Actionable Cyber Threat Intelligence Blog | KELA...

Cyber Intelligence Hub

Reduce your cyber risk and enhance your security posture with our expert resources. We provide the intelligence and strategies you need to protect your organization from evolving cyber threats.
AllCTICybercrimeDark Web
a black background with red text that says beyond the engine
CTI

March 30, 2026

Beyond the Regime: How Iran Weaponizes Cybercrime and Ransomware TacticsWhen U.S. organizations think of ransomware, the immediate image is often a financially motivated, Eastern European cybercriminal cartel operating a massive Ransomware-as-a-Service (RaaS) empire. Howe
a magnifying glass with the words kela on it
Threat Actor Spotlight

March 26, 2026

Law enforcement seizes Leakbase The Event: Operation Leak dismantling a major hub
a group of people sitting in front of a crowd
CTI

March 21, 2026

Beyond Threat Intelligence. Practical Resilience Lessons from SASIG at Lloyd’s of London.
The Fearless CIO: Why "Yes" to AI is the Only Secure Answer in 2026
CTI

February 6, 2026

The Fearless CIO: Why "Yes" to AI is the Only Secure Answer in 2026Control AI adoption and eliminate the 'Productivity Tax' of shadow AI usage. Discover how an Intelligence-Led strategy uses CTI to replace blind restriction with radical enablement, providing a silent
the openclaw paradox how your personal ai become an open door for
CTI

January 31, 2026

The OpenClaw Paradox: How Your Personal AI Became an Open Door for HackersOpenClaw and MoltBook are redefining personal AI through a "Local First" lens, yet this very architecture has created a critical security paradox by exposing unencrypted digital footprints to global t
The High Price of Poor OPSEC: Inside the r1z Initial Access Broker Case
Threat Actor Spotlight

January 21, 2026

The High Price of Poor OPSEC: Inside the r1z Initial Access Broker Case The r1z case shows how initial access brokers monetize firewall exploits and enterprise access at scale, while the actor’s OPSEC failures leave long-term attribution trails that expose the ransomware
The Handala Hack: Telegram Breach of Israeli Officials
Cybercrime

January 1, 2026

The Handala Hack: Telegram Breach of Israeli OfficialsHandala targeted Israeli officials by compromising Telegram accounts - not devices - likely through session hijacking and social engineering . The incident exposes critical vulnerabilities in session
a picture of a dragon head on a white background
Threat Actor Spotlight

December 7, 2025

Ransomware Threat Actor Profile: QilinThis comprehensive analysis examines the Qilin ransomware-as-a-service group, which has emerged as a major cyberthreat since 2022. The post documents their aggressive campaign from August-September 20
Hellcat Hacking Unmasked
Cybercrime

November 27, 2025

UPDATE - Hellcat Hacking Group Unmasked: Investigating Rey and PryxKELA reveals the real identities behind Rey and Pryx, the key players driving Hellcat’s cybercrime operations. From high-profile data breaches to controversial online activities, our investigation unc