Filter by technique: All T1190 T1486 T1566.002 T1055.001 T1195.001 T1059.001 T1204.002 T1203

Filter by company: All Microsoft Google Huntress Apple Inc. GitHub Amazon Web Services Amazon Meta

• TeamPCP Weekly Analysis: 2026-W18 (2026-04-27 through 2026-05-03), (Mon, May 4th)

  SANS ISC Diaries

  T1195.001 99% T1486 95% T1485 93%
  2 days ago
• Komari Red: The Monitoring Tool with a Built-in Reverse Shell

  Huntress

  T1003.002 98% T1021.002 95% T1021.001 88%
  2026-04-30
• Oracle Quarterly Critical Patches Issued April 21, 2026

  CIS Advisories

  T1574.001 88%
  2026-04-28
• Tradecraft Tuesday Recap: axios npm Supply Chain Compromise

  Huntress

  T1195.001 99% T1566.004 94% T1587 82%
  2026-04-21
• Auditing Salesforce Permission Hierarchies with ForceHound

  NetSPI

  T1525 90% T1654 65% T1588.002 42%
  2026-04-17
• Cracks in the Bedrock: Agent God Mode

  Palo Alto Unit 42

  T1525 93% T1059.009 71% T1526 48%
  2026-04-08
• Supply Chain Compromise of axios npm Package

  Huntress

  T1195.001 99% T1071.001 98% T1059.001 94%
  2026-03-31
• Your AI Gateway Was a Backdoor: Inside the LiteLLM Supply Chain Compromise

  Trend Micro Research

  T1195.001 98% T1552.004 98% T1059.006 87%
  2026-03-26
• Threat Actor Exploits Flaws and Uses Elastic Cloud SIEM to Manage Stolen Data

  Infosecurity Magazine

  T1580 47% T1586.002 45% T1567.001 40%
  2026-03-09
• A Threat Actor Abuses Another Free Trial

  Huntress

  T1190 98% T1059.001 95% T1588.006 40%
  2026-03-06
• Apache ActiveMQ Exploit Leads to LockBit Ransomware

  The DFIR Report

  T1190 100% T1021.001 100% T1486 99%
  2026-02-23
• GrayCharlie Hijacks Law Firm Sites in Suspected Supply-Chain Attack

  Recorded Future Blog

  T1059.001 99% T1071.001 98% T1204.002 97%
  2026-02-18
• Active Exploitation of SolarWinds Web Help Desk (CVE-2025-26399)

  Huntress

  T1112 100% T1059.001 100% T1190 100%
  2026-02-08
• SDFlags | Huntress

  Huntress

  T1482 93% T1069.002 72% T1098.007 64%
  2026-01-15
• The LDAP Whitespace Problem | Huntress

  Huntress

  T1087.002 82% T1654 52%
  2025-12-30
• The OID Problem: Writing LDAP Detections That Actually Work

  Huntress

  T1087.002 98% T1558.003 96% T1003.006 80%
  2025-12-16
• Shai-hulud 2.0 Campaign Targets Cloud and Developer Ecosystems

  Trend Micro Research

  T1195.001 99% T1552.005 90% T1555.006 88%
  2025-11-27
• Breaking Down S3 Ransomware: Variants, Attack Paths and Trend Vision One™ Defenses

  Trend Micro Research

  T1486 95% T1485 92% T1530 77%
  2025-11-18
• Wrangling Windows Event Logs with Hayabusa & SOF-ELK (Part 2)

  Black Hills InfoSec

  T1654 83%
  2025-10-01
• Wrangling Windows Event Logs with Hayabusa & SOF-ELK (Part 1)

  Black Hills InfoSec

  T1654 90%
  2025-09-17
• Enumerating AWS the quiet way: CloudTrail-free discovery with Resource Explorer

  Datadog Security Labs

  T1525 90% T1526 42% T1580 31%
  2025-08-19
• It’s Not Safe To Pay SafePa

  Huntress

  T1548.002 98% T1486 98% T1560.001 98%
  2024-11-14
• Detecting Malicious Use of LOLBins, Pt. II | Huntress

  Huntress

  T1059.001 100% T1218 85% T1218.011 62%
  2024-10-17
• Stop Phishing Yourself: How Auto-Forwarding and Exchange Contacts Can Stab You in the Back

  Black Hills InfoSec

  T1566.002 85%
  2023-09-21
• Wrangling the M365 UAL with PowerShell and SOF-ELK (Part 1 of 3)

  Black Hills InfoSec

  T1059.001 94%
  2023-08-10
• Messing Around With AWS Batch For Privilege Escalations

  Doyensec

  T1525 78% T1552.005 58% T1613 40%
  2023-06-12
• Ave Maria and the Chambers of Warzone RAT | Huntress

  Huntress

  T1059.001 99% T1547.001 97% T1027 96%
  2023-01-31
• Defense Evasion: Defenders Strike Back! | Huntress

  Huntress

  T1486 97% T1556.006 41%
  2022-12-06
• Gifting User Passwords to Adversaries With NPPSPY | Huntress

  Huntress

  T1003.001 99% T1078 69% T1003 67%
  2022-08-16
• Evicting the Adversary | Huntress

  Huntress

  T1021.001 99% T1021.006 99% T1078 67%
  2022-05-10
• How Global Cyberthreats Changed Over 2021

  F5 Labs

  T1046 92%
  2021-12-01
• Webcast: Your Free and Open Source EDR Options!

  Black Hills InfoSec

  T1588.002 56%
  2021-05-19
• 2021 Application Protection Report: Of Ransom and Redemption

  F5 Labs

  T1486 98% T1657 93% T1110.003 92%
  2021-05-18
• Azure Security Basics: Log Analytics, Security Center, and Sentinel

  Black Hills InfoSec

  T1078.004 81% T1526 42%
  2020-11-24
• How To Deploy Windows Optics: Commands, Downloads, Instructions, and Screenshots

  Black Hills InfoSec

  T1564.006 78% T1059.001 43%
  2020-06-17
• Vulnerabilities, Exploits, and Malware Driving Attack Campaigns in December 2019

  F5 Labs

  T1190 98% T1059.004 91% T1059 30%
  2020-01-31
• Vulnerabilities, Exploits, and Malware Driving Attack Campaigns in October 2019

  F5 Labs

  T1190 98% T1059.001 96% T1055.001 80%
  2019-11-26
• Vulnerabilities, Exploits, and Malware Driving Attack Campaigns in August 2019

  F5 Labs

  T1190 98% T1588.006 84% T1059.004 51%
  2019-09-24
• Securing the Cloud: A Story of Research, Discovery, and Disclosure

  Black Hills InfoSec

  T1525 88% T1558.003 86%
  2019-08-21
• Vulnerabilities, Exploits, and Malware Driving Attack Campaigns in February 2019

  F5 Labs

  T1190 98% T1204.002 96% T1588.006 76%
  2019-03-12
• How To Do Endpoint Monitoring on a Shoestring Budget – Webcast Write-Up

  Black Hills InfoSec

  T1059.001 82% T1654 79% T1685.001 75%
  2017-07-10
• Breaking the Endpoint Tax: Aligning Security With Risk

  BankInfoSecurity

  T1014 35% T1068 34% T1547.006 32%
• Breaking the Endpoint Tax: Aligning Security With Risk

  GovInfoSecurity

  T1014 35% T1068 34% T1547.006 32%