All Resources. Research, Reports And News.
Everything Brandefense publishes in one place: blog posts, threat research, reports, security news and whitepapers.
Security News Storm-0940 Used ARTEX Against ConnectWise: What Microsoft 365 Admins Should Check Microsoft ties Storm-0940 and the ARTEX AI framework to the ConnectWise supply chain attack. These are the Microsoft 365 checks, logs and indicators to review now.
Security News LiteLLM 1.107.0 Supply Chain Attack: Timeline, Stolen Data and a Response Checklist LiteLLM 1.107.0 on PyPI and Docker carried a credential stealer on 21 October 2026. See the timeline, what it took and a checklist to pin and…
Security News Next.js and Node.js Security Updates, October 2026: What to Patch First Next.js 15.5.28 and 16.4.1 fix two critical remote code execution flaws. Node.js 26.12.1, 24.22.1 and 22.23.4 fix ten CVEs. See the patch table and checklist.
Security News ClickFix This Week: Siemens Software Center Flaw, ROMULUS and Chrome’s Copied-Command Warning Siemens confirms exploitation of CVE-2026-110936 in ClickFix attacks, Forescout details ROMULUS and Chrome warns on copied commands. What to do now.
Security News Swallowtail (APT28) and HOOKEDGE: Attacks on Two NATO Countries and a Defender Checklist Symantec and Recorded Future describe the HOOKEDGE backdoor used by APT28: Word macros, webhook.site and a hidden Edge window. Attack chain and checklist.
Security News Oracle October 2026 Critical Patch Update: What to Patch First Oracle's October 2026 Critical Patch Update has 1295 patches for 1209 CVEs. See which products to patch first, with CVSS scores and exposure.
Security News BRONZE SANDCASTLE: Sandboxie DLL Sideloading Chain and Detection Checks Sophos CTU names BRONZE SANDCASTLE, a China-based group that sideloads Sandboxie DLLs. Read the infection chain, nine file pairs and a defender checklist.
Threat Intelligence Researches PHP2Shell: Two Critical PHP Flaws Reported as RCE, CVE-2026-109618 and CVE-2026-109619 PHP2Shell is the name for two critical flaws in PHP itself, CVE-2026-109618 and CVE-2026-109619. PHP released fixes on 21 October 2026. Here is what is confirmed,…
Security News SafePay Ransomware Joint Advisory: Five Exploited Flaws and How to Close Them A joint advisory from US, German and UK agencies counts at least 600 SafePay victims. Here are the five exploited flaws it names, what to patch… All 98 pages
Our Research, By Email.
Questions About All Resources.
Last updated June 17, 2026-
Everything Brandefense publishes in one list: blog posts, threat intelligence research, reports, security news and whitepapers. Use the tabs to show one type only.
-
Type a word in the search box, pick a tab, or filter by year. Each item shows its type and date.
-
New items are added several times a month, newest first. Every item shows its date.
-
Some reports, such as the quarterly Ransomware Trends Report and the country reports, ask for a short form before the download opens. Blog posts, research and security news are read on the page.
-
Use the email box in the Our Research, By Email section on this page and tick the consent box. The Privacy Policy is linked there.
-
Brandefense is an AI-driven threat intelligence company. Its platform covers cyber threat intelligence, digital risk protection and external attack surface management. You can request a demo on your own domain from the Request A Demo page.
-
The counter above the list shows the current total, and each tab shows its own count. The list includes blog posts, Threat Intelligence Researches, reports, security news and whitepapers. The newest come first.
-
Yes. The year filter lists every year with publications. You can also filter by type, such as Blog, Reports or Whitepapers.
-
Reports are in-depth research, such as quarterly ransomware trends, malware analyses and country reports. Whitepapers are deeper reads that explain attack methods and how to defend against them. Both are listed here.
-
It sits under Threat Intelligence Researches. These are deep dives into live threats. Use the type filter to show only that group.
Research Is General. Your Exposure Is Not.
A demo of the platform, run on your own domain.