Threat Intelligence Research. Our Own Findings.
Deep dives into live threats: exploited vulnerabilities, ransomware entry points and supply chain compromises.
APT Groups MuddyWater: Iran-Linked Espionage Group Expanding Global Reach SilverFox APT is rapidly evolving into one of 2025’s most dangerous cyber threat actors. Combining espionage with financial motives, it exploits edge devices, cloud identities, and… 
APT Groups APT41: China’s Dual-Purpose Cyber Powerhouse APT41 is one of China’s most versatile APT groups, combining espionage, large-scale supply chain compromises, and financially motivated intrusions targeting telecom, government, and technology sectors worldwide. 
APT Groups Operation C-Major (APT36): A Persistent Pakistan-Linked Cyber Espionage Threat APT36 is a Pakistan-linked APT group active since 2013, known for targeting government, military, and research sectors with phishing, RATs, and Android spyware. 
APT Groups APT28: Russia’s Persistent Cyber Espionage Arm APT28 (Fancy Bear) is one of the most aggressive and persistent Russian state-linked APT groups, known for cyber espionage, Outlook exploits, election interference, and high-impact operations… 
APT Groups Scattered Spider: An Emerging Cybercriminal Collective Scattered Spider (UNC3944/Octo Tempest) is one of the most dangerous financially motivated APT groups active in 2025. Known for large-scale social engineering, SIM swapping, Spectre RAT… 
APT Groups APT33 (Elfin / Refined Kitten): Iran’s Longstanding Cyber-Espionage Arm APT33, also known as Elfin or Refined Kitten, is Iran’s long-running cyber-espionage group targeting global defense, energy, and aerospace sectors with evolving tactics and tools. 
APT Groups Hazy Tiger: An Emerging Espionage Threat in South Asia Hazy Tiger is a South Asia-linked APT group active since 2013, targeting government, defense, and energy sectors through sophisticated espionage campaigns involving phishing, malware, and custom… 
APT Groups RAZOR TIGER: The Persistent South Asian Espionage Threat Razor Tiger (APT-C-17), also known as SideWinder, is a long-standing India-linked APT group active since 2012. Its evolving espionage campaigns now target South Asian governments, defense,… 
APT Groups UNC4841 / SLIME57: China-Linked Espionage Threat Expanding Global Operations UNC4841, also known as SLIME57, is a China-linked APT group active since 2021, conducting cyber-espionage across government, defense, and tech sectors. Exploiting zero-day vulnerabilities and maintaining… All 19 pages
Questions About Threat Intelligence Researches.
Last updated June 9, 2026-
Research articles on exploited vulnerabilities, ransomware entry points, supply chain compromises and attacker methods, with the newest first.
-
New research is added several times a month. Every article shows its date.
-
Type a word in the search box or pick a year. The count above the list updates as you filter.
-
CISA maintains the Known Exploited Vulnerabilities Catalog, linked here.
-
Threat Intelligence Researches holds Brandefense's own findings on live threats. Security News explains regulation, standards and official guidance.
-
Brandefense is an AI-driven threat intelligence company. Its platform covers cyber threat intelligence, digital risk protection and external attack surface management. You can request a demo on your own domain from the Request A Demo page.
-
The page lists 160 items. You can filter by year, from 2022 to 2026. The newest come first.
-
They give dates, fixes, attribution and what to check. Topics include exploited vulnerabilities, ransomware entry points and supply chain compromises.
-
Yes. One article covers five VPN and firewall flaws added to the CISA KEV catalog in 2025 and 2026 that carry a ransomware flag. It gives dates, fixed versions and what to check.
-
Yes. One article covers remote support and file transfer flaws that CISA flagged for ransomware use in 2025 and 2026. It gives dates, fixes, attribution and checks.
Research Is General. Your Exposure Is Not.
A demo of the platform, run on your own domain.