trends
Ransomware Trends Report | Q3 2026
Download the Brandefense Ransomware Trends Report Q3 2026: ransomware activity, top threat groups, industry trends, MITRE ATT&CK analysis, and Q4 predictions.
Read Article →Tag · 135 Articles
trends. Tagged Articles.
Articles
Page 1 of 14
trends
Ransomware Trends Report | Q2 2026
Ransomware Trends Report Q2 2026: 2,509 confirmed incidents, 91 active groups, top targeted industries, MITRE ATT&CK techniques and Q3 predictions.
Read Article →
trends
From Shadow IT to Shadow AI: Clawdbot (Moltbot/Openclaw) and the Rise of Unmanaged Agent Gateways
Shadow AI explained: how unmanaged agents like Clawdbot, Moltbot and OpenClaw hold API keys behind unhardened gateways, with attack scenarios and fixes.
Read Article →
trends
Operation ForumTroll: What Is Confirmed About the Chrome Zero-Day (CVE-2025-2783)
Operation ForumTroll is a name from one vendor report for a 2025 phishing campaign using a Chrome zero-day. See what NVD, Google and CISA confirm.
Read Article →
trends
OldGremlin: A Stealthy Russian-Speaking Ransomware and Espionage Threat Group Evolving Into a Precision Striking APT
OldGremlin is a Russian-speaking, financially motivated group that mixes ransomware with slow APT-style intrusions. See how it attacks and how to defend.
Read Article →
trends
Callisto APT: Russia’s Persistent Espionage Operator
Callisto (COLDRIVER, SEABORGIUM, TA446) profile: espionage active since at least 2015, with credential harvesting, spear-phishing and cloud persistence.
Read Article →
trends
Angry Likho: Inside a Rapidly Growing Espionage Threat Targeting Eastern Europe
Angry Likho is a spear-phishing espionage group also tracked as Sticky Werewolf. See its aliases, tactics, targets and 2025 trends, plus defence tips.
Read Article →
trends
GALLIUM APT: What MITRE ATT&CK Says
GALLIUM is a cyberespionage group MITRE ATT&CK says has been active since at least 2012. See what MITRE confirms, what is unproven and how to defend.
Read Article →
trends
React2Shell — The Day 5 Reality Check
React2Shell (CVE-2025-55182) is a critical React Server Components flaw. See how exploitation grew in the five days after disclosure and what to do.
Read Article →
trends
TraderTraitor: North Korea’s Crypto Heist Machine
TraderTraitor profile (Jade Sleet, UNC4899): North Korea-aligned, part of Lazarus, with crypto theft, trojanized developer tools and supply chain abuse.
Read Article →Brandefense