logo

Vectra AI Blog

ID: 2609a75c-8514-5187-8adf-6f21e01b7b0d

STIX ID: identity--2609a75c-8514-5187-8adf-6f21e01b7b0d

Feed Type: rss

Earliest post: 2022-09-20

Latest post: 2026-10-07

The Vectra AI Blog delivers expert insights on emerging cyber threats, attacker tactics, and AI-driven defense strategies to help security teams stay ahead of modern attacks.

01/01/2020
10/14/2026
Title Date Published ↓Threat ScoreAuthorVisible
ASOS customers heard about the attack from the attacker by Lucie Cardiet2026-10-0770True
Fighting AI Attacks with AI Starts with Network + Identity by Mark Wojtasiak2026-10-0270True
Why AI Coding Agents Don't Trigger Your Existing Detection Stack by Lucie Cardiet2026-09-2972True
ShinyHunters Breached the FBI by Bypassing the Fix by Lucie Cardiet2026-09-2882True
What the Hugging Face Incident Teaches Us About Behavioral Detection in Agentic Attacks by Snehal Patel2026-09-1075True
Five AI attacks. The same three blind spots. by Lucie Cardiet2026-09-0480True
The Credentials Were Rotated. They Still Worked. by Lucie Cardiet2026-09-0275True
Attackers Create Inbox Rules. They Don't Rewrite Yours. by Stephan Hoehl 2026-07-2425True
An autonomous AI agent compromised Hugging Face. The response is the real story. by Lucie Cardiet2026-07-2272True
After the exploit, before the impact: A read of Gartner's 2026 threat landscape. by Lucie Cardiet2026-07-0878True
VECT and TeamPCP: The Ransomware Kill Chain, Reversed by Lucie Cardiet2026-07-0788True
The FBI wrote down the Scattered Spider playbook, and it starts with a phone call by Lucie Cardiet2026-07-0685True
FortiBleed: You Cannot Patch a Valid Login by Lucie Cardiet2026-06-2985True
Why Cloud Security Remains Difficult in Multi-Cloud Environments by Aakash Gupta2026-06-2585True
A Valid Microsoft Signature Does Not Mean a Driver Is Safe by Lucie Cardiet2026-06-2378True
What Anthropic's Attacker-AI Data Means for Detection by Lucie Cardiet2026-06-1870True
From Conti to The Gentlemen: tooling evolved, gaps didn't. by Lucie Cardiet2026-06-0285True
Azure’s Hidden Operators: A Threat Model for Platform-Level Managed Identities by Kat Traxler2026-06-0175True
Shai-Hulud Part 2: When the Worm Forged Its Own Security Certificate by Lucie Cardiet2026-05-1388True
ShinyHunters isn’t a group. It’s a pattern. by Lucie Cardiet2026-05-0680True
When the Defender Becomes the Door: BlueHammer, RedSun, and UnDefend in the Wild by Justin Howe2026-04-2080True
Azure Logging just Changed - Your Detections May be Missing it by Alex Groyz2026-04-2035True
The rise of supply chain-driven data theft in SaaS environments by Lucie Cardiet2026-04-1475True
FortiClient EMS Zero-Day: When the Control Plane Becomes Initial Access by Lucie Cardiet2026-04-0890True
The axios Breach: A Wake-Up Call for Software Supply Chain Security by Yusri Mohd Yusop2026-04-0390True
Breaking down the axios supply chain incident by Lucie Cardiet2026-04-0190True
Detecting Sliver C2: When Advanced Beaconing Tries to Hide in Plain Sight by Lucie Cardiet2026-03-2370True
How Attackers Establish Persistence in Hybrid Environments by Lucie Cardiet2026-03-1665True
What the Stryker Incident Reveals About Handala’s Attack Playbook by Lucie Cardiet2026-03-1375True
5-Minute Hunt: Six Queries to Detect Iranian APT Activity by Lucie Cardiet2026-03-0685True
AWS Compromised by AI Agents in Minutes by Alex Groyz2026-02-1075True
Moltbook and the Illusion of “Harmless” AI-Agent Communities by Lucie Cardiet2026-02-0378True
From Clawdbot to OpenClaw: When Automation Becomes a Digital Backdoor by Lucie Cardiet2026-01-2975True
OPSEC Failures: How Threat Actor Mistakes Help Defenders by Lucie Cardiet2026-01-0980True
How Threat Actors Turned AI Into a Weapon by Mauro Paredes2026-01-0585True
CVE-2025-14847 MongoBleed in the Wild: Identifying MongoDB Exposure and Exploitation with Network Metadata by Fabien Guillot2025-12-2988True
Shai-Hulud: When a Supply-Chain Incident Turns Into a Worm by Lucie Cardiet2025-11-2685True
How Typhoon APTs Infiltrate Infrastructure Without Leaving a Trace by Lucie Cardiet2025-11-2090True
Think Your Microsoft Environment Is Resilient to Attacks? Think Again by Tiffany Nip2025-11-1970True
Operation ENDGAME and the Battle for Initial Access by Lucie Cardiet2025-11-1475True
How Attackers Gain Initial Access in Hybrid Environments by Lucie Cardiet2025-11-1265True
From Conti to Black Basta to DevMan: The Endless Ransomware Rebrand by Lucie Cardiet2025-10-1775True
Could the F5 Breach Expose a New Edge Security Gap? by Lucie Cardiet2025-10-1690True
Qilin’s 2025 Playbook, and the Security Gap it Exposes by Lucie Cardiet2025-10-1578True
Seeing Beneath the Surface: What Crimson Collective Reveals About Cloud Detection Depth by Lucie Cardiet2025-10-0970True
Cl0p Is Back, Exploiting Supply Chains Again. by Lucie Cardiet2025-10-0790True
Red Hat GitLab Breach Shows Why Consulting Data is a Goldmine for Attackers by Lucie Cardiet2025-10-0375True
When GoAnywhere Lets Attackers Go Everywhere by Lucie Cardiet2025-10-0290True
Beyond Endpoints: How BRICKSTORM Exposed Security Blind Spots by Lucie Cardiet2025-10-0190True
Scattered Lapsus$ Hunters Announce They Are Going Dark but the Threat Remains by Lucie Cardiet2025-09-1775True

1–50 of 101