Triaging the Week 108

AI-augmented attacks, state-sponsored RaaS, and blockchain C2 are defining the new cyber landscape in triaging the week 108.

AI-augmented attacks, state-sponsored RaaS, and blockchain C2 are defining the new cyber landscape in triaging the week 108.

Want to become a CTI analyst? This guide maps the 3-stage pathway from IT support to SOC to cyber threat intelligence. Start your journey here.

New AI-driven malware, a surge in supply chain attacks, and critical vulnerabilities found in major password managers in triaging the week 107.

AI in the crosshairs: State-sponsored espionage, cloud worms, and supply chain attacks dominate in triaging the week 106.

Supply chain attacks, AI-centric vulnerabilities, abused kernel drivers, and AI assistant marketplaces hit hard in triaging the week 105.

Destructive nation-state attacks, new AI-weaponized malware, critical zero-day vulnerabilities, supply-chain attacks affecting NPM and PyPI, and 175K exposed Ollama AI servers in triaging the week 104.

AI-coded malware, weaponized extensions, social engineering the help desk, and exploiting zero-days across critical infrastructure. All in this week's edition of triaging the week.

Learn how data engineering for CTI can transform your threat intelligence team from reactive to proactive. A complete guide with actions.

Quishing and Browser-in-the-Browser attacks steal credentials, exploitation of LLM services and automation platforms, a massive leak of BreachForums accounts, and urgent patches for Cisco and Fortinet in triaging the week 102.

State-sponsored espionage, active exploitation of critical vulnerabilities in legacy hardware and popular software, and new malware campaigns targeting cloud services and user credentials in triaging the week 101.

State-sponsored espionage using Windows Group Policy, new malware (SantaStealer, PyStoreRAT, DocSwap) distributed through phishing, fake GitHub repos, and compromised app stores in triaging the week 100.

Learn how FlowViz transforms threat reports into visual attack flows in seconds. Turn 40-page PDFs into MITRE ATT&CK-mapped diagrams with AI automation.

Active exploitation of the critical "React2Shell" vulnerability, malicious VSCode extensions target developers, and urgent security warnings for Fortinet, Ivanti, and Docker Hub users in triaging the week 099.

Critical supply chain vulnerabilities, compromised browser extensions, maximum-severity RCE flaws in React frameworks, and the rise of malicious AI models in triaging the week 098.
Discover why the Unified Kill Chain is the framework CTI analysts need. Learn how it fixes the Cyber Kill Chain's flaws and complements MITRE ATT&CK.