Mimikatz

DFIR: From alert to root cause using Osquery without leaving Elastic Security

Silent Ransom Group - Leak Analysis

Stray Cat, Open Doors: How k0t Wanders Through the Network Edge

Hackers Breach Enterprise Firewalls and Vpns, Exposing over 70,000 Credentials

Stray Cat, Open Doors: How K0t Wanders Through the Network Edge

Cato CTRL™ Threat Research: Operation Poisson – Analyzing a Cybercriminal’s Entire Operation

Github Ghostpack/safetykatz: Safetykatz is a Combination of Slightly Modified Version of @gentilkiwi's Mimikatz Project and @subtee's .net Pe Loader

Taiwan High Tech Ecosystem Targeted by Foreign Apt Group:

ORKL Report

Why Are You Texting Me? Unc3944 Leverages Sms Phishing Campaigns for Sim Swapping, Ransomware, Extortion, and Notoriety

ORKL Report

Ransomware Landscape in H1 2025: Statistics and Key Issues

Detailed Analysis of DragonForce Ransomware

Threat Actor Profile: APT27

Scattered Spider: Social Engineering Meets Cloud Ransomware Tactics

Flash Alert: EtherRat and TukTuk C2 End in The Gentleman Ransomware

Blurring the Lines: Intrusion Shows Connection With Three Major Ransomware Gangs

An Open Server, an Exposed Toolkit Inside a Viva Aerobus-Linked Intrusion

From Campus to C2: Tracking a Persistent Chinese Operation Against Vietnamese Universities

Defender Exclusion Abuse: How Attackers Hide Malware from MDAV

Hunting Feral Wolf: new tools and techniques

SynkLoader Malware Spreads Through Microsoft Teams Phishing and Steals Windows Passwords

CISA Warns of Medusa Ransomware-as-a-Service Attacks Over 300 Organizations

Storm-1175 Deploys New StormEncryptor Ransomware, Likely Exploiting N-able Flaw

The Gentlemen Ransomware Affiliate Deploys EtherRAT via Ethereum Smart Contract C2

New Cross-Platform Ransomware Encrypts Windows, Linux, and VMware Infrastructure

Toy Ghouls’ new toy: the GenieLocker ransomware

GoSerpent: a persistent threat evolves with sophisticated data collection and exfiltration

Hackers Scan CMS Websites Globally to Deploy Webshells and Steal Credentials

Threat Actor Uses Steganographic Webshell and Defence Impairment Before Mimikatz Execution