Cyber Intelligence Hub

Reduce your cyber risk and enhance your security posture with our expert resources. We provide the intelligence and strategies you need to protect your organization from evolving cyber threats.
AllCTICybercrimeDark Web
TeamPCP, (UNC6780), evolved from a Telegram-based stolen data broker into the actor behind a supply chain cascade that has compromised Trivy, Checkmarx KICS, LiteLLM, and hundreds

August 28, 2026

TeamPCP: When the scanner is the attacker preview image
macOS Infostealers: How Hackers Target Apple Devices
Infostealers

September 2, 2026

macOS Infostealers: How Hackers Target Apple DevicesmacOS infostealers such as Atomic Stealer and Poseidon abuse native Apple tooling, Keychain Services and AppleScript, to harvest browser credentials, cloud tokens and SSH keys from Mac endpoints. Sold
Dark Web Monitoring for Modern Cybersecurity
Dark Web

September 2, 2026

Dark Web Monitoring: A Critical Component of Modern CybersecurityA practical breakdown of the surface, deep, and dark web, how threat actors monetize stolen corporate data, and why proactive dark web monitoring has become essential to detecting breaches early and r
The 2026 CISO checklist for a resilience-first, pre-breach defense.
Risk Protection

September 2, 2026

CISO Checklist 2026: Threat-Informed Prep for the Year AheadTraditional perimeter defenses fail against agentic AI attacks that collapse network breakout times to 27 seconds. CISOs must pivot to a Resilience-First Framework built on the Minimum Viable Business
Ransomware 5.0: A 2026 CISO Guide to AI-Driven Attacks
Compliance

September 2, 2026

The Gap In Today's Models, Frameworks and Regulatory ComplianceMost security tools only show parts of the attacker journey, which leaves gaps in how exposure is understood and acted on. KELA connects identity risk, threat actor intelligence, and external exposure
CRPx0 ransomware operation and affiliate service overview
Cybercrime

August 26, 2026

CRPx0 - Threat Actor ProfileCRPx0 is a rapidly expanding ransomware operation combining data theft, cryptocurrency theft, file encryption, and RaaS, with KELA linking the operation to the cybercriminal persona “MrAnon00”.
OilRig
CTI

July 22, 2026

Iran's APTs and the U.S. Enterprise in 2026: APT34 (OilRig)Post 5 of 5. APT34 is Iran's most technically mature espionage operation. A decade of refinement turned it into a group that barely needs malware: it takes your credentials, your Exchange server, and
Prince of Persia
CTI

July 22, 2026

Iran's APTs and the U.S. Enterprise in 2026: Prince of Persia (Infy)Post 4 of 5. How a group that has survived takedowns, sinkholes and dormancy since 2007 reinvents itself faster than the industry can publish on it, and why, when researchers finally mapped its live v
APT42
CTI

July 22, 2026

Iran's APTs and the U.S. Enterprise in 2026: APT42Post 3 of 5. How an IRGC-subordinated espionage group spends weeks building trust on LinkedIn and WhatsApp before it sends a single malicious link, and why its most effective intrusions increasingly l
MuddyWater
CTI

July 22, 2026

Iran's APTs and the U.S. Enterprise in 2026: MuddyWaterPost 2 of 5 - How a MOIS-subordinated espionage group with a reputation for moderate technical sophistication came to target U.S. banking, a major U.S. airport, and, according to public reporting, a J