All Resources. Research, Reports And News.
Everything Brandefense publishes in one place: blog posts, threat research, reports, security news and whitepapers.
Threat Intelligence Researches Node2Shell: Node.js Brotli RCE (CVE-2026-111497), Fixed Versions and How to Check
Node2Shell, or HTTP2Shell (CVE-2026-111497), is a Node.js Brotli RCE flaw. Fixed in 22.23.4, 24.22.1 and 26.12.1. See who is exposed and what to do.
Threat Intelligence Researches PHP2Shell Timeline: The First 60 Hours, in Data
PHP2Shell timeline of the first 60 hours: Japan's PM post, a Sophos correction, notable X and dark web posts, and our own counts and check data.
Threat Intelligence Researches PHP2Shell: Two Critical PHP Flaws Reported as RCE, CVE-2026-109618 and CVE-2026-109619
PHP2Shell is the name for two critical flaws in PHP itself, CVE-2026-109618 and CVE-2026-109619. PHP released fixes on 21 October 2026. Here is what is confirmed,…
Threat Intelligence Researches Remote support and file transfer flaws in ransomware attacks
SimpleHelp, CrushFTP, GoAnywhere and BeyondTrust flaws were flagged by CISA for ransomware use in 2025 and 2026. Dates, fixes, attribution and checks.
Threat Intelligence Researches Five edge VPN flaws CISA flags for ransomware use
Five VPN and firewall flaws added to CISA KEV in 2025 and 2026 carry a ransomware flag. Dates, fixed versions and what to check on your…
Threat Intelligence Researches Two Fortinet events of 2026: what to check
Fortinet had two 2026 events: a January SSO login flaw and a June wave of leaked logins. See what a firewall owner checks, from SSO to…
Threat Intelligence Researches A contractor repo and cloud keys: CISA’s lessons
A contractor's personal GitHub repository exposed CISA's cloud keys. What it says about uploads, rotating all admin access and having a playbook ready.
Threat Intelligence Researches Exposed PLCs: lessons from the 2026 US advisory
US agencies say Iranian-affiliated actors disrupted exposed PLCs. See the attack flow and what water, energy and public facility operators should check.
Threat Intelligence Researches NetScaler exposed edge: questions to ask your team
What a NetScaler ADC or Gateway owner does first: list appliances, check for compromise before patching, and keep management services off the internet.
All 14 pages
Our Research, By Email.
Questions About All Resources.
Last updated June 17, 2026-
Everything Brandefense publishes in one list: blog posts, threat intelligence research, reports, security news and whitepapers. Use the tabs to show one type only.
-
Type a word in the search box, pick a tab, or filter by year. Each item shows its type and date.
-
New items are added several times a month, newest first. Every item shows its date.
-
Some reports, such as the quarterly Ransomware Trends Report and the country reports, ask for a short form before the download opens. Blog posts, research and security news are read on the page.
-
Use the email box in the Our Research, By Email section on this page and tick the consent box. The Privacy Policy is linked there.
-
Brandefense is an AI-driven threat intelligence company. Its platform covers cyber threat intelligence, digital risk protection and external attack surface management. You can request a demo on your own domain from the Request A Demo page.
-
The page lists 749 items. They include blog posts, Threat Intelligence Researches, reports, security news and whitepapers. The newest come first.
-
Yes. The year filter runs from 2020 to 2026. You can also filter by type, such as Blog, Reports or Whitepapers.
-
Reports are in-depth research, such as quarterly ransomware trends, malware analyses and country reports. Whitepapers are deeper reads that explain attack methods and how to defend against them. Both are listed here.
-
It sits under Threat Intelligence Researches, which has 160 items on this page. They are deep dives into live threats. Use the type filter to show only that group.
Research Is General. Your Exposure Is Not.
A demo of the platform, run on your own domain.