Schedule A Demo

threat research

Understanding the Cookie-Bite MFA Bypass Risk

Blog, Cyber Attacks, Cyber Threats, Third-Wave AI, Threat Detection, Threat Intelligence Research, Threat Research, threat research, Zero Day Attacks / By

The Cookie-Bite attack is an advanced evolution of Pass-the-Cookie exploits. This tactic bypasses Multi-Factor Authentication (MFA) by leveraging stolen authentication cookies—such as Azure Entra ID’s ESTSAUTH and ESTSAUTHPERSISTENT—to impersonate users.

Understanding the Cookie-Bite MFA Bypass Risk Read More →

The State of AI in Cybersecurity 2025: What’s Working, What’s Lagging, and Why It Matters Now More Than Ever

AI, Analyst Research, Blog, Ponemon, Preemptive AI, Third-Wave AI, Threat Intelligence Research, Threat Research, threat research / By

This second annual study offers a deeper look at how organizations are using AI to detect and respond to attacks faster, where it’s making the biggest impact, and what’s holding adoption back.

The State of AI in Cybersecurity 2025: What’s Working, What’s Lagging, and Why It Matters Now More Than Ever Read More →

Safeguarding SAP Systems Amid Rising Financial Fraud and Economic Stress

Blog, Financial Services, Threat Brief, Threat Briefing, Threat Detection, Threat Intelligence Research, Threat Research, threat research, Zero Day Attacks / By

SAP systems are the backbone of enterprise finance—and they’re under attack. As economic pressures rise, so do attempts to exploit financial platforms. From insider threats to ransomware and zero-day vulnerabilities, SAP’s critical role in handling billions of dollars daily makes it a high-value target. The recent disclosure of CVE-2025-31324, a critical zero-day in SAP NetWeaver (CVSS 10.0), exposed just

Safeguarding SAP Systems Amid Rising Financial Fraud and Economic Stress Read More →

The Rise of AI-Driven Cyberattacks: Accelerated Threats Demand Predictive and Real-Time Defenses 

Adversarial AI, Blog, Cyber Threats, Predictive AI, Third-Wave AI, Threat Detection, Threat Intelligence Research, Threat Research, threat research / By

Artificial intelligence (AI) is transforming industries, but it’s also empowering cybercriminals to launch sophisticated, high-speed cyberattacks. AI-driven attacks, particularly those orchestrated by autonomous AI agents, operate at an accelerated pace, compressing the window for detection and protection.

The Rise of AI-Driven Cyberattacks: Accelerated Threats Demand Predictive and Real-Time Defenses  Read More →

WarGames – it’s not 1983 anymore

Blog, critical infrastructure, Cyber Threats, infrastructure, Nation-State Bad Actors, Nation-State Threat Actors, National Cybersecurity Strategy, Threat Brief, Threat Briefing, Threat Intelligence Research, Threat Research, threat research, Zero Day Attacks, Zero-Trust / By

China’s state-sponsored cyber operations, driven by groups like Volt Typhoon, Salt Typhoon, Brass Typhoon, and APT41, and amplified by techniques like Fast Flux DNS, are not chasing Hollywood apocalypse—they’re seizing America’s networks, turning our infrastructure into a weapon against us.

WarGames – it’s not 1983 anymore Read More →

Volt Typhoon, Salt Typhoon & APT41: This is No Longer a Drill 

Blog, Cyber Threats, Cybersecurity News, Nation-State Bad Actors, Nation-State Threat Actors, National Cybersecurity Strategy, Real-Time Threat Detection, Threat Detection, Threat Intelligence Research, Threat Research, threat research / By

New threat intelligence confirms what many infrastructure leaders have long feared: Chinese state-sponsored threat groups are not only capable of infiltrating U.S. critical systems—they already have.

Volt Typhoon, Salt Typhoon & APT41: This is No Longer a Drill  Read More →

Geopolitical and Hacktivist Nightmare

The Fast Flux DNS Threat: A Call to Action Against a Geopolitical and Hacktivist Nightmare

Blog, Cyber Threats, Insider Threats, Nation-State Threat Actors, Real-Time Threat Detection, Threat Detection, Threat Intelligence Research, Threat Research, threat research / By

Artificial Intelligence (AI) has quickly become an integral part of modern workflows, with AI-powered applications like copilots, chatbots, and large-scale language models streamlining automation, decision-making, and data processing. However, these same tools introduce significant security risks—often in ways organizations fail to anticipate.

The Fast Flux DNS Threat: A Call to Action Against a Geopolitical and Hacktivist Nightmare Read More →

Threat Research Report: How AI Assistants, Co-Pilots, and Chatbots Create New Cyber Threats

Blog, Cyber Threats, Insider Threats, Nation-State Threat Actors, Real-Time Threat Detection, Threat Detection, Threat Intelligence Research, Threat Research, threat research / By

Artificial Intelligence (AI) has quickly become an integral part of modern workflows, with AI-powered applications like copilots, chatbots, and large-scale language models streamlining automation, decision-making, and data processing. However, these same tools introduce significant security risks—often in ways organizations fail to anticipate.

Threat Research Report: How AI Assistants, Co-Pilots, and Chatbots Create New Cyber Threats Read More →

Threat Research Report: Web Browsers as an Overlooked Risk in Cybersecurity

Blog, Cyber Threats, Threat Detection, Threat Intelligence Research, Threat Research, threat research / By

Web browsers have evolved from passive document viewers into complex platforms essential for cloud-based work. But this transformation has also made them a prime target for cyber threats, leaving enterprises and government networks vulnerable.

Threat Research Report: Web Browsers as an Overlooked Risk in Cybersecurity Read More →

Hiding in Plain Sight: The Hidden Dangers of Geolocation in Cloud Security

Blog, Cyber Threats, Nation-State Threat Actors, Threat Brief, Threat Briefing, Threat Detection, Threat Intelligence Research, Threat Research, threat research / By

One of the biggest challenges organizations face today is detecting malicious activity in cloud environments. As highlighted in MixMode’s latest Threat Research Report, cybercriminals are increasingly leveraging trusted cloud providers like AWS, Microsoft Azure, and Google Cloud to disguise their attacks, a strategy known as infrastructure laundering.

Hiding in Plain Sight: The Hidden Dangers of Geolocation in Cloud Security Read More →

Securing OAuth Authentication Risks with AI-Driven Monitoring

Blog, Cyber Threats, Real-Time Threat Detection, Threat Detection, Threat Intelligence Research, Threat Research, threat research, Uncategorized / By

As organizations continue to integrate cloud-based services and third-party applications, OAuth authentication has become a cornerstone of modern security frameworks. However, recent cybersecurity incidents highlight a growing concern: OAuth-based vulnerabilities remain an overlooked entry point for attackers, particularly in Zero Trust environments.

Securing OAuth Authentication Risks with AI-Driven Monitoring Read More →

Codefinger Ransomware: Detection and Mitigation Using MixMode

AWS, Blog, Cloud Security, Ransomware, Threat Intelligence Research, Threat Research, threat research / By

The Codefinger ransomware represents a new frontier in cyber threats, specifically targeting AWS S3 buckets. By exploiting Server-Side Encryption with Customer-Provided Keys (SSE-C), attackers gain control over the encryption process, rendering recovery impossible without their AES-256 keys.

Codefinger Ransomware: Detection and Mitigation Using MixMode Read More →