Cybersecurity Blog

Cybersecurity Research from the Front Lines

Threat research, infrastructure analysis, and operational guidance from the Team Cymru intelligence team, drawn from the global network visibility we maintain across the internet.

Who
Team Cymru's own threat analysts and researchers, writing from the investigations they run.
What
Named threat actors, mapped command-and-control infrastructure, ransomware toolkit teardowns, and the pivot methodology behind them. 150+ posts and counting.
How
Sourced from Team Cymru's own internet-scale network telemetry. We analyze what we see directly, not third-party feeds or aggregated reporting.
When
New analysis every week, plus rapid posts when a campaign breaks.
Why
So defenders get operational detail they can act on inside a SOC or intel workflow. Published in full, with no gate and no registration wall.
Filter
Sorted Newest first
Brian Eckman
6
min read

Find All the IOCs!

Malware & Ransomware Analysis
July 21, 2020
Uncover the latest IOCs and stay ahead of cyber threats. Explore how a leading technology company is finding all the IOCs and safeguarding against potential attacks.
Jacomo Piccolini
4
min read

Network Perimeters in the Age of Social Distancing

Threat Reports & Intelligence Briefings
June 17, 2020
Explore the impact of social distancing on network perimeters in the age of COVID-19. Learn how technology companies are adapting to secure remote work environments.
tcblogposts
3
min read

LDAPt Your DNS Configuration to Prevent Internal Domain Leakages

Routing, DNS & Certificate Security
May 28, 2020
Learn how to prevent internal domain leakages by LDAPt-ing your DNS configuration. Keep your technology company's data secure with these expert tips.
Tarek Sendi
3
min read

Dissecting DDoS Attacks

Threat Reports & Intelligence Briefings
May 15, 2020
Uncover the anatomy of DDoS attacks with our in-depth guide. Learn how to protect your technology company from these disruptive cyber threats.
tcblogposts
3
min read

Adapt and Overcome

Malware & Ransomware Analysis
April 23, 2020
Discover how a 'Technology Company' can adapt and overcome challenges with innovative strategies. Learn how to thrive in the face of adversity.
tcblogposts
4
min read

Research Shows Number of Potentially Compromised Organizations More than Doubles Since January

Threat Reports & Intelligence Briefings
April 21, 2020
Discover the alarming rise in compromised organizations since January. Learn how this impacts technology companies and what steps can be taken to mitigate the risks.
James Shank
5
min read

BGP Hijacking and BGP Security

Incident Response & Preemptive Defense
April 8, 2020
Learn how BGP hijacking can impact your network security. Our in-depth guide explores BGP security measures to protect your technology company's infrastructure.
tcblogposts
2
min read

Covid-19 Cyber Threat: DanaBot

Malware & Ransomware Analysis
April 3, 2020
Learn how the Covid-19 cyber threat DanaBot is impacting technology companies and what you can do to protect your business from this evolving danger.
S2 Research Team
4
min read

How the Iranian Cyber Security Agency Detects Emissary Panda Malware

Malware & Ransomware Analysis
March 25, 2020
Uncover the intricate methods employed by the Iranian Cyber Security Agency to identify and combat Emissary Panda malware, a crucial insight for tech companies.
David Monnier
1
min read

Something to help you manage your new remote workforce.

Attack Surface & Exposure Visibility
March 8, 2020
Discover the ultimate guide to effectively managing your new remote workforce, tailored for technology companies. Overcome challenges and boost productivity!
S2 Research Team
3
min read

Gamaredon: An Insight Into Victimology Using Recon

Threat Actor, Campaign & Infrastructure Intelligence
March 3, 2020
Uncover the tactics of Gamaredon cyberattacks and gain a deeper understanding of victimology through reconnaissance. Explore the latest insights and analysis.
James Shank
4
min read

Cheers to the Pioneers

Events, Conferences & Community Engagement
February 24, 2020
Explore the innovative world of pioneers in technology with our insightful blog post. Join us in raising a toast to the trailblazers shaping the future!

Stay in the loop

Stay current with Team Cymru insights

Get the latest research, articles, and threat intelligence resources, delivered straight to your inbox.

Engage with Team Cymru and the Threat Intelligence Community

Connect with the global defender community and stay current with Team Cymru research, events, and news.

CommunityJoin the defender community.Where threat hunters, CSIRTs, and security operators share intelligence and build defense-in-depth together.Connect with defenders EventsMeet defenders in person.Team Cymru hosts RISE regional conferences and the annual Underground Economy gathering for vetted defenders.See upcoming events WebinarsWatch expert sessions.On-demand webinars from Team Cymru analysts and invited practitioners on threat intelligence and defender operations.Watch the webinars PodcastHear long-form conversations.Future of Threat Intelligence: conversations with security leaders and researchers shaping the next generation of defense.Hear the conversations Press ReleasesGet it from the source.Company announcements, product launches, partnerships, and operational milestones, straight from Team Cymru.Read press releases