Log in Request a demo

All Resources. Research, Reports And News.

Everything Brandefense publishes in one place: blog posts, threat research, reports, security news and whitepapers.

All880 Blog497 Threat Intelligence Researches165 Reports64 Security News273 Whitepapers7
880 itemsPage 24 of 98
Cracked digital fingerprint symbolising passkey attacks and broken identity trust Blog Passwordless Is Not Takeover Proof: Where Passkey Attacks Actually Land Passkey attacks published this year do not break the cryptography. They target the sync fabric, the recovery path, and the enrolment step instead — the parts… Sep 16, 2026Read → Imbalanced scale illustrating security vendor risk outweighing its recorded TPRM score Blog Your Security Vendors Are Your Highest-Privilege Third Parties, and Your TPRM Program Scores Them Low Security vendors sit at the top of the privilege ladder, yet TPRM programs consistently score them low because certification substitution and category heuristics mask the real… Sep 14, 2026Read → Agentic ransomware concept: autonomous AI network operating without a human Blog Agentic Ransomware: What Happens When Malware Doesn’t Need a Human Operator to Decide Who to Hit Next? A documented ransomware operation completed reconnaissance, credential theft, lateral movement, and encryption with no human operator at any stage. This analysis breaks down the JADEPUFFER intrusion… Sep 10, 2026Read → Abandoned digital assets: dark forgotten building with lit windows representing accessible, unmonitored infrastructure Blog When Abandoned Digital Assets Become Someone Else’s Infrastructure A 25-year-old wiki sat forgotten for years, then quietly became AI agent infrastructure: 18,000 posts in 52 days, unnoticed. Abandoned digital assets stay accessible and unmonitored… Sep 09, 2026Read → Business handshake overlaid with malicious red circuitry, representing OAuth consent phishing risk Blog No Vulnerability Was Exploited: Inside the SaaS Extortion Wave That Breaks In Through Consent, Not Code OAuth consent phishing let a single extortion group breach 1,000+ organizations without exploiting a CVE. See how attackers weaponize legitimate consent grants — and why MFA… Sep 08, 2026Read → Red risk signal frozen inside an ice block, representing a vendor risk snapshot trapped in an annual audit cycle Blog Continuous Monitoring vs. Annual Audit: Why the TPRM Calendar Is Broken Annual vendor audits produce a snapshot; vendor risk is a movie. See why the 364 days between formal assessments is where 48% of third-party breaches actually… Sep 03, 2026Read → A hand reaching through a vault-like gateway toward a glowing red key, symbolizing AI gateway exploitation and stolen credentials Blog AI Gateway Exploitation: How Attackers Are Targeting LiteLLM, RAGFlow, and Kestra to Steal Your Model Provider Keys Three actively exploited AI orchestration platforms — LiteLLM, RAGFlow, and Kestra — are giving attackers a single entry point to every model provider credential an organization… Aug 31, 2026Read → Illustration of a phishing-as-a-service kit sold as a ready-to-use attack toolkit Blog Phishing-as-a-Service 2.0: The Kits That Bypass MFA Without a Fake Login Page Phishing-as-a-service kits like EvilTokens and Kali365 no longer need a fake login page. See how AiTM proxies and OAuth device code abuse bypass MFA, and what… Aug 28, 2026Read → Alarm clock glowing red representing the CRA reporting obligations 24-hour deadline Blog CRA Reporting Obligations Now Apply: The 24-Hour Clock Starts When You Find Out From 11 September 2026, CRA reporting obligations require manufacturers to file an early warning within 24 hours of becoming aware that a product is being actively… Aug 27, 2026Read →
All 98 pages
Newsletter

Our Research, By Email.

FAQ

Questions About All Resources.

Last updated June 17, 2026

  • Everything Brandefense publishes in one list: blog posts, threat intelligence research, reports, security news and whitepapers. Use the tabs to show one type only.

  • Type a word in the search box, pick a tab, or filter by year. Each item shows its type and date.

  • New items are added several times a month, newest first. Every item shows its date.

  • Some reports, such as the quarterly Ransomware Trends Report and the country reports, ask for a short form before the download opens. Blog posts, research and security news are read on the page.

  • Use the email box in the Our Research, By Email section on this page and tick the consent box. The Privacy Policy is linked there.

  • Brandefense is an AI-driven threat intelligence company. Its platform covers cyber threat intelligence, digital risk protection and external attack surface management. You can request a demo on your own domain from the Request A Demo page.

  • The counter above the list shows the current total, and each tab shows its own count. The list includes blog posts, Threat Intelligence Researches, reports, security news and whitepapers. The newest come first.

  • Yes. The year filter lists every year with publications. You can also filter by type, such as Blog, Reports or Whitepapers.

  • Reports are in-depth research, such as quarterly ransomware trends, malware analyses and country reports. Whitepapers are deeper reads that explain attack methods and how to defend against them. Both are listed here.

  • It sits under Threat Intelligence Researches. These are deep dives into live threats. Use the type filter to show only that group.

Research Is General. Your Exposure Is Not.

A demo of the platform, run on your own domain.

Request a demo