Log in Request a demo

All Resources. Research, Reports And News.

Everything Brandefense publishes in one place: blog posts, threat research, reports, security news and whitepapers.

All880 Blog497 Threat Intelligence Researches165 Reports64 Security News273 Whitepapers7
880 itemsPage 25 of 98
Exploding filing cabinet representing the surge in published CVEs versus actual exploited risk Blog CVE Volume Is Exploding, But Is Your Risk? Making Sense of 2026’s Vulnpocalypse CISA KEV added 272 entries in 2026 by 23 October. See which flaws mattered and the four filters that replace volume-based triage. Aug 26, 2026Read → Clock face glowing red at the center, representing the pre-disclosure exploitation window before a patch exists Blog No Patch Exists Yet: Who Owns the Pre-Disclosure Window? Our H1 2026 analysis found that 32.1% of exploited vulnerabilities were attacked before a fix even existed. Patch velocity cannot close that window. See who should… Aug 24, 2026Read → API sprawl attack surface represented by a tangled web of exposed connections Blog API Sprawl: The Attack Surface Nobody Put On the Inventory API sprawl is not a documentation problem, it is a structural one. Shadow APIs, zombie APIs and inherited endpoints grow every week through normal engineering work,… Aug 21, 2026Read → Abstract red light trail in darkness representing a stealthy device code phishing attack that bypasses MFA Blog Device-Code Phishing: The MFA Bypass Method Nobody’s Training Employees On Device code phishing defeats even hardware security keys and passkeys by hijacking OAuth's device authorization flow instead of stealing a password. It passes every awareness-training check… Aug 20, 2026Read → Empty boardroom lit in red with a screen showing a deepfake video call grid of synthetic executives Blog The Board Meeting That Never Happened: Deepfake Video Calls and the New Wire Fraud A finance employee joined a video call with his CFO and colleagues — every face was synthetic. The deepfake video call attack that moved $25.6 million… Aug 18, 2026Read → Falling dominoes representing how a single vendor breach cascades across multiple organizations Blog One Vendor, Eleven Crises: Why Your TPRM Program Has a People Data Blind Spot A single HR assessment vendor breach exposed psychometric profiles and interview recordings for executives across eleven organizations. See why people data vendors sit outside standard TPRM… Aug 17, 2026Read → Security operations center monitoring wall representing ransomware fragmentation across the threat landscape Blog Why Ransomware Fragmentation Makes Attribution Harder Than Ever The ransomware ecosystem has fragmented past the point where group-based playbooks work: 146 active groups, 61 new since April 2025, and a 4.9-month average lifespan. Here's… Aug 13, 2026Read → Hidden M&A attack surface representing inherited and forgotten digital assets Blog Merger, Acquisition, Forgotten Domain: How M&A Activity Quietly Expands Your Attack Surface Mergers and acquisitions can quietly expand your attack surface through forgotten domains, abandoned subdomains, legacy infrastructure, and unmanaged cloud assets. Learn how EASM helps uncover inherited… Aug 11, 2026Read → XSS2Shell (CVE-2026-64638) WordPress pre-authentication XSS vulnerability leading to remote code execution Blog XSS2Shell (CVE-2026-64638): WordPress Login Page Pre-Auth XSS to RCE Chain Explained XSS2Shell (CVE-2026-64638) is a critical pre-authentication XSS vulnerability affecting WordPress login pages. This technical analysis explains the five-stage exploitation chain, the conditions required for RCE, mitigation… Aug 07, 2026Read →
All 98 pages
Newsletter

Our Research, By Email.

FAQ

Questions About All Resources.

Last updated June 17, 2026

  • Everything Brandefense publishes in one list: blog posts, threat intelligence research, reports, security news and whitepapers. Use the tabs to show one type only.

  • Type a word in the search box, pick a tab, or filter by year. Each item shows its type and date.

  • New items are added several times a month, newest first. Every item shows its date.

  • Some reports, such as the quarterly Ransomware Trends Report and the country reports, ask for a short form before the download opens. Blog posts, research and security news are read on the page.

  • Use the email box in the Our Research, By Email section on this page and tick the consent box. The Privacy Policy is linked there.

  • Brandefense is an AI-driven threat intelligence company. Its platform covers cyber threat intelligence, digital risk protection and external attack surface management. You can request a demo on your own domain from the Request A Demo page.

  • The counter above the list shows the current total, and each tab shows its own count. The list includes blog posts, Threat Intelligence Researches, reports, security news and whitepapers. The newest come first.

  • Yes. The year filter lists every year with publications. You can also filter by type, such as Blog, Reports or Whitepapers.

  • Reports are in-depth research, such as quarterly ransomware trends, malware analyses and country reports. Whitepapers are deeper reads that explain attack methods and how to defend against them. Both are listed here.

  • It sits under Threat Intelligence Researches. These are deep dives into live threats. Use the type filter to show only that group.

Research Is General. Your Exposure Is Not.

A demo of the platform, run on your own domain.

Request a demo