Log in Request a demo

All Resources. Research, Reports And News.

Everything Brandefense publishes in one place: blog posts, threat research, reports, security news and whitepapers.

All880 Blog497 Threat Intelligence Researches165 Reports64 Security News273 Whitepapers7
880 itemsPage 34 of 98
APT15 China-aligned cyber espionage group visual representation by Brandefense Blog APT15 (Ke3Chang / Nylon Typhoon): China-Aligned Cyber Espionage APT APT15 is a long-running, China-aligned cyber espionage group linked to the MSS, targeting governments, defense organizations, NGOs, and technology sectors globally with sustained operations through 2025. Jan 21, 2026Read → TA577 Hive0118 APT group illustration representing phishing campaigns and NTLM credential theft operations APT Groups TA577 (Hive0118): The Evolving Phishing Specialist Behind Modern Malware Campaigns TA577 (Hive0118) is a financially motivated, Russian-speaking cybercrime group active since 2020, specializing in large-scale phishing, credential theft, and NTLM hash capture, with strong links to… Jan 20, 2026Read → VanHelsing ransomware group APT card illustrating a multi-platform RaaS threat targeting enterprise environments APT Groups VanHelsing: Inside the Rise of a Multi‑Platform RaaS Threat Actor RomCom, also known as Void Rabisu or Storm-0978, is a Russia-aligned advanced persistent threat active since 2022. The group is known for combining espionage-driven operations with… Jan 15, 2026Read → Wizard Spider APT group visualization representing a financially motivated ransomware threat actor APT Groups WIZARD SPIDER: The Financial Empire Behind Global Ransomware Operations Wizard Spider profile: aliases such as FIN12 and GOLD BLACKBURN, activity since 2016, and its role in TrickBot, Ryuk, Conti and Black Basta operations. Jan 14, 2026Read → APT40 China-aligned advanced persistent threat targeting maritime and defense sectors APT Groups APT40 APT40 is a China-aligned advanced persistent threat (APT) group known for long-term cyber espionage campaigns targeting maritime, defense, academic, and government organizations, particularly across the Indo-Pacific… Jan 13, 2026Read → Futuristic mask representing cybersecurity and digital protection concepts. Malware Analysis Reports Grandoreiro Trojan Technical Analysis Grandoreiro is a Delphi banking trojan seen since 2016 and aimed at banking users in Latin America and Iberia. See what this technical report covers. Jan 11, 2026Read → RomCom APT group visualization representing Russia-aligned cyber espionage activity APT Groups RomCom APT RomCom, also known as Void Rabisu or Storm-0978, is a Russia-aligned advanced persistent threat active since 2022. The group is known for combining espionage-driven operations with… Jan 08, 2026Read → Cactus ransomware group APT card illustrating a stealth-focused cyber extortion threat targeting enterprises APT Groups Inside the Operations of Cactus: The Rise of a Stealth-Focused Ransomware Threat Cactus is a financially motivated ransomware group leveraging VPN vulnerabilities, encrypted tunneling, and double extortion tactics to target enterprises across the US, UK, and Europe. Jan 07, 2026Read → Operation ForumTroll APT card showing Russia-aligned influence and espionage threat actor APT Groups Operation ForumTroll: What Is Confirmed About the Chrome Zero-Day (CVE-2025-2783) A deep-dive into Operation ForumTroll, a high-risk Russia-aligned threat actor conducting espionage, phishing, and influence operations across Eastern Europe. Jan 06, 2026Read →
All 98 pages
Newsletter

Our Research, By Email.

FAQ

Questions About All Resources.

Last updated June 17, 2026

  • Everything Brandefense publishes in one list: blog posts, threat intelligence research, reports, security news and whitepapers. Use the tabs to show one type only.

  • Type a word in the search box, pick a tab, or filter by year. Each item shows its type and date.

  • New items are added several times a month, newest first. Every item shows its date.

  • Some reports, such as the quarterly Ransomware Trends Report and the country reports, ask for a short form before the download opens. Blog posts, research and security news are read on the page.

  • Use the email box in the Our Research, By Email section on this page and tick the consent box. The Privacy Policy is linked there.

  • Brandefense is an AI-driven threat intelligence company. Its platform covers cyber threat intelligence, digital risk protection and external attack surface management. You can request a demo on your own domain from the Request A Demo page.

  • The counter above the list shows the current total, and each tab shows its own count. The list includes blog posts, Threat Intelligence Researches, reports, security news and whitepapers. The newest come first.

  • Yes. The year filter lists every year with publications. You can also filter by type, such as Blog, Reports or Whitepapers.

  • Reports are in-depth research, such as quarterly ransomware trends, malware analyses and country reports. Whitepapers are deeper reads that explain attack methods and how to defend against them. Both are listed here.

  • It sits under Threat Intelligence Researches. These are deep dives into live threats. Use the type filter to show only that group.

Research Is General. Your Exposure Is Not.

A demo of the platform, run on your own domain.

Request a demo