Threat Intelligence Research. Our Own Findings.
Deep dives into live threats: exploited vulnerabilities, ransomware entry points and supply chain compromises.
APT Groups Kasablanka: The Emerging North African Cyber Threat Actor Kasablanka is an emerging cyber threat actor suspected to originate from North Africa. Active since 2021, the group evolved from hacktivism to phishing-driven espionage campaigns targeting… 
Malware Analysis Reports Breaking the Angel’s Wing: Angel Drainer Angel Drainer steals digital assets with phishing pages and rents its panel to other criminals. See what this report covers: methods, detections and IoCs. 
APT Groups Turla APT: Russia’s Longstanding Cyber Espionage Powerhouse Turla is one of the most sophisticated Russian APT groups linked to the FSB. Active since the early 2000s, it conducts long-term cyber espionage campaigns using… 
APT Groups APT19 (DEEP PANDA): A Persistent China-Aligned Espionage and Credential Theft Actor APT19 (Deep Panda) is a China-aligned advanced persistent threat group focused on credential harvesting, phishing campaigns, and long-term espionage operations targeting government, telecom, and technology organizations… 
APT Groups HAFNIUM APT Group (Silk Typhoon): Exploiting the Global Attack Surface for Strategic Espionage HAFNIUM (Silk Typhoon) is a China-aligned cyber espionage group known for exploiting internet-facing enterprise infrastructure, including the large-scale Microsoft Exchange attacks that impacted organizations worldwide. 
APT Groups Tick APT Group (BRONZE BUTLER): A Long-Running East Asian Cyber Espionage Actor Tick (Bronze Butler) is a long-running China-aligned APT group known for stealthy cyber espionage campaigns targeting government, defense, and technology sectors in East Asia. 
APT Groups FishMonger APT Group: A Persistent China-Aligned Cyber Espionage Actor FishMonger (AQUATIC PANDA) is a China-aligned advanced persistent threat group conducting long-term cyber espionage against government, academic, and technology sectors worldwide. 
APT Groups Dark Caracal APT Group (G0070): Mobile-Centric Espionage and Regional Surveillance Dark Caracal (G0070) is a Lebanon-linked APT conducting long-term mobile surveillance operations targeting government, military, journalists, and activists across MENA. 
APT Groups LIMINAL PANDA: China’s Emerging Espionage Threat in the Semiconductor and Technology Sectors Liminal Panda is an emerging China-linked cyber-espionage actor targeting semiconductor, AI, and defense sectors through cloud-native intrusion and identity abuse techniques. All 19 pages
Questions About Threat Intelligence Researches.
Last updated June 9, 2026-
Research articles on exploited vulnerabilities, ransomware entry points, supply chain compromises and attacker methods, with the newest first.
-
New research is added several times a month. Every article shows its date.
-
Type a word in the search box or pick a year. The count above the list updates as you filter.
-
CISA maintains the Known Exploited Vulnerabilities Catalog, linked here.
-
Threat Intelligence Researches holds Brandefense's own findings on live threats. Security News explains regulation, standards and official guidance.
-
Brandefense is an AI-driven threat intelligence company. Its platform covers cyber threat intelligence, digital risk protection and external attack surface management. You can request a demo on your own domain from the Request A Demo page.
-
The page lists 160 items. You can filter by year, from 2022 to 2026. The newest come first.
-
They give dates, fixes, attribution and what to check. Topics include exploited vulnerabilities, ransomware entry points and supply chain compromises.
-
Yes. One article covers five VPN and firewall flaws added to the CISA KEV catalog in 2025 and 2026 that carry a ransomware flag. It gives dates, fixed versions and what to check.
-
Yes. One article covers remote support and file transfer flaws that CISA flagged for ransomware use in 2025 and 2026. It gives dates, fixes, attribution and checks.
Research Is General. Your Exposure Is Not.
A demo of the platform, run on your own domain.