Log in Request a demo

All Resources. Research, Reports And News.

Everything Brandefense publishes in one place: blog posts, threat research, reports, security news and whitepapers.

All880 Blog497 Threat Intelligence Researches165 Reports64 Security News273 Whitepapers7
880 itemsPage 23 of 98
FortiMail zero-day CVE-2026-104286 illustrated as a red digital hand writing into lines of code Blog CVE-2026-104286: FortiMail Unauthenticated Arbitrary File Write Zero-Day Under Active Exploitation A CVSS 9.8 FortiMail zero-day (CVE-2026-104286) lets an unauthenticated attacker write any file on the appliance through the IBE handler. Here is what is affected, how… Oct 08, 2026Read → Dark glass dark glass alarm bell with a tiny glowing red key hanging fr with red neon lines, cover art for: How to triage a leaked password alert Blog How to triage a leaked password alert Learn how to triage a leaked password alert in five steps: check it is real, find out how it leaked, rate the risk, then reset and… Oct 07, 2026Read → Dark glass dark glass breaking ocean wave cresting over, red cracks of with red neon lines, cover art for: Ransomware Trends Report | Q3 2026 Reports Ransomware Trends Report | Q3 2026 The Brandefense Ransomware Trends Report Q3 2026 analyzes 2,898 confirmed ransomware incidents across 109 active threat groups, covering top operators, sector and country targeting, MITRE ATT&CK… Oct 06, 2026Read → GitLab incoming email token exposure shown as a red laser path from a small coin to a glowing doorway in a dark room Blog The Credential You Published on Purpose: How an Exposed GitLab Email Token Becomes Push Access to Main A GitLab incoming email token published in a README never expires and works at account level. Learn how the attack path works, how to reset the… Oct 02, 2026Read → NetScaler zero-day exploitation shown as two dark appliance screens, one blank and one filled with red command-line code Blog Two NetScaler Zero-Days, One Wrong Assumption: Why Patching Does Not Close the Incident Citrix fixed two actively exploited NetScaler zero-day flaws, but a patch does not remove an attacker already inside. Seven steps from patch to closure. Oct 01, 2026Read → CVE-2026-76461 SQL injection attack on Cisco Secure Email Gateway Blog CVE-2026-76461: Cisco Secure Email Gateway SQL Injection Zero-Day Under Active Exploitation A CVSS 9.8 SQL injection in Cisco Secure Email Gateway (CVE-2026-76461) lets an attacker gain root access with a single crafted email — no authentication, no… Sep 25, 2026Read → Ransomware leak site breach concept — a red-lit internal mechanism exposed through shattered glass, symbolizing compromised infrastructure Blog The Leak Site Got Breached: What ShinyHunters’ Takeover of Clop Means for the Companies Listed on It ShinyHunters says it breached Clop's ransomware leak site and holds the keys to its Tor onion service. Here's what that means for every organization still listed… Sep 23, 2026Read → Non-human identity risk represented as a digital fingerprint over a circuit board Blog Your Identity Program Was Built for People. Non-Human Identity Is a Growing Way In. New research shows compromised non-human identity now drives more breaches than phishing. See why service accounts, API keys, and AI agents are the entry point most… Sep 21, 2026Read → Fishing hook with red targeting light, symbolizing a marketing platform breach used to phish trusted subscribers Blog The Phishing Came From Your Real Domain: What a Marketing Platform Breach Does to Brand Trust An attacker breached a marketing platform and sent phishing emails from a hardware wallet maker's genuine domain to 347,000 subscribers. Every technical control that checks for… Sep 18, 2026Read →
All 98 pages
Newsletter

Our Research, By Email.

FAQ

Questions About All Resources.

Last updated June 17, 2026

  • Everything Brandefense publishes in one list: blog posts, threat intelligence research, reports, security news and whitepapers. Use the tabs to show one type only.

  • Type a word in the search box, pick a tab, or filter by year. Each item shows its type and date.

  • New items are added several times a month, newest first. Every item shows its date.

  • Some reports, such as the quarterly Ransomware Trends Report and the country reports, ask for a short form before the download opens. Blog posts, research and security news are read on the page.

  • Use the email box in the Our Research, By Email section on this page and tick the consent box. The Privacy Policy is linked there.

  • Brandefense is an AI-driven threat intelligence company. Its platform covers cyber threat intelligence, digital risk protection and external attack surface management. You can request a demo on your own domain from the Request A Demo page.

  • The counter above the list shows the current total, and each tab shows its own count. The list includes blog posts, Threat Intelligence Researches, reports, security news and whitepapers. The newest come first.

  • Yes. The year filter lists every year with publications. You can also filter by type, such as Blog, Reports or Whitepapers.

  • Reports are in-depth research, such as quarterly ransomware trends, malware analyses and country reports. Whitepapers are deeper reads that explain attack methods and how to defend against them. Both are listed here.

  • It sits under Threat Intelligence Researches. These are deep dives into live threats. Use the type filter to show only that group.

Research Is General. Your Exposure Is Not.

A demo of the platform, run on your own domain.

Request a demo