Threat Intelligence Research. Our Own Findings.
Deep dives into live threats: exploited vulnerabilities, ransomware entry points and supply chain compromises.
APT Groups Ghostwriter: Hybrid Influence and Espionage Operations in Eastern Europe Ghostwriter, a Belarus/Russia-linked APT active since 2016, executes hybrid campaigns combining espionage, phishing, and disinformation against NATO and EU entities. Learn how these operations evolved into… 
APT Groups GhostEmperor: Advanced China-Linked Espionage Campaigns GhostEmperor is a China-linked APT active since 2019, leveraging stealthy rootkits like Demodex to conduct espionage across Asia, the Middle East, and Africa. Known for its… 
APT Groups Earth Estries – Threat Actor Sheet Earth Estries is a China-linked APT group active since the early 2020s, known for espionage campaigns targeting global governments, research institutions, and critical infrastructure. By 2025,… 
APT Groups The Lazarus Group: Espionage, Sabotage, and Cybercrime Under One Umbrella The Lazarus Group — a North Korea–linked APT — has executed some of the most disruptive cyberattacks in modern history. From Sony Pictures to billion-dollar crypto… 
APT Groups Larva208: A Hybrid Threat Actor to Watch Larva208 has rapidly emerged as one of the most alarming Russia-aligned hybrid threat actors, merging financial cybercrime with espionage campaigns targeting European and NATO-affiliated organizations. 
APT Groups Silent Lynx: Up-and-Coming Espionage Threat From Central Asia Silent Lynx is a newly identified APT group operating from Central Asia with a focus on espionage. Using spear-phishing, PowerShell, and Golang implants, the group targets… 
Country Reports United Kingdom Cybersecurity Threat Landscape & Strategic Insights What the 2025 report states about the United Kingdom cybersecurity threat landscape: ransomware, fraud, dark web activity and exploited flaws. 
APT Groups SilverFox APT: Profile, TTPs and Defense SilverFox APT is rapidly evolving into one of 2025’s most dangerous cyber threat actors. Combining espionage with financial motives, it exploits edge devices, cloud identities, and… 
APT Groups Gamaredon Group: A Persistent Russian Espionage Threat Gamaredon is a Russia-linked APT active since 2013, targeting Ukraine, NATO, and critical sectors. Using phishing, malware, and custom backdoors, the group continues to evolve into… All 19 pages
Questions About Threat Intelligence Researches.
Last updated June 9, 2026-
Research articles on exploited vulnerabilities, ransomware entry points, supply chain compromises and attacker methods, with the newest first.
-
New research is added several times a month. Every article shows its date.
-
Type a word in the search box or pick a year. The count above the list updates as you filter.
-
CISA maintains the Known Exploited Vulnerabilities Catalog, linked here.
-
Threat Intelligence Researches holds Brandefense's own findings on live threats. Security News explains regulation, standards and official guidance.
-
Brandefense is an AI-driven threat intelligence company. Its platform covers cyber threat intelligence, digital risk protection and external attack surface management. You can request a demo on your own domain from the Request A Demo page.
-
The page lists 160 items. You can filter by year, from 2022 to 2026. The newest come first.
-
They give dates, fixes, attribution and what to check. Topics include exploited vulnerabilities, ransomware entry points and supply chain compromises.
-
Yes. One article covers five VPN and firewall flaws added to the CISA KEV catalog in 2025 and 2026 that carry a ransomware flag. It gives dates, fixed versions and what to check.
-
Yes. One article covers remote support and file transfer flaws that CISA flagged for ransomware use in 2025 and 2026. It gives dates, fixes, attribution and checks.
Research Is General. Your Exposure Is Not.
A demo of the platform, run on your own domain.