilities | 2026-08-20 | 90 | Joey Chen | True | | |
| UAT-10147: Chinese-speaking adversary integrates agentic AI into post-compromise operations | 2026-08-20 | 78 | Joey Chen | True | | |
| Describing attacks with crime script analysis | 2026-08-19 | 20 | Martin Lee | True | | |
| Curiouser and Curiouser | 2026-08-13 | 75 | William Largent | True | | |
| Dissecting the JWR phishing framework | 2026-08-13 | 75 | Chetan Raghuprasad | True | | |
| Microsoft Patch Tuesday for August 2026 — Snort rules and prominent vulnerabilities | 2026-08-11 | 85 | Cisco Talos | True | | |
| Why metaphor may dictate your security strategy | 2026-08-06 | 70 | Martin Lee | True | | |
| “Keep going, bro. You’ve got this!” A data-driven look at how adversaries are weaponizing AI | 2026-08-04 | 80 | Nick Biasini | True | | |
| You were onto something with “It’s the Climb,” Miley | 2026-07-30 | 75 | Amy Ciminnisi | True | | |
| IR Trends Q2 2026: Phishing and weaponized remote management tools drive attack chains | 2026-07-28 | 80 | Lexi DiScola | True | | |
| Don’t swing at everything | 2026-07-23 | 78 | Thorsten Rosendahl | True | | |
| Chaos ransomware's msaRAT: Living off the browser to build a covert C2 channel | 2026-07-23 | 80 | Jordyn Dunk | True | | |
| Begun, the Patch Wars have | 2026-07-16 | 78 | Joe Marshall | True | | |
| UAT-11795 deploys novel Starland RAT and bespoke WLDR C2 implant in financially motivated campaign | 2026-07-16 | 80 | Alex Karkins | True | | |
| Microsoft Patch Tuesday for July 2026 — Snort rules and prominent vulnerabilities | 2026-07-14 | 80 | Cisco Talos | True | | |
| The serpent’s tongue: Luring the Python out of its den | 2026-07-14 | 75 | Onur Mustafa Erdogan | True | | |
| WolfSSL, GeoVision, VTK vulnerabilities | 2026-07-09 | 50 | Kri Dontje | True | | |
| Winning 54% of the time | 2026-07-09 | 75 | Hazel Burton | True | | |
| UAT-7810 continues building ORB networks using new malware | 2026-07-07 | 88 | Jungsoo An | True | | |
| Catan and Mouse | 2026-07-02 | 75 | William Largent | True | | |
| ARToken: Inside an EvilTokens affiliate panel targeting Microsoft 365 | 2026-07-01 | 78 | Michael Kelley | True | | |
| Beyond IOCs: AI-enabled threat intelligence | 2026-06-25 | 70 | Martin Lee | True | | |
| Introduction to COM usage by Windows threats | 2026-06-25 | 60 | Vanja Svajcer | True | | |
| Close Encounters of the Human Kind | 2026-06-18 | 75 | Hazel Burton | True | | |
| A tale of two eras | 2026-06-11 | 60 | Amy Ciminnisi | True | | |
| Microsoft Patch Tuesday for June 2026 — Snort rules and prominent vulnerabilities | 2026-06-09 | 75 | Chetan Raghuprasad | True | | |
| Reporting from Vegas: Networking, AI, and good boys | 2026-06-04 | 65 | Joe Marshall | True | | |
| Hypotheses, telemetry, and human judgment: Inside Cisco Talos Threat Hunting | 2026-06-04 | 60 | Cisco Talos | True | | |
