Filter by technique: All T1190 T1486 T1566.002 T1055.001 T1195.001 T1059.001 T1204.002 T1203

Filter by company: All Intel Recorded Future Kaseya

• Cleartext Passwords in MS Edge? In 2026?, (Mon, May 4th)

  SANS ISC Diaries

  T1555.003 100% T1003.001 76%
  1 day ago
• UAT-8302 and its box full of malware

  Cisco Talos Intelligence

  T1053.005 100% T1087.002 98% T1055.001 97%
  1 day ago
• [local] Linux nf_tables 6.19.3 - Local Privilege Escalation

  Exploit-DB

  T1068 98% T1027.001 87% T1059.004 73%
  2 days ago
• Weekly Threat Bulletin – April 29th, 2026

  F5 Labs

  T1195.001 99% T1190 98% T1003.001 93%
  2026-04-29
• UNC6692 Impersonates IT Help Desk via Microsoft Teams to Deploy SNOW Malware

  The Hacker News

  T1684.001 96% T1021.006 95% T1566.004 83%
  2026-04-23
• Snow Flurries: How UNC6692 Employed Social Engineering to Deploy a Custom Malware Suite

  Mandiant

  T1053.005 100% T1572 98% T1550.002 96%
  2026-04-23
• [local] Throttlestop Kernel Driver - Kernel Out-of-Bounds Write Privilege Escalation

  Exploit-DB

  T1068 99% T1003.001 95% T1055.001 89%
  2026-04-22
• Storm-1175 focuses gaze on vulnerable web-facing assets in high-tempo Medusa ransomware operations

  Microsoft Threat Intelligence

  T1219 99% T1003.001 98% T1190 98%
  2026-04-06
• How a Tax Search Leads to Kernel-Mode AV/EDR Kill

  Huntress

  T1003.001 99% T1055.001 99% T1219 97%
  2026-03-19
• Ransomware Under Pressure: Tactics, Techniques, and Procedures in a Shifting Threat Landscape

  Mandiant

  T1486 100% T1219 100% T1112 99%
  2026-03-16
• “Handala Hack” – Unveiling Group’s Modus Operandi

  Check Point Research

  T1485 97% T1588.002 96% T1486 92%
  2026-03-12
• Apache ActiveMQ Exploit Leads to LockBit Ransomware

  The DFIR Report

  T1190 100% T1021.001 100% T1486 99%
  2026-02-23
• DynoWiper update: Technical analysis and attribution

  ESET WeLiveSecurity

  T1485 98% T1486 92% T1484.001 69%
  2026-01-30
• MuddyWater: Snakes by the riverbank

  ESET WeLiveSecurity

  T1555.003 100% T1059.001 99% T1547.001 98%
  2025-12-02
• From Bing Search to Ransomware: Bumblebee and AdaptixC2 Deliver Akira

  The DFIR Report

  T1486 99% T1003.003 99% T1218.007 98%
  2025-11-04
• The Rise of Collaborative Tactics Among China-aligned Cyber Espionage Campaigns

  Trend Micro Research

  T1190 97% T1003.001 93% T1055.001 87%
  2025-10-22
• From a Single Click: How Lunar Spider Enabled a Near Two-Month Intrusion

  The DFIR Report

  T1218.011 100% T1055.001 100% T1555.003 99%
  2025-09-29
• Blurring the Lines: Intrusion Shows Connection With Three Major Ransomware Gangs

  The DFIR Report

  T1003.001 100% T1046 99% T1021.001 99%
  2025-09-08
• Warlock: From SharePoint Vulnerability Exploit to Enterprise Ransomware

  Trend Micro Research

  T1486 100% T1190 99% T1069.001 97%
  2025-08-20
• Information to Insights: Intrusion Analysis Methodology

  Huntress

  T1021.001 99% T1110 98% T1003.001 97%
  2025-07-30
• Hide Your RDP: Password Spray Leads to RansomHub Deployment

  The DFIR Report

  T1078 100% T1486 99% T1003.001 99%
  2025-06-30
• Same Sea, New Phish: Russian Government-Linked Social Engineering Targets App-Specific Passwords

  Citizen Lab

  T1621 96% T1566.001 69% T1566.002 65%
  2025-06-18
• How Huntress Addresses Lateral Movement

  Huntress

  T1021.001 97% T1003.001 92% T1021.006 92%
  2025-06-12
• Another Confluence Bites the Dust: Falling to ELPACO-team Ransomware

  The DFIR Report

  T1003.001 100% T1021.001 99% T1021.002 99%
  2025-05-19
• Time to Ransom is Money

  Huntress

  T1003.001 100% T1486 98% T1550.002 81%
  2025-05-13
• Credential Theft: Expanding Your Reach, Pt. II

  Huntress

  T1003.003 96% T1003.001 32%
  2025-04-24
• Ransomware Initial Access Brokers Exposed

  Huntress

  T1110 97% T1003.001 90% T1486 88%
  2025-04-10
• Offline Memory Forensics With Volatility

  Black Hills InfoSec

  T1003.002 95% T1003.004 77% T1003.001 34%
  2025-04-08
• Credential Theft: Initial Access, Mimikatz & More | Huntress

  Huntress

  T1003.001 100% T1003.003 99% T1003.002 97%
  2025-04-08
• The Nearest Neighbor Attack: How A Russian APT Weaponized Nearby Wi-Fi Networks for Covert Access

  Volexity

  T1078 99% T1003.003 99% T1490 97%
  2024-11-22
• Curling for Data: A Dive into a Threat Actor's Malicious TTPs | Huntress

  Huntress

  T1003.001 99% T1005 84% T1219 79%
  2023-12-14
• Improved Security and Backups Result in Record Low Number of Ransomware Payments

  Coveware

  T1021.002 99% T1486 97% T1485 95%
  2023-01-20
• Gifting User Passwords to Adversaries With NPPSPY | Huntress

  Huntress

  T1003.001 99% T1078 69% T1003 67%
  2022-08-16
• Impacket Defense Basics With an Azure Lab

  Black Hills InfoSec

  T1557.001 89% T1558.003 88% T1003.006 82%
  2022-07-26
• Is This Thing On?

  Black Hills InfoSec

  T1003.001 100% T1059.001 100% T1564.004 98%
  2021-05-26
• Rapid Response: Mass Exploitation of On-Prem Exchange Servers | Huntress

  Huntress

  T1190 99% T1059.001 99% T1505.003 90%
  2021-03-03
• A Sysmon Event ID Breakdown – Updated to Include 29!!

  Black Hills InfoSec

  T1070.004 100% T1574.001 98% T1021.001 97%
  2021-01-08
• How to Hack Hardware using UART

  Black Hills InfoSec

  T1542.001 80% T1003.001 59%
  2019-09-03
• Windows IIS 6.0 CVE-2017-7269 is Targeted Again to Mine Electroneum

  F5 Labs

  T1059.005 95% T1218.010 84% T1204.002 72%
  2018-04-12
• Power Posing with PowerOPS

  Black Hills InfoSec

  T1003.001 100% T1059.001 100%
  2017-01-25
• Red + Blue = Purple

  Black Hills InfoSec

  T1110.003 97% T1059.001 94% T1218.011 81%
  2016-10-26
• Your Password Is… wait for it… NOT Always Encrypted

  Black Hills InfoSec

  T1003.001 100% T1552.001 77% T1552.006 75%
  2016-01-15