Log in Request a demo

Brandefense Blog. Cybersecurity And Risk.

Threat actors, dark web activity, ransomware and digital risk, explained by the analysts who track them.

All497 APT Groups85 Dark Web31 Digital Risk Protection126 Fraud16 Ransomware51 Sector Analysis34 VIP Security7
Dark glass dark paper sheet feeding a row of small checkpoint gates with red neon lines, cover art for: Turn a Threat Report Into ATT&CK Mappings and Sigma Rules With an AI AgentBlog Turn a Threat Report Into ATT&CK Mappings and Sigma Rules With an AI Agent Let an AI agent map a CISA advisory to ATT&CK and draft Sigma rules, then check them with sigma-cli, pySigma and ATT&CK data. A real run,… Oct 25, 202629 Min Dark glass analyst desk lamp over two connected log drawers with red neon lines, cover art for: SOC Triage With the Elastic MCP Server and a Brandefense MCP Stand-InBlog SOC Triage With the Elastic MCP Server and a Brandefense MCP Stand-In Connect Claude Code to the Elastic MCP server and a Brandefense MCP stand-in, triage a VPN alert with real tool calls and get a sourced note. Oct 25, 202634 Min Dark glass lens over a field of near-identical domain tiles with red neon lines, cover art for: Build a Brand and Phishing Watch With dnstwist, crt.sh and an AI AgentBlog Build a Brand and Phishing Watch With dnstwist, crt.sh and an AI Agent Run dnstwist and crt.sh as read-only MCP tools. Of 7,503 name variations 8 resolve: 4 ours, 4 look-alikes. Claude Code drafts a takedown a person approves. Oct 25, 202628 Min Dark glass inspection lamp over a tool server with red neon lines, cover art for: MCP Scanner Test: Three Tools Against a Poisoned MCP ServerBlog MCP Scanner Test: Three Tools Against a Poisoned MCP Server Snyk Agent Scan, Cisco MCP Scanner and devlab on a clean and a poisoned MCP server: what each caught, what it sent out and which false… Oct 25, 202620 Min Dark glass sparring dummy and a small robot with red neon lines, cover art for: Red Team Your Threat Intel Agent With Garak, Promptfoo and PyRITBlog Red Team Your Threat Intel Agent With Garak, Promptfoo and PyRIT Run garak, promptfoo and PyRIT against a threat intel agent, map the findings to MITRE ATLAS and OWASP, fix them and re-run to see the before… Oct 25, 202631 Min Glass rulebook with glowing red text lines, chained to glass blocks on a dark background.Blog APRA CPS 230 and CPS 234: What Service Provider Risk Means in Practice CPS 230 and CPS 234 side by side: which clause asks for which evidence, the APRA notice deadlines and a service provider register template. Oct 25, 20268 Min Cracked glass padlock with glowing red circuit patterns on a dark background, an image for AI ransomwareRansomware AI Ransomware: 4 AI Tools That Crews Use Four AI tools show up in primary reports on ransomware and extortion crews: Claude, Cursor Agent, DeepSeek and Qwen. Who used what, and what to watch. Oct 25, 20266 Min Glass lighthouse over separate cubes with red neon linesBlog How MSSPs Add Threat Intelligence to Their Services: A Rollout Plan A rollout plan for MSSPs: which outside threat signals to add, how to keep client data apart, route alerts and package three service tiers. Oct 24, 20266 Min Stack of dark glass tiles with one glowing red layerBlog Which Security Products and IT Tools Run on PHP? MISP, GLPI and Zabbix run on PHP, and so do some firewall and VPN products. See which vendors ship PHP, their PHP2Shell status and what to… Oct 24, 20267 Min FIRST Member mark, Associate, October 2026Blog Brandefense Joins FIRST as an Associate Member Brandefense joined FIRST, the Forum of Incident Response and Security Teams, as an Associate in October 2026. See what that means and what it does not. Oct 23, 20263 Min Top InfoSec Innovator 2026 Winner badge from Cyber Defense MagazineBlog Brandefense Wins at the Top InfoSec Innovator Awards 2026 Cyber Defense Magazine named Brandefense Most Innovative in AI-Powered Cybersecurity Solutions at the Top InfoSec Innovator Awards 2026. Oct 23, 20263 Min Dark glass hourglass with the last grains running out with red neon lines, cover art for: PHP End of Life: Which Versions Still Get Security FixesBlog PHP End of Life: Which Versions Still Get Security Fixes PHP 7.4, 8.0 and 8.1 are end of life, and 8.2 follows on 31 December 2026. See every branch date and what our free PHP check… Oct 22, 20266 Min
All 42 pages
FAQ

About The Blog.

Last updated June 9, 2026

  • Articles on ransomware, APT groups, the dark web, digital risk protection, fraud, sector analysis and VIP security, written for security teams.

  • New articles are added several times a month. The newest come first, and every article shows its publish date.

  • Use the topic chips above the list to open one topic, or type a word in the search box. Each topic has its own page.

  • Articles draw on public sources such as CISA advisories, MITRE ATT&CK and ENISA reports. Sources are listed at the end of an article when it cites them.

  • The site feed at brandefense.io/feed/ lists new posts. The email sign-up box is on the All Resources and Reports pages.

  • Brandefense is an AI-driven threat intelligence company. Its platform covers cyber threat intelligence, digital risk protection and external attack surface management. You can request a demo on your own domain from the Request A Demo page.

  • The count at the top of the blog page shows the current total, and each topic chip shows how many articles that topic holds. You can open all of them or pick one topic, such as APT Groups, Dark Web, Ransomware or Fraud. Each article shows its publish date.

  • The blog describes its articles as explained by the analysts who track threats. They cover threat actors, dark web activity, ransomware and digital risk. The newest articles appear first.

  • Yes. APT Groups is one of the topic chips above the list, and it opens only the articles on that topic. The Knowledge Hub also holds profiles of threat groups.

  • The surface web is the part of the internet that search engines list. The deep web is content that search engines do not list, such as pages behind a login. The dark web needs special software to reach. The blog has an article that explains the three layers in plain words.