China’s Noncombatant Evacuation Operations: 2005–2025
Section K of the PDF attached to this blog post provides a summary of each NEO, organized chronologically by country. […]
Data Security
China, India ran separate spying campaigns against same Pakistani police force
Hacking groups linked to China and India conducted parallel, unconnected espionage operations against Pakistani law enforcement over more than two
Abusing Cloud Logging Services for Defense Evasion and Visibility
Executive Summary Cloud logging services provide comprehensive visibility into actions performed within cloud resources, making them essential for security monitoring.
Recorded Future Launches Impact and Metrics Dashboard
Today, Recorded Future is announcing the Impact and Metrics Dashboard, a new way for every Recorded Future customer to see
License plate cameras may be next target after Supreme Court reins in location tracking
A recent Supreme Court ruling which found that cell phone location history searches require a warrant could have a ripple
Integrity Verification for AI Agent Supply Chains
Executive Summary AI agents now extend their capabilities by installing third-party skills the way smartphones install apps. Anyone can publish
Living Off the Pipeline: Defending Against CI/CD Subversion
The software supply chain has become one of the most attractive targets for modern adversaries, but the attacks seen in
Cyber-Enabled Maritime Sanctions Evasion
Executive Summary Iranian and Russian shadow fleet vessels, along with multiple sanctions evasion networks (SENs), are using online infrastructure likely
Ryuk operator pleads guilty; Blackcat/AlphV conspirator gets nearly 6-year sentence
U.S. prosecutors announced two milestones this week in their cases against major ransomware groups. Karen Serobovich Vardanyan, a 34-year-old Armenian
The Ruthless Rise of The Gentlemen Ransomware
Executive Summary The Gentlemen (aka Storm-2697) is a Ransomware-as-a-Service (RaaS) program active since at least July 2025. Public reporting indicates