Threat Intelligence RSS Feeds

Directory59 threat intelligence feeds · 22 articles

Latest

Threat Intelligence articles

Live SSH Honeypot Telemetry Dashboard for Security Research

This dashboard displays live telemetry from an SSH honeypot for security research, threat intelligence, and educational purposes.

Insighttechnologyeducationcybersecurityhoneypotlive.cc·Hacker News: Front Page·2mo ago·1 min read

A SOC Analyst's Guide to Proactive Threat Hunting with the MITRE ATT&CK Framework

technologyeducation

Shared by @undercode.bsky.social ↗

undercodetesting.com3mo ago

Kratos PhaaS Operation Targets Microsoft 365 Users in US and EU: Analysis of Credential Theft Infrastructure

Insighttechnologycybersecurity

Shared by @r-redteamsec.bsky.social ↗

any.run3mo ago

FortiBleed, AI-Powered Attacks, and Cloud Logging Abuse: The 2026 Cybersecurity Threat Landscape

Insighttechnologycybersecurity

Shared by @undercode.bsky.social ↗

undercodetesting.com3mo ago

Google Threat Intelligence Analyzes Turla's STOCKSTAY .NET Backdoor Used in Cyber Espionage Against Ukraine and Europe

Google Threat Intelligence Group analyzed STOCKSTAY, a .NET backdoor used by Turla for cyber espionage against Ukraine and European targets, and detailed its multi-component architecture, deployment methods, and overlaps with KAZUAR. The re...

Insighttechnologysecuritythreat intelligence

hendryadrian.com·@hendryadrian.bsky.social·3mo ago·5 min read

Report: 49% of ransomware victims only detect attacks after data is stolen, up from 31% last year

Hackers are getting better at hiding and stealing files without raising alarms.

Newstechnologycybersecuritybusiness

techradar.com·@nono2357.bsky.social·3mo ago·3 min read

Backdoor.Mistic: New stealthy backdoor linked to ransomware access broker Woodgnat

Stealthy new backdoor used in cybercrime intrusions since April 2026 may be associated with Woodgnat (aka KongTuke), an initial access broker whose ModeloRAT toolkit has fed Qilin and other ransomware operations.

Newstechnologycybersecuritynews

security.com·@r-blueteamsec.bsky.social·3mo ago·7 min read

FortiBleed campaign targets 430,000+ FortiGate firewalls with custom credential-stealing sniffer

Newstechnologycybersecurity

Shared by @hendryadrian.bsky.social ↗

hendryadrian.com3mo ago

Multi-Stage Cyberattack Campaign Uses RAR Archives to Target Thailand's Healthcare Sector

Newstechnologycybersecurity

Shared by @hendryadrian.bsky.social ↗

hendryadrian.com3mo ago

Russian GRU Unit 26165 Expands Communications-Layer Collection via Router Compromises, DNS Hijacking, and Messaging App Phishing

Insighttechnologypolitics

Shared by @hendryadrian.bsky.social ↗

hendryadrian.com3mo ago

How to Turn Behavioral Threat Intelligence into Actionable Security Defenses: A Technical Playbook

technologyeducation

Shared by @undercode.bsky.social ↗

undercodetesting.com3mo ago

Advanced Scam Intelligence: From Awareness to Threat Intelligence Analysis

Insighttechnologyeducation

Shared by @ghostyjoe06.bsky.social ↗

medium.com4mo ago

How Hackers Shift Between Silent Reconnaissance and Collaborative Exploitation: A Technical Analysis

Insighttechnologysecurity

Shared by @undercode.bsky.social ↗

undercodetesting.com4mo ago

Akira Ransomware Attack: Hypervisor Compromise, VM Creation, and Data Exfiltration via LimeWire

A threat actor breached a victim environment, accessed a hypervisor, created a new virtual machine, and used it to stage and launch Akira ransomware. The investigation also found use of Easyupload.io via LimeWire, WinRAR, and WinSCP for sta...

Newstechnologycybersecuritythreat intelligence

hendryadrian.com·@hendryadrian.bsky.social·4mo ago·1 min read

Palo Alto Networks report finds 52% of direct-to-IP threats evade intelligence feeds

Newstechnologycybersecurity

Shared by @helpnetsecurity.com ↗

helpnetsecurity.com4mo ago

Operation Desert Hydra: An AI-Assisted CTI Pipeline for MuddyWater Threat Detection Using OpenCTI and Kibana

technologyeducation

Shared by @infosec.skyfleet.blue ↗

infosecwriteups.com4mo ago

Proofpoint Warns of TA4922 Cybercrime Group Deploying Multiple Malware Strains Across Global Targets

Newstechnologycybersecurity

Shared by @infosec.skyfleet.blue ↗

cybersecuritynews.com4mo ago

RomCom Threat Actor: A Sophisticated Cyber Espionage Group Targeting Ukraine and NATO

Insighttechnologysecurity

Shared by @princedavidfunk.bsky.social ↗

malpedia.caad.fkie.fraunhofer.de4mo ago

ransomware.live5

SOC Prime16

mallory.ai2

RansomLook1

Searchlight Cyber3

darkwebinformer.com1

SOCRadar1

seqrite.com27

ransom-isac.org2

Red Canary1

Live SSH Honeypot Telemetry Dashboard for Security Research

A SOC Analyst's Guide to Proactive Threat Hunting with the MITRE ATT&CK Framework

Kratos PhaaS Operation Targets Microsoft 365 Users in US and EU: Analysis of Credential Theft Infrastructure

FortiBleed, AI-Powered Attacks, and Cloud Logging Abuse: The 2026 Cybersecurity Threat Landscape

Google Threat Intelligence Analyzes Turla's STOCKSTAY .NET Backdoor Used in Cyber Espionage Against Ukraine and Europe

Report: 49% of ransomware victims only detect attacks after data is stolen, up from 31% last year

Backdoor.Mistic: New stealthy backdoor linked to ransomware access broker Woodgnat

FortiBleed campaign targets 430,000+ FortiGate firewalls with custom credential-stealing sniffer

Multi-Stage Cyberattack Campaign Uses RAR Archives to Target Thailand's Healthcare Sector

Russian GRU Unit 26165 Expands Communications-Layer Collection via Router Compromises, DNS Hijacking, and Messaging App Phishing

How to Turn Behavioral Threat Intelligence into Actionable Security Defenses: A Technical Playbook

Advanced Scam Intelligence: From Awareness to Threat Intelligence Analysis

How Hackers Shift Between Silent Reconnaissance and Collaborative Exploitation: A Technical Analysis

Akira Ransomware Attack: Hypervisor Compromise, VM Creation, and Data Exfiltration via LimeWire

Palo Alto Networks report finds 52% of direct-to-IP threats evade intelligence feeds

Operation Desert Hydra: An AI-Assisted CTI Pipeline for MuddyWater Threat Detection Using OpenCTI and Kibana

Proofpoint Warns of TA4922 Cybercrime Group Deploying Multiple Malware Strains Across Global Targets

RomCom Threat Actor: A Sophisticated Cyber Espionage Group Targeting Ukraine and NATO