DRPS Articles
Third-Party Risk for CISOs: Priorities and Best Practices for Managing Vendors
Third party risks come from vendors and partners with access to your data. See how a CISO can assess, contract for, monitor and reduce them.
Blog · 528 Articles
Blog. Cybersecurity And Risk.
Threat actors, dark web activity, ransomware and digital risk, explained by the analysts who track them.
02 All Articles
All Blog Articles. Newest First.
Ransomware
KageNoHitobito Ransomware Technical Analysis
KageNoHitobito ransomware encrypts local files with a .hitobito extension and uses TOR. See its behaviour, MITRE ATT&CK mapping and how to defend.
DRPS Articles
SIEM and Threat Intelligence: How Integration Works and What It Gives You
How SIEM and threat intelligence work together: feed types, integration methods, use cases and pitfalls, plus what to check before you connect a feed.
DRPS Articles
Boosting Cybersecurity with Comprehensive Threat Monitoring
Threat monitoring means watching networks, endpoints and threat data to catch attacks early. See the main strategies and defensive measures to cut risk.
DRPS Articles
The Role of GenAI in Enhancing Cybersecurity Strategies
GenAI can create novel solutions and responses to cybersecurity threats, making it a powerful tool in the fight against cybercrime.
DRPS Articles
The Future of Digital Forensics: Trends and Technologies
Digital forensics is the identification, preservation, analysis and presentation of digital evidence. Learn the trends shaping it, from AI to cloud, IoT.
Ransomware
[Research Summary]: Rugmi Loader
Rugmi loader technical analysis: phishing delivery, DLL hijacking, direct syscalls, Heaven's Gate evasion, process injection, a stealer payload and defenses
Sector Analysis
The Importance of Proactive Digital Risk Management for Enterprises
Digital risk management helps enterprises find, assess and reduce digital threats before harm occurs. See the key trends and proactive steps to use.
DRPS Articles
CISO Guide: Building a Cyber Resilient Organization
How a CISO can build a cyber resilient organization: risk management, monitoring, training, incident response, Zero Trust, MFA and patching.
Ransomware
Stone Gaze: In-Depth Analysis of Medusa Ransomware
Medusa ransomware is a RaaS group active since 2021. See how it gets in, encrypts files and pressures victims, plus the steps that reduce the risk.
DRPS Articles
Proactive Insider Threat Management: Advanced Strategies for 2024
Proactive insider threat management explained: types of insider threats, monitoring, least privilege, MFA, training and response steps to reduce risk.
Dark Web
How Emerging Technologies Change Deep and Dark Web Research
How AI, machine learning, natural language processing and blockchain analysis change deep and dark web research, and how to plan monitoring.
03 More To Read
010203040506
Threat Research
What a 0-Day Ad Really Sells: 37 of 93 Are Unnamed-Exploit Claims
Threat Research
What WormGPT and Other AI-Branded Tool Ads Sell
Threat Research
Why Web Shell, cPanel and RDP Prices Do Not Add Up
Threat Research
The September Surge in Access-Labelled Posts
Threat Research
Most Initial Access Offers We Read Sold Websites, Not Networks
Threat Research
Anatomy of a Corporate Network Access Listing
05 FAQ
About The Blog.
Knowledge Hub →01What does the Brandefense blog cover?
Articles on ransomware, APT groups, the dark web, digital risk protection, fraud, sector analysis and VIP security, written for security teams.
02How often is the blog updated?
The newest articles appear first, and every article shows its publish date.
03How do I find articles on one topic?
Use the topic links above the list to open one topic, or type a word in the search box. Search and topic filters cover the full article collection.
04Where do the facts in the articles come from?
Articles draw on public sources such as CISA advisories, MITRE ATT&CK and ENISA reports. Sources are listed at the end of an article when it cites them.
05How do I get new articles by email or feed?
The site feed at brandefense.io/feed/ lists new posts. The email sign-up box is on the All Resources and Reports pages.
06What does Brandefense do?
Brandefense is an AI-driven threat intelligence company. Its platform covers cyber threat intelligence, digital risk protection and external attack surface management. You can request a demo from the Request A Demo page.
07How many articles are on the Brandefense blog?
This collection currently contains 528 public articles. The page shows the total at the top and the count for each topic next to its name. Each article shows its publish date.
08Who writes the Brandefense blog?
The blog describes its articles as explained by the analysts who track threats. They cover threat actors, dark web activity, ransomware and digital risk. The newest articles appear first.
09Does the blog have articles about APT groups?
Yes. The Knowledge Hub also holds profiles of threat groups. Use the topic links or article search to explore the coverage.
10What is the difference between the deep web, the dark web and the surface web?
The surface web is the part of the internet that search engines list. The deep web is content that search engines do not list, such as pages behind a login. The dark web needs special software to reach.
Stay Ahead of Digital Threats.
Take control of your digital security with an exclusive demo of our AI-driven threat intelligence platform.