Responder

Swallowtail: Russian Espionage Group Targets Defense Firms in Two NATO Countries

A Series of Unauthenticated Events: Chained Exploitation of Ivanti Connect Secure Zero-Days

Github Yankywilson/jdy Botnet Threat Analysis: Defensive Cti Analysis of the Jdy Reconnaissance Botnet (china Nexus, Volt Typhoon / Kv Lineage, Mitre G1017): Mips64 Implant Reverse Engineering, Infrastructure Enumeration, Tiered Intelligence Reporting, Sigma/yara Detections, and a Tasking Decryptor. Tlp:clear.

So Your CFO's Phone Has Been Pwned: A DFIR Journey

SMTP is the key: BPFDoor and AVERAT hitting the network edge

Infrastructure Destruction Squad / BLACKNET-00: Ransomware, Firebase and ICS Tooling

Ransomware incidents in Japan in the first half of 2026: Investigation of The Gentlemen’s infrastructure and evidence of Qilin's AI use

Counterfeit installers to system compromise: Tracking a deceptive software download campaign

Access Broker Steals Kerberos Secrets to Gain Permanent Control of Enterprise Domains