Threat Research
Claimed Twice: Five Reasons the Same Ransomware Victim Shows Up Under Two Flags
Here is a ransomware trend that is becoming more frequent in 2026: The same victim organizations are posted twice, under two different flags. This is occurring frequently enough that we stopped treating ...
Bitdefender Threat Debrief | June 2026
Why Are Leading Ransomware Groups Claiming the Same Victims? ...
Emulating the Gentlemen Ransomware
AttackIQ has released two new assessments that emulate the behaviors of The Gentlemen ransomware, a cross-platform threat that emerged around July 2025. The group employs a double-extortion model, combining file encryption with ...
FamousSparrow APT Targets Azerbaijani Oil and Gas Industry
I'd like to thank my co-author, Martin Zugec, for his valuable contributions to this report ...
Technical Advisory: ShinyHunters Breach of Instructure Canvas LMS
[CRITICAL] | Active extortion campaign | Exposure window closed | Credential rotation and phishing defense required ...
How Chrome’s New AI Web APIs Are Enabling Hardware Fingerprinting
Chrome's new AI Web APIs have strict hardware requirements that expose device capabilities—creating a powerful new tool for bot detection and fingerprinting ...
Bitdefender at Black Hat Asia 2026: Disrupt Attacker Playbooks
Black Hat Asia 2026 is a moment for the region to come together, and it’s a critical time to do so. Across APAC, digital transformation is accelerating. AI adoption, distributed workforces, and ...
Emulating the Persuasive NightSpire Ransomware
AttackIQ has released a new attack graph that emulates the behaviors of NightSpire Ransomware, a financially motivated ransomware and data extortion group that emerged in early 2025 and quickly evolved into a ...
What Mythos Reveals About Zero Trust’s Scope Problem
The coverage of Anthropic’s Mythos Red Team report has followed a predictable arc: a sensational headline, reactions ranging from alarm to dismissal, and little engagement with what the research actually demonstrates. That ...

