Why a product engineer ended up in a SOC As a product quality engineer, our days are usually spent building/testing the thing — writing code, closing bugs, arguing about edge…
For the latest discoveries in cyber research for the week of 25th May, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES 7-Eleven, the global convenience store chain, confirmed a…
The NIS2 directive asks covered organizations to take a more structured approach to risk management, governance, supply chain security, and incident reporting. It expands the scope of who may be…
At Corelight Labs, our mission is to help organizations stay a step ahead of evolving threats. When our researchers came across Censys’ detailed write-up on ScoutC2, a rapidly growing open-source…
Introduction F5 Labs honeynet sensors recorded a sharp increase in Microsoft Exchange exploitation activity during April 2026, driven primarily by renewed interest in the ProxyShell vulnerability chain. While these vulnerabilities…
Instability linked to the Iran conflict has pushed many organizations across the Middle East to activate continuity plans. In practice, one of the fastest and most common actions was a…
Inside the Cisco Live SOC At Cisco Live AMER, the Security Operations Center (SOC) is more than a demo environment. It is a working security operations center protecting the event…
Executive Summary During the March–April 2026 reporting period, AI use in offensive operations advanced from development and planning to real-time operational deployment. Multiple independent cases, involving individual criminal actors, mass…
Executive summary Rapid7 researchers have identified a sophisticated malware campaign attributed to the threat actor “Dropping Elephant,” characterized by the use of a China-themed decoy document to deliver a heavily…
BitRAT is a potent and versatile Remote Access Trojan (RAT) commonly sold on underground forums. Its popularity stems from a robust feature set and an emphasis on stealth, allowing it…
