Instability linked to the Iran conflict has pushed many organizations across the Middle East to activate continuity plans. In practice, one of the fastest and most common actions was a…
Inside the Cisco Live SOC At Cisco Live AMER, the Security Operations Center (SOC) is more than a demo environment. It is a working security operations center protecting the event…
Executive Summary During the March–April 2026 reporting period, AI use in offensive operations advanced from development and planning to real-time operational deployment. Multiple independent cases, involving individual criminal actors, mass…
Executive summary Rapid7 researchers have identified a sophisticated malware campaign attributed to the threat actor “Dropping Elephant,” characterized by the use of a China-themed decoy document to deliver a heavily…
BitRAT is a potent and versatile Remote Access Trojan (RAT) commonly sold on underground forums. Its popularity stems from a robust feature set and an emphasis on stealth, allowing it…
Malware: ACR Stealer, Amatera, AMOS, Atomic macOS Stealer, Atomic Stealer, bw1.js, CANFAIL, CanisterSprawl, CanisterWorm, CipherForce, DripDropper, gh-token-monitor, GlassWorm, GlassWorm v2, GoBear, Gomir, HEUR:Worm.Script.Shulud.gen, js.shai_hulud, LONGSTREAM, mcpAddon.js, mini Shai-Hulud, Mini Shai…
Executive Summary From September – November 2025, Cato Networks threat researchers observed a global campaign involving suspicious Modbus/TCP (transmission control protocol) activity against internet-exposed PLCs (programmable logic controllers). The targeted…
At Cisco Live AMER 2026 in Las Vegas, my work with the Cisco Event SOC centered on one outcome that makes these deployments valuable beyond the event itself: Education. The…
For the latest discoveries in cyber research for the week of 1st June, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Carnival Corporation, a global cruise line operator,…
The shift toward preemptive security is underway, but most organizations are still navigating the realities of limited resources, fragmented tools, and emerging AI risk. At Rapid7’s recent Global Security Summit,…
