Threat Intelligence Research. Our Own Findings.
Deep dives into live threats: exploited vulnerabilities, ransomware entry points and supply chain compromises.
APT Groups Mustang Panda: Persistent Threat of a China aligned Espionage Group Mustang Panda (Earth Preta) is one of the most persistent China-linked APT groups, adapting tools like PlugX, ToneShell, and Yokai to target governments, NGOs, and critical… 
APT Groups DragonForce Ransomware: From Hacktivism to High-Street Extortion DragonForce, once a hacktivist collective, has transformed into a financially driven ransomware cartel. From high-profile UK retailers to global enterprises, the group leverages affiliates, white-label branding,… 
APT Groups APT29 (Cozy Bear): Aliases, Attacks and Defenses APT29, also known as Cozy Bear, is one of Russia’s most persistent cyber espionage groups. From SolarWinds to Microsoft, their operations highlight the sophistication of identity-based… 
Malware Analysis Reports Oyster Backdoor Technical Analysis Read how the Oyster backdoor infiltrates systems through fake Microsoft Teams installers, gathers system data and talks to command and control servers. 
Country Reports Ireland Cybersecurity Threat Landscape Ireland cybersecurity threat landscape report: dark web activity, stolen financial data, exposed credentials and ransomware risks for Irish organisations. 
Country Reports Romania Cybersecurity Threat Landscape & Strategic Insights Brandefense Analyst Team highlights rising dark web activity, phishing campaigns, ransomware attacks, and disinformation operations targeting Romania’s critical sectors. Download the full report to explore actionable… 
Country Reports Germany Threat Landscape Report Germany cybersecurity threat landscape: phishing, infostealer malware and dark web data sales aimed at German financial institutions and their customers. 
Country Reports Azerbaijan Threat Landscape Report Azerbaijan cybersecurity threat landscape report: key incidents, state-backed groups, hacktivists and cybercriminals targeting government and key sectors. 
Malware Analysis Reports Mint Stealer Technical Analysis Mint Stealer analysis: how this MaaS malware steals browser and wallet data, evades detection and uses C2 servers, plus IOCs for security teams. All 19 pages
Questions About Threat Intelligence Researches.
Last updated June 9, 2026-
Research articles on exploited vulnerabilities, ransomware entry points, supply chain compromises and attacker methods, with the newest first.
-
New research is added several times a month. Every article shows its date.
-
Type a word in the search box or pick a year. The count above the list updates as you filter.
-
CISA maintains the Known Exploited Vulnerabilities Catalog, linked here.
-
Threat Intelligence Researches holds Brandefense's own findings on live threats. Security News explains regulation, standards and official guidance.
-
Brandefense is an AI-driven threat intelligence company. Its platform covers cyber threat intelligence, digital risk protection and external attack surface management. You can request a demo on your own domain from the Request A Demo page.
-
The page lists 160 items. You can filter by year, from 2022 to 2026. The newest come first.
-
They give dates, fixes, attribution and what to check. Topics include exploited vulnerabilities, ransomware entry points and supply chain compromises.
-
Yes. One article covers five VPN and firewall flaws added to the CISA KEV catalog in 2025 and 2026 that carry a ransomware flag. It gives dates, fixed versions and what to check.
-
Yes. One article covers remote support and file transfer flaws that CISA flagged for ransomware use in 2025 and 2026. It gives dates, fixes, attribution and checks.
Research Is General. Your Exposure Is Not.
A demo of the platform, run on your own domain.