Buyer's Guide · Intermediate · 6 Min Read
Attack Surface Management Tools: A Buyer’s Guide
How to compare attack surface management tools: discovery, context, prioritization and fit with your team.
Read The Guide
Knowledge Hub
Understand The Threat. Before It Reaches You.
Plain guides, a glossary, threat group profiles and our research, in one place.
What Is The Brandefense Cybersecurity Knowledge Hub?
The Brandefense cybersecurity knowledge hub is a free library that explains external cyber threats in plain language. It holds short 101 guides, a glossary of security terms, profiles of threat groups, and reports, research and news from the Brandefense analyst team. Each page starts with the answer, so a busy reader gets the point first and can go deeper later.
Where Should I Start?
Start with a 101 guide if a topic is new to you. Use the glossary when a term is unclear, and open a threat group profile when you need to know who is behind an attack and how they work.
Looking for blog posts, research and reports instead? Browse all Brandefense resources in one list.
Learn
Guides. Answer First.
Buyer's Guide · Intermediate · 6 Min Read
Brand Protection Solutions: A Buyer’s Guide
What brand protection should cover, how to compare solutions and when to build, buy or outsource.
Read The Guide
101 Guide · Beginner · 6 Min Read
Digital Risk Protection 101
What digital risk protection is, which threats it covers, how a service finds and removes them, and how to choose one.
Read The Guide
Glossary
The Glossary, In Plain Words.
Security terms explained in a few plain sentences, each with its own page.
- Account Takeover Account takeover is when an attacker gains control of an online account that belongs to someone else, such as an email, bank or work login. Also called ATO, account hijacking
- Active Directory Active Directory is a directory service for managing identities in Windows domain networks, as NIST defines it. Also called AD, AD DS
- Advanced Persistent Threat (APT) An advanced persistent threat (APT) is a skilled, well-resourced adversary that targets an organization over a long period. Also called APT, APT group
- Adversary-in-the-middle (AiTM) An adversary-in-the-middle (AiTM) attack is one where an attacker positions themselves between two communicating parties to read or change the data passing between them. Also called AiTM, man-in-the-middle
- AI Agents An AI agent is software that uses an AI model to pursue a goal, using data, tools and actions with little step-by-step human input. Also called AI agent, agentic AI
- Attack Surface An attack surface is everything an attacker could reach to try to get into your organization.
How To Defend
Playbooks For The Alerts You Will See.
Each one says what the alert means, what to do in the first 24 hours and how to make it less likely next time.
- Identity Stolen logins, stealer logs and people being impersonated. 4 Playbooks
- Brand Fake domains, accounts, apps and ads that use your name against your customers. 6 Playbooks
- Infrastructure What is exposed, misconfigured, leaked or already for sale about your own systems. 6 Playbooks
- Third Party When the alert is about a supplier, and the risk reaches you through them. 2 Playbooks
Threat Library
APT Groups. Who Is Behind It.
Threat Group North Korea
Andariel
Attributed by the US, UK and South Korean governments to North Korea's Reconnaissance General Bureau, Andariel is described in a July 2024 joint…
Full Profile
Threat Group
APT-C-60
APT-C-60 is the name JPCERT/CC uses for a threat group it says likely carried out spear-phishing attacks on organizations in Japan from August 2024…
Full Profile
Threat Group China
APT1
Comment Crew, Comment Panda, Comment Group
Attributed by MITRE ATT&CK to PLA Unit 61398 in China, APT1 is the subject of a US indictment of 19 May 2014 charging five Unit 61398 officers with…
Full Profile
Threat Library
Every Shelf Of The Library.
Counts as of 17 October 2026
- 101 GuidesShort, plain guides to the main ideas in external threat protection.21 Guides
- GlossarySecurity terms in plain words, A to Z, each with its own page.135 Terms
- APT GroupsState-backed hacking groups, who they go after and how they get in.49 Profiles
- Ransomware GroupsHow each group gets in, how it extorts and what stops it.24 Profiles
- Malware And ToolsMalware families and abused tools, what they do and how to spot them.46 Profiles
- TechniquesAttack techniques in plain words, mapped to MITRE ATT&CK.36 Profiles
- CountriesThe sectors, groups and national bodies that matter in each country.32 Profiles
- VulnerabilitiesFlaws attackers use in real attacks and what to do about them.44 Profiles
- Significant Cyber IncidentsSignificant incidents since October 2024, with a dated timeline, sources and lessons.103 Profiles
- Agentic SecurityBest practices for securing AI agents and for using agents in security work, from the main public frameworks.12 Articles
- How To DefendA playbook for every alert: the first 24 hours, the checklist and the fix.18 Playbooks
Research
Reports, Research And News.
- Reports Periodic reports on threats, sectors and regions. →
- Threat Intelligence Research In-depth research from the Brandefense analyst team. →
- Security News What happened this week and why it matters. →
- Blog Practical articles on digital risk protection. →
- Whitepapers Longer guides for security teams and leaders. →
- Zyxel Vulnerability Tracker Archive of vendor security alerts on Zyxel products. →
Brandefense
Stay Ahead Of Digital Threats.
Take control of your digital security with an exclusive demo of our AI-driven threat intelligence platform.
FAQ
About The Hub.
Last updated October 15, 2026
Frequently asked questions
What is in the Brandefense knowledge hub?
It holds 101 guides, a glossary, threat group profiles, reports, research and news about external cyber threats.
Where should I start if I am new to the topic?
Start with a 101 guide. Each one opens with a short answer and ends with what to do next.
Are the threat group profiles stated as fact?
No. Attribution is written as attributed by a named source, never as plain fact.
How many threat group profiles are in the knowledge hub?
The hub lists 49 APT group profiles and 24 ransomware group profiles. It also has 46 profiles of malware and tools. Counts are shown as of 12 October 2026.
What are the 101 guides?
They are short, plain guides to the main ideas in external threat protection. Each one opens with a short answer and ends with what to do next. The guides page lists them all.
Is the knowledge hub free to use?
Yes. The hub is described as a free library that explains external cyber threats in plain language. It holds guides, a glossary, threat group profiles, reports, research and news.
Where can I find significant cyber incidents?
The hub has 103 profiles of significant cyber incidents since October 2024. Each has a dated timeline, sources and lessons.
Does the hub have playbooks for alerts?
Yes. The How To Defend shelf has 18 playbooks. Each gives the first 24 hours, a checklist and the fix for one kind of alert.
Does the hub cover securing AI agents?
Yes. The Agentic Security shelf has 8 articles. They cover best practices for securing AI agents and for using agents in security work, from the main public frameworks.
Where can I read about attack techniques and vulnerabilities?
The hub has 36 technique profiles in plain words, mapped to MITRE ATT&CK. It also has 44 vulnerability profiles on flaws used in real attacks and what to do about them.