Cyber attacks are no longer a question of if, they’re a question of when. Organizations face a sophisticated threat landscape, from ransomware and phishing attacks to insider threats and supply chain vulnerabilities. While traditional cybersecurity…
Something we track in the Adversary Operations Group is residential proxy networks. Infoblox uncovered an operation they call Lurking Lizard...
Someone pretending to be an Adidas recruiter sent me a meeting invitation last week. At least, that is what the email looked like. The brand...
Cybersecurity architecture is the strategic framework that defines how an organization protects its users, applications, devices, networks, and data. Rather than focusing on individual security products, it creates a united security ecosystem where technologies work…
Microsoft released an emergency patch on July 9, 2026, for a Microsoft Defender zero-day vulnerability dubbed “RoguePlanet” (CVE-2026-50656) that allows attackers to gain SYSTEM privileges on fully patched Windows 10 and Windows 11 devices (BleepingComputer,…
We track vulnerabilities in the Adversary Operations Group that have a clear exploitation path and no viable workaround. This pair on the SonicWall SMA 1000 is both. SonicWall confirmed on July 15 that attackers are actively…
The European Union and the United Kingdom jointly sanctioned dozens of Russian intelligence officers and affiliated entities on 13 July 202...
On July 13, 2026, the Department of War (DoW) announced a pause of the planned CMMC Phase II implementation while it conducts a 60-day rev...
A joint advisory from 19 allied cybersecurity agencies published on 13 July 2026 warns that Russian state hackers are systematically comprom...
We track caller ID spoofing platforms in the Adversary Operations Group. Russian Coms was one of the biggest. On July 13, 2026, the National Crime Agency charged five people across London for their roles in…
We track active phishing campaigns in the Thrive Adversary Operations Group (AOG) all day, every day. And here is what we keep seeing. Defenders still think phishing means fake login pages asking for passwords. That…