Threat Intelligence Research. Our Own Findings.
Deep dives into live threats: exploited vulnerabilities, ransomware entry points and supply chain compromises.
APT Groups BlackTech BlackTech is a China-aligned APT group specializing in long-term cyber espionage through network infrastructure compromise, targeting telecom, government, and tech sectors. 
APT Groups UAC-0194: Inside a Rapidly Evolving NTLM-Exploiting Espionage Operation UAC-0194 is a high-risk, Russian-affiliated threat actor leveraging NTLM vulnerabilities for stealthy credential theft and cyber espionage across Eastern Europe. 
Reports Ransomware Trends Report | Q1 2026 A data-driven analysis of ransomware activity in Q1 2026, including threat actor rankings, sector targeting, and Q2 outlook. 
Malware Analysis Reports Fog Ransomware Technical Analysis Fog ransomware technical analysis report: how it is believed to gain access, how it disrupts systems, plus detections, IoCs and response advice. 
APT Groups UAC-0102: Inside a Covert Espionage Operation Targeting Ukraine and Beyond UAC-0102 is a stealth-focused cyber espionage group targeting Ukrainian government and infrastructure entities using spearphishing and cloud-based C2 techniques. 
APT Groups Inside the Operations of Crazy Evil: The Rise of a Global Crypto-Focused Cybercrime Network An in-depth analysis of Crazy Evil, a financially motivated cybercrime group targeting Web3, crypto platforms, and digital identities through advanced social engineering and malware campaigns. 
APT Groups Konni (Vedalia / TA406 / Opal Sleet): North Korea’s Steady Hand in Espionage Operations Konni is a North Korea-aligned APT group focused on long-term cyber espionage through spearphishing, credential harvesting, and lightweight malware campaigns. 
APT Groups Warlock Group: The Rise of GOLD SALEM (Storm-2603) in the Ransomware Landscape Warlock Group (GOLD SALEM / Storm-2603) is an emerging ransomware actor exploiting SharePoint ToolShell vulnerabilities to target global enterprises with double extortion tactics. 
APT Groups DarkHotel (APT-C-06 / ATK52 / DUBNIUM): The Global Espionage Network Behind Elite Cyber Intrusions DarkHotel is a South Korea-linked APT group known for evolving from hotel Wi-Fi attacks to sophisticated supply chain and cloud-based espionage operations. All 19 pages
Questions About Threat Intelligence Researches.
Last updated June 9, 2026-
Research articles on exploited vulnerabilities, ransomware entry points, supply chain compromises and attacker methods, with the newest first.
-
New research is added several times a month. Every article shows its date.
-
Type a word in the search box or pick a year. The count above the list updates as you filter.
-
CISA maintains the Known Exploited Vulnerabilities Catalog, linked here.
-
Threat Intelligence Researches holds Brandefense's own findings on live threats. Security News explains regulation, standards and official guidance.
-
Brandefense is an AI-driven threat intelligence company. Its platform covers cyber threat intelligence, digital risk protection and external attack surface management. You can request a demo on your own domain from the Request A Demo page.
-
The page lists 160 items. You can filter by year, from 2022 to 2026. The newest come first.
-
They give dates, fixes, attribution and what to check. Topics include exploited vulnerabilities, ransomware entry points and supply chain compromises.
-
Yes. One article covers five VPN and firewall flaws added to the CISA KEV catalog in 2025 and 2026 that carry a ransomware flag. It gives dates, fixed versions and what to check.
-
Yes. One article covers remote support and file transfer flaws that CISA flagged for ransomware use in 2025 and 2026. It gives dates, fixes, attribution and checks.
Research Is General. Your Exposure Is Not.
A demo of the platform, run on your own domain.