Threat Intelligence RSS Feeds

Directory50 threat intelligence feeds · 21 articlesShow all languages →

Latest

Threat Intelligence articles

A SOC Analyst's Guide to Proactive Threat Hunting with the MITRE ATT&CK Framework

Mastering the MITRE ATT&CK Matrix: The Ultimate SOC Analyst’s Playbook for 2026 Threat Hunting + Video - "Undercode Testing": Monitor hackers like a pro. Get

technologyeducationcybersecurity

undercodetesting.com·Tech by Flipboard·1d ago·4 min read

Kratos PhaaS Operation Targets Microsoft 365 Users in US and EU: Analysis of Credential Theft Infrastructure

Insighttechnologycybersecurity

Shared by @r-redteamsec.bsky.social ↗

any.run2d ago

FortiBleed, AI-Powered Attacks, and Cloud Logging Abuse: The 2026 Cybersecurity Threat Landscape

Insighttechnologycybersecurity

Shared by @undercode.bsky.social ↗

undercodetesting.com11d ago

Google Threat Intelligence Analyzes Turla's STOCKSTAY .NET Backdoor Used in Cyber Espionage Against Ukraine and Europe

Insighttechnologysecurity

Shared by @hendryadrian.bsky.social ↗

hendryadrian.com20d ago

Report: 49% of ransomware victims only detect attacks after data is stolen, up from 31% last year

Hackers are getting better at hiding and stealing files without raising alarms.

Newstechnologycybersecuritybusiness

techradar.com·Tech by Flipboard·20d ago·3 min read

Backdoor.Mistic: New stealthy backdoor linked to ransomware access broker Woodgnat

Stealthy new backdoor used in cybercrime intrusions since April 2026 may be associated with Woodgnat (aka KongTuke), an initial access broker whose ModeloRAT toolkit has fed Qilin and other ransomware operations.

Newstechnologycybersecuritynews

security.com·Tech by Flipboard·20d ago·7 min read

FortiBleed campaign targets 430,000+ FortiGate firewalls with custom credential-stealing sniffer

SOCRadar says the FortiBleed campaign targeted more than 430,000 FortiGate firewalls and used a custom tool called FortigateSniffer to capture authentication traffic and steal credentials from compromised devices. The attackers allegedly ab...

Newstechnologycybersecuritynews

hendryadrian.com·Tech by Flipboard·24d ago·1 min read

Multi-Stage Cyberattack Campaign Uses RAR Archives to Target Thailand's Healthcare Sector

Newstechnologycybersecurity

Shared by @hendryadrian.bsky.social ↗

hendryadrian.com26d ago

Russian GRU Unit 26165 Expands Communications-Layer Collection via Router Compromises, DNS Hijacking, and Messaging App Phishing

Insighttechnologypolitics

Shared by @hendryadrian.bsky.social ↗

hendryadrian.com1mo ago

How to Turn Behavioral Threat Intelligence into Actionable Security Defenses: A Technical Playbook

technologyeducation

Shared by @undercode.bsky.social ↗

undercodetesting.com1mo ago

Advanced Scam Intelligence: From Awareness to Threat Intelligence Analysis

Insighttechnologyeducation

Shared by @ghostyjoe06.bsky.social ↗

medium.com1mo ago

How Hackers Shift Between Silent Reconnaissance and Collaborative Exploitation: A Technical Analysis

Insighttechnologysecurity

Shared by @undercode.bsky.social ↗

undercodetesting.com1mo ago

Akira Ransomware Attack: Hypervisor Compromise, VM Creation, and Data Exfiltration via LimeWire

Newstechnologycybersecurity

Shared by @hendryadrian.bsky.social ↗

hendryadrian.com1mo ago

Palo Alto Networks report finds 52% of direct-to-IP threats evade intelligence feeds

Securing IP connections requires more than reputation data as attackers use AI and direct-to-IP traffic to avoid detection.

Newstechnologycybersecuritybusiness

helpnetsecurity.com·Tech by Flipboard·1mo ago·4 min read

Operation Desert Hydra: An AI-Assisted CTI Pipeline for MuddyWater Threat Detection Using OpenCTI and Kibana

technologyeducation

Shared by @infosec.skyfleet.blue ↗

infosecwriteups.com1mo ago

Proofpoint Warns of TA4922 Cybercrime Group Deploying Multiple Malware Strains Across Global Targets

Newstechnologycybersecurity

Shared by @infosec.skyfleet.blue ↗

cybersecuritynews.com1mo ago

RomCom Threat Actor: A Sophisticated Cyber Espionage Group Targeting Ukraine and NATO

Insighttechnologysecurity

Shared by @princedavidfunk.bsky.social ↗

malpedia.caad.fkie.fraunhofer.de1mo ago

Analysis: Sophisticated Backdoor Campaign Targets Ivanti EPMM Using Dormant Shells

Insighttechnologycybersecurity

defusedcyber.com5mo ago

mallory.ai2

RansomLook1

SOCRadar1

ransom-isac.org2

SOC Prime16

seqrite.com27

Red Canary1

A SOC Analyst's Guide to Proactive Threat Hunting with the MITRE ATT&CK Framework

Kratos PhaaS Operation Targets Microsoft 365 Users in US and EU: Analysis of Credential Theft Infrastructure

FortiBleed, AI-Powered Attacks, and Cloud Logging Abuse: The 2026 Cybersecurity Threat Landscape

Google Threat Intelligence Analyzes Turla's STOCKSTAY .NET Backdoor Used in Cyber Espionage Against Ukraine and Europe

Report: 49% of ransomware victims only detect attacks after data is stolen, up from 31% last year

Backdoor.Mistic: New stealthy backdoor linked to ransomware access broker Woodgnat

FortiBleed campaign targets 430,000+ FortiGate firewalls with custom credential-stealing sniffer

Multi-Stage Cyberattack Campaign Uses RAR Archives to Target Thailand's Healthcare Sector

Russian GRU Unit 26165 Expands Communications-Layer Collection via Router Compromises, DNS Hijacking, and Messaging App Phishing

How to Turn Behavioral Threat Intelligence into Actionable Security Defenses: A Technical Playbook

Advanced Scam Intelligence: From Awareness to Threat Intelligence Analysis

How Hackers Shift Between Silent Reconnaissance and Collaborative Exploitation: A Technical Analysis

Akira Ransomware Attack: Hypervisor Compromise, VM Creation, and Data Exfiltration via LimeWire

Palo Alto Networks report finds 52% of direct-to-IP threats evade intelligence feeds

Operation Desert Hydra: An AI-Assisted CTI Pipeline for MuddyWater Threat Detection Using OpenCTI and Kibana

Proofpoint Warns of TA4922 Cybercrime Group Deploying Multiple Malware Strains Across Global Targets

RomCom Threat Actor: A Sophisticated Cyber Espionage Group Targeting Ukraine and NATO

Analysis: Sophisticated Backdoor Campaign Targets Ivanti EPMM Using Dormant Shells