Threat Intelligence Research. Our Own Findings.
Deep dives into live threats: exploited vulnerabilities, ransomware entry points and supply chain compromises.
Threat Intelligence Researches Initial access techniques: all 11 in MITRE ATT&CK MITRE ATT&CK lists 11 initial access techniques under TA0001. See every ID, name and MITRE description in one full list, which is not a ranking. 
Threat Intelligence Researches 2025 CWE Top 25: Most Dangerous Software Weaknesses MITRE's 2025 CWE Top 25 ranks cross-site scripting first. See the top 10 weaknesses with scores, KEV counts, rank changes and what the KEV data adds. 
Threat Intelligence Researches Salt Typhoon: what telecom customers should do Salt Typhoon breached telecom networks through known flaws. What customers and CISOs should ask carriers and check on their own routers and edge devices. 
Threat Intelligence Researches Bybit theft: what it teaches about supplier access Bybit says a Safe developer's credentials were compromised. What the $1.5 billion theft teaches a CISO about supplier access and approval tools. 
Reports Ransomware Trends Report | Q3 2026 The Brandefense Ransomware Trends Report Q3 2026 analyzes 2,898 confirmed ransomware incidents across 109 active threat groups, covering top operators, sector and country targeting, MITRE ATT&CK… 
Blog WIRTE: Covert Espionage Actor Targeting the Middle East and Beyond WIRTE is a Hamas-linked cyber espionage group that leverages phishing, PowerShell malware, and cloud-based command-and-control infrastructure to conduct long-term intelligence operations across the Middle East. 
Reports Ransomware Trends Report | Q2 2026 The Brandefense Ransomware Trends Report Q2 2026 analyzes 2,509 confirmed ransomware incidents across 91 active threat groups, revealing the latest attacker trends, industry targeting, and strategic… 
APT Groups GC01 (Golden Chickens): Inside the Arsenal of a Premier E-Crime MaaS Provider Golden Chickens (GC01) is a top-tier Malware-as-a-Service provider enabling cybercriminal operations worldwide. Discover its tools, tactics, and impact. 
Blog ShadyPanda: What Is Known About the Browser Extension Campaign ShadyPanda is a name from a single vendor report about malicious browser extensions. This page covers what MITRE ATT&CK confirms about extension abuse and how to… All 19 pages
Questions About Threat Intelligence Researches.
Last updated June 9, 2026-
Research articles on exploited vulnerabilities, ransomware entry points, supply chain compromises and attacker methods, with the newest first.
-
New research is added several times a month. Every article shows its date.
-
Type a word in the search box or pick a year. The count above the list updates as you filter.
-
CISA maintains the Known Exploited Vulnerabilities Catalog, linked here.
-
Threat Intelligence Researches holds Brandefense's own findings on live threats. Security News explains regulation, standards and official guidance.
-
Brandefense is an AI-driven threat intelligence company. Its platform covers cyber threat intelligence, digital risk protection and external attack surface management. You can request a demo on your own domain from the Request A Demo page.
-
The page lists 160 items. You can filter by year, from 2022 to 2026. The newest come first.
-
They give dates, fixes, attribution and what to check. Topics include exploited vulnerabilities, ransomware entry points and supply chain compromises.
-
Yes. One article covers five VPN and firewall flaws added to the CISA KEV catalog in 2025 and 2026 that carry a ransomware flag. It gives dates, fixed versions and what to check.
-
Yes. One article covers remote support and file transfer flaws that CISA flagged for ransomware use in 2025 and 2026. It gives dates, fixes, attribution and checks.
Research Is General. Your Exposure Is Not.
A demo of the platform, run on your own domain.