Threat Intelligence Research. Our Own Findings.
Deep dives into live threats: exploited vulnerabilities, ransomware entry points and supply chain compromises.
Threat Intelligence Researches Cyber Threat Landscape Outlook: November 2026 to April 2027 Cyber threat landscape outlook for 31 October 2026 to 30 April 2027: what is most likely, what costs most, warning signs and five defenses. 
Threat Intelligence Researches STIX 2.1 by Example: One Indicator, Line by Line Build STIX 2.1 examples with validated JSON. Add relationships, manage versions and expiry, and learn what validation cannot prove before import. 
Threat Intelligence Researches CVE Statistics 2026: 86,533 Records So Far and What Is Driving Them NVD lists 86,533 CVEs published in 2026 by 25 October, against 48,151 in all of 2025. See the numbers, the drivers and how to triage. 
Threat Intelligence Researches HTTP2Shell: One Brotli Flaw, Many Stacks and Their Fixes HTTP2Shell is CVE-2026-111497, the Brotli decoder flaw first called Node2Shell. See which stacks have a fix, the version to run and how to find Brotli. 
Threat Intelligence Researches How to Defend Against PHP2Shell A practical PHP2Shell mitigation guide: prove the patch is running, see what each temporary control stopped in our lab and which detections caught what. 
Threat Intelligence Researches Node2Shell: Node.js Brotli RCE (CVE-2026-111497), Fixed Versions and How to Check Node2Shell, or HTTP2Shell (CVE-2026-111497), is a Node.js Brotli RCE flaw. Fixed in 22.23.4, 24.22.1 and 26.12.1. See who is exposed and what to do. 
Threat Intelligence Researches PHP2Shell Timeline: The First 60 Hours, in Data PHP2Shell timeline of the first 60 hours: Japan's PM post, a Sophos correction, notable X and dark web posts, and our own counts and check data. 
Threat Intelligence Researches PHP2Shell: Two Critical PHP Flaws Reported as RCE, CVE-2026-109618 and CVE-2026-109619 PHP2Shell is the name for two critical flaws in PHP itself, CVE-2026-109618 and CVE-2026-109619. PHP released fixes on 21 October 2026. Here is what is confirmed,… 
Threat Intelligence Researches Remote support and file transfer flaws in ransomware attacks SimpleHelp, CrushFTP, GoAnywhere and BeyondTrust flaws were flagged by CISA for ransomware use in 2025 and 2026. Dates, fixes, attribution and checks. All 19 pages
Questions About Threat Intelligence Researches.
Last updated June 9, 2026-
Research articles on exploited vulnerabilities, ransomware entry points, supply chain compromises and attacker methods, with the newest first.
-
New research is added several times a month. Every article shows its date.
-
Type a word in the search box or pick a year. The count above the list updates as you filter.
-
CISA maintains the Known Exploited Vulnerabilities Catalog, linked here.
-
Threat Intelligence Researches holds Brandefense's own findings on live threats. Security News explains regulation, standards and official guidance.
-
Brandefense is an AI-driven threat intelligence company. Its platform covers cyber threat intelligence, digital risk protection and external attack surface management. You can request a demo on your own domain from the Request A Demo page.
-
The page lists 160 items. You can filter by year, from 2022 to 2026. The newest come first.
-
They give dates, fixes, attribution and what to check. Topics include exploited vulnerabilities, ransomware entry points and supply chain compromises.
-
Yes. One article covers five VPN and firewall flaws added to the CISA KEV catalog in 2025 and 2026 that carry a ransomware flag. It gives dates, fixed versions and what to check.
-
Yes. One article covers remote support and file transfer flaws that CISA flagged for ransomware use in 2025 and 2026. It gives dates, fixes, attribution and checks.
Research Is General. Your Exposure Is Not.
A demo of the platform, run on your own domain.