All Resources. Research, Reports And News.
Everything Brandefense publishes in one place: blog posts, threat research, reports, security news and whitepapers.
Security News Operation Serengeti III: How INTERPOL’s Latest Sweep Compares With the Last Two
INTERPOL's Operation Serengeti III led to 1,462 arrests in 21 countries. See how it compares with two earlier sweeps and what defenders can take from it.
Security News Laravel Authentication Bypass: A Two-Line Fix in August, the Advisory in October
Laravel's TokenGuard can accept a non-string token on MySQL and MariaDB. Follow the request, see the two-line fix and check your app before you update.
Security News PHP2Shell Across Palo Alto Products: Status and Hotfix Dates
Palo Alto says PHP2Shell affects PAN-OS and Panorama. See the hotfix dates for each release train and the management interface steps to take now.
Security News Nextcloud Collabora CODE Server Flaw: The Five-Step Playbook (CVE-2026-110447)
CISA added CVE-2026-110447 to KEV. Five steps to find the Collabora CODE app, update to 26.4.303, hunt for web shells and rotate secrets.
Security News PHP Warns of a New RCE Path in Session Upload Progress (CVE-2026-115560)
PHP has no patch yet for CVE-2026-115560, an unlikely RCE path in session upload progress. See who is affected and the setting to change now.
Security News UpdraftCentral Keys Stolen: How the WordPress Backdoor Campaign Works
Attackers used stolen UpdraftCentral keys to install backdoor plugins on WordPress sites. See what the developer says, what to check and what to remove.
Security News Next.js Critical RCE Flaws: How to Check Your Patch Landed
Two critical Next.js RCE vulnerabilities were fixed on 14 October. Check sharp, React packages and use cache code, plus what GitHub, X and dark web show.
Security News Kaspersky: Lazarus Hides Malware Payloads With Post-Quantum Encryption in Operation FlashHole
Kaspersky says Lazarus used ML-KEM-1024 in its LPEClient tool to protect payload delivery in Operation FlashHole. What it means and what to check.
Security News Plex2Shell: Four Plex Media Server CVEs Chained Into Remote Code Execution
Plex2Shell chains four Plex Media Server CVEs into remote code execution. CISA lists all four as exploited. See the fixed version and what to check.
All 17 pages
Our Research, By Email.
Questions About All Resources.
Last updated June 17, 2026-
Everything Brandefense publishes in one list: blog posts, threat intelligence research, reports, security news and whitepapers. Use the tabs to show one type only.
-
Type a word in the search box, pick a tab, or filter by year. Each item shows its type and date.
-
New items are added several times a month, newest first. Every item shows its date.
-
Some reports, such as the quarterly Ransomware Trends Report and the country reports, ask for a short form before the download opens. Blog posts, research and security news are read on the page.
-
Use the email box in the Our Research, By Email section on this page and tick the consent box. The Privacy Policy is linked there.
-
Brandefense is an AI-driven threat intelligence company. Its platform covers cyber threat intelligence, digital risk protection and external attack surface management. You can request a demo on your own domain from the Request A Demo page.
-
The page lists 749 items. They include blog posts, Threat Intelligence Researches, reports, security news and whitepapers. The newest come first.
-
Yes. The year filter runs from 2020 to 2026. You can also filter by type, such as Blog, Reports or Whitepapers.
-
Reports are in-depth research, such as quarterly ransomware trends, malware analyses and country reports. Whitepapers are deeper reads that explain attack methods and how to defend against them. Both are listed here.
-
It sits under Threat Intelligence Researches, which has 160 items on this page. They are deep dives into live threats. Use the type filter to show only that group.
Research Is General. Your Exposure Is Not.
A demo of the platform, run on your own domain.