Reports

Threat intelligence reports and analysis

DanaBot Malware Campaign Analysis

May 23, 2025

campaign

Comprehensive analysis of the recent DanaBot malware campaign targeting financial institutions. Includes IOCs, TTPs, and mitigation recommendations.

malware
banking
danabot
ACAlex Chen

Kettering Health Ransomware Incident

May 21, 2025

incident

Detailed breakdown of the Kettering Health ransomware incident. Includes timeline, attack vectors, and lessons learned.

ransomware
healthcare
incident-response
SJSarah Johnson

APT29 Updated TTPs (2025)

May 20, 2025

threat-actor

Updated analysis of APT29 tactics, techniques, and procedures observed in recent campaigns. Includes new tooling and infrastructure details.

apt29
nation-state
espionage
MTMichael Torres

GitLab Duo Authentication Bypass Vulnerability

May 19, 2025

vulnerability

Analysis of the recently disclosed authentication bypass vulnerability in GitLab Duo integration (CVE-2025-1234). Includes exploitation details and patching guidance.

gitlab
authentication
cve-2025-1234
EWEmma Wilson

Emerging Ransomware-as-a-Service: BlackCat 2.0

May 18, 2025

campaign

Investigation into the new version of BlackCat ransomware being offered as a service on dark web forums. Includes technical details and defensive recommendations.

ransomware
raas
blackcat
DPDavid Park

Supply Chain Attack: Compromised NPM Packages

May 17, 2025

incident

Analysis of recent supply chain attack involving compromised NPM packages. Includes affected packages, IOCs, and remediation steps.

supply-chain
npm
javascript
OMOlivia Martinez