PRODAFT: Swiss Cybersecurity Company Tracking DevMan RaaS
PRODAFT is a Swiss cybersecurity company that tracks the DevMan ransomware-as-a-service operation under the name Funky Mantis. The company published an extensive…
Tag: threat intelligence
Elastic Security Labs: Cybersecurity Research and Threat Intelligence
The cybersecurity arm of Elastic, providing threat research and intelligence, including detection of the REF9403 campaign.
Kaspersky: Reports on Nimbus Manticore’s New Tools
Kaspersky, a global cybersecurity company, recently reported on Nimbus Manticore's use of the NightLedger backdoor and custom WebSocket tunnelers. Their findings contribute…
SOCRadar Threat Research Unit Uncovers AnonyMousKIT
SOCRadar's threat research unit identified and analyzed the AnonyMousKIT platform, detailing its operations, infrastructure, and impact on Apple device owners.
Flare: Cyber Threat Intelligence and Digital Risk Monitoring
Flare is a cybersecurity company that provides threat intelligence and digital risk monitoring. Flare security researcher Assaf Morag commented on EvilTokens, noting…
BitSight Reports RondoDox Exploitation of Ray Flaw
BitSight, a security ratings company, published a report in March 2026 revealing that the RondoDox DDoS botnet had incorporated CVE-2025-62593 into its…
Proofpoint: Cybersecurity and Compliance Solutions
Proofpoint is a cybersecurity company specializing in email security, threat intelligence, and compliance. Proofpoint assessed NovaCookies as a variant of the Sneaky…
Cisco Catalyst SD-WAN Zero-Day CVE-2026-20245 Exploited for Root Access
An unknown threat actor exploited a recently disclosed high-severity security flaw impacting Cisco Catalyst SD-WAN as a zero-day at least two months…
Mandiant: Documentation of UNC3886’s VMCI Use
Mandiant is a cybersecurity company that documented UNC3886's use of VMware VMCI sockets for persistence between ESXi hosts and guest VMs, a…
Unit 42 Reports on TeamPCP Campaign
Unit 42 published figures on the TeamPCP campaign, estimating over 1,000 compromised organizations and 500,000 stolen credentials, though hedged as potential exfiltration.