Cybersecurity Blog

Cybersecurity Research from the Front Lines

Threat research, infrastructure analysis, and operational guidance from the Team Cymru intelligence team, drawn from the global network visibility we maintain across the internet.

Who
Team Cymru's own threat analysts and researchers, writing from the investigations they run.
What
Named threat actors, mapped command-and-control infrastructure, ransomware toolkit teardowns, and the pivot methodology behind them. 150+ posts and counting.
How
Sourced from Team Cymru's own internet-scale network telemetry. We analyze what we see directly, not third-party feeds or aggregated reporting.
When
New analysis every week, plus rapid posts when a campaign breaks.
Why
So defenders get operational detail they can act on inside a SOC or intel workflow. Published in full, with no gate and no registration wall.
Filter
Sorted Newest first
tcblogposts
4
min read

Threat Intelligence: A CISO ROI Guide - Prevent Data Breaches

Threat Reports & Intelligence Briefings
March 15, 2023
Uncover the power of threat intelligence for a technology company. Learn how to prevent data breaches and maximize ROI as a CISO with expert guidance.
tcblogposts
2
min read

Threat Intelligence: A CISO ROI Guide - Focus on Real-Time Threat Intelligence

Executive Strategy, Risk & ROI
March 15, 2023
Uncover how real-time threat intelligence can drive ROI for CISOs in technology companies. Explore the benefits and strategies in this insightful guide.
tcblogposts
4
min read

Threat Intelligence: A CISO’s ROI - Avoid Inheriting a Security Problem with M&A Acquisitions

Executive Strategy, Risk & ROI
March 15, 2023
Learn how threat intelligence impacts a CISO's ROI and helps avoid security issues during M&A acquisitions. Essential insights for technology companies.
tcblogposts
4
min read

Threat Intelligence: A CISO ROI Guide - Automate to Increase Productivity

Threat Reports & Intelligence Briefings
March 15, 2023
Take your cybersecurity strategy to the next level with Team Cymru's CISO ROI Guide to Threat Intelligence. Discover how automating threat intelligence can help your organization save money, increase productivity, and stay ahead of emerging threats.
S2 Research Team
5
min read

Desde Chile con Malware (From Chile with Malware)

Threat Reports & Intelligence Briefings
February 25, 2023
Learn the truth about the "From Chile with Malware" campaign in this insightful blog post from Team Cymru. Discover the real origins of this threat and how it highlights the need for greater cybersecurity awareness.
tcblogposts
3
min read

Attack Surface Management: Why Maturity Models Matter – Part I

Attack Surface & Exposure Visibility
February 21, 2023
Learn why maturity models are crucial for effective Attack Surface Management. Discover how they can benefit your technology company in this insightful blog post.
tcblogposts
3
min read

Attack Surface Management: Why Maturity Models Matter – Part II

Threat Reports & Intelligence Briefings
February 21, 2023
Discover the critical role of maturity models in Attack Surface Management for technology companies. Uncover the why and how in Part II of this insightful series.
S2 Research Team
7
min read

A Blog with NoName

Threat Reports & Intelligence Briefings
January 27, 2023
Discover the latest tech trends and insights on the 'A Blog with NoName'. Stay updated with the cutting-edge innovations from a leading Technology Company.
S2 Research Team
8
min read

Darth Vidar: The Dark Side of Evolving Threat Infrastructure

Threat Hunting & Detection Engineering
January 19, 2023
Uncover the menacing force of "Darth Vidar" and its impact on evolving threat infrastructure. Explore how a Technology Company can combat this dark side.
S2 Research Team
9
min read

Inside the IcedID BackConnect Protocol

Threat Reports & Intelligence Briefings
December 21, 2022
Discover the inner workings of the IcedID BackConnect Protocol with insights from a leading technology company. Uncover the intricate details in our blog post!
S2 Research Team
3
min read

Iranian Exploitation Activities Continue as of November 2022

Attack Surface & Exposure Visibility
December 9, 2022
Stay informed on the latest cybersecurity threats with Team Cymru's ongoing tracking of Iranian exploitation activities. Discover the latest insights and telemetry data on this ongoing threat and how organizations can better defend against it.
S2 Research Team
7
min read

Inside the V1 Raccoon Stealer’s Den

Cloud & Application Security
November 3, 2022
Stay ahead of the latest cybersecurity threats with Team Cymru's expert analysis. Dive deep into the V1 Raccoon Stealer's den and learn how it operates and the possible connections to Kharkiv and the CC2BTC Marketplace.

Stay in the loop

Stay current with Team Cymru insights

Get the latest research, articles, and threat intelligence resources, delivered straight to your inbox.

Engage with Team Cymru and the Threat Intelligence Community

Connect with the global defender community and stay current with Team Cymru research, events, and news.

CommunityJoin the defender community.Where threat hunters, CSIRTs, and security operators share intelligence and build defense-in-depth together.Connect with defenders EventsMeet defenders in person.Team Cymru hosts RISE regional conferences and the annual Underground Economy gathering for vetted defenders.See upcoming events WebinarsWatch expert sessions.On-demand webinars from Team Cymru analysts and invited practitioners on threat intelligence and defender operations.Watch the webinars PodcastHear long-form conversations.Future of Threat Intelligence: conversations with security leaders and researchers shaping the next generation of defense.Hear the conversations Press ReleasesGet it from the source.Company announcements, product launches, partnerships, and operational milestones, straight from Team Cymru.Read press releases