Threat Intelligence Research. Our Own Findings.
Deep dives into live threats: exploited vulnerabilities, ransomware entry points and supply chain compromises.
APT Groups Winter Vivern (TAG-70 / UAC-0114 / TA473): A Persistent Eastern European Cyber-Espionage Threat Targeting NATO and EU Governments Winter Vivern (TAG-70 / UAC-0114 / TA473) is a state-aligned cyber-espionage group targeting NATO and EU entities via credential harvesting, Zimbra exploitation, and persistent phishing operations. 
APT Groups APT-C-36: Latin America’s Persistent Cyber-Espionage Force APT-C-36, also known as Blind Eagle, is a Colombia-linked cyber-espionage group active since 2018. Primarily targeting government and financial sectors in Latin America, the actor leverages… 
Malware Analysis Reports Hunters International Ransomware Technical Analysis Technical analysis of Hunters International ransomware: a Rust-based RaaS sample that uses AES and RSA encryption, adds .locked and leaves a ransom note. 
Malware Analysis Reports Strela Stealer Technical Analysis Strela stealer is Windows malware that steals Outlook and Thunderbird logins. See what the technical report covers: methods, detections and IoCs. 
APT Groups Inside the Operations of Inception Framework: A Decade of Stealth, Espionage, and Global Targeting Inception Framework is a long-running Russian-speaking cyberespionage group focused on government, diplomatic, and defense targets using stealthy spearphishing and cloud-based intrusion techniques. 
APT Groups APT27 APT27 is a long-running China-aligned cyber espionage group targeting governments, defense contractors, and critical infrastructure through stealthy, high-impact operations. 
APT Groups APT3 (BORON): A Pioneering China-Aligned Cyber Espionage Group APT3 (BORON) is one of the earliest China-aligned APT groups, known for exploit-driven espionage campaigns targeting defense, advanced manufacturing, and government sectors. 
APT Groups FIN11 Threat Group Profile FIN11 is a globally active, financially motivated cybercrime group known for large-scale phishing campaigns, malware distribution, and ransomware ecosystem enablement. 
APT Groups APT35: Iran’s Persistent Cyber Espionage Force APT35, also known as Charming Kitten, is an Iranian state-linked cyber espionage group active since 2011, conducting phishing, credential theft, and influence operations against political, academic,… All 19 pages
Questions About Threat Intelligence Researches.
Last updated June 9, 2026-
Research articles on exploited vulnerabilities, ransomware entry points, supply chain compromises and attacker methods, with the newest first.
-
New research is added several times a month. Every article shows its date.
-
Type a word in the search box or pick a year. The count above the list updates as you filter.
-
CISA maintains the Known Exploited Vulnerabilities Catalog, linked here.
-
Threat Intelligence Researches holds Brandefense's own findings on live threats. Security News explains regulation, standards and official guidance.
-
Brandefense is an AI-driven threat intelligence company. Its platform covers cyber threat intelligence, digital risk protection and external attack surface management. You can request a demo on your own domain from the Request A Demo page.
-
The page lists 160 items. You can filter by year, from 2022 to 2026. The newest come first.
-
They give dates, fixes, attribution and what to check. Topics include exploited vulnerabilities, ransomware entry points and supply chain compromises.
-
Yes. One article covers five VPN and firewall flaws added to the CISA KEV catalog in 2025 and 2026 that carry a ransomware flag. It gives dates, fixed versions and what to check.
-
Yes. One article covers remote support and file transfer flaws that CISA flagged for ransomware use in 2025 and 2026. It gives dates, fixes, attribution and checks.
Research Is General. Your Exposure Is Not.
A demo of the platform, run on your own domain.