Threat Intelligence

Research, analysis, and perspective on the evolving threat landscape, from phishing and brand impersonation to AI-generated fraud.

Vibescamming concept with cascading code and digital glitch text representing AI-driven scams and data manipulation

Threat Intelligence

April 10, 2026

VibeScamming: AI Coding Platforms as Phishing Infrastructure

The barrier to launching a phishing campaign used to be technical skill. That barrier…

Safe website connected to malicious servers showing hidden cyber threat behind trusted infrastructure

Threat Intelligence

March 25, 2026

The Trivy Supply Chain Attack and the Collapse of Infrastructure Trust

A criminal group weaponized the most popular open-source vulnerability scanner, and every trust signal…

AI-powered robotic hand clicking a Buy Now button on a fake e-commerce product listing

Threat Intelligence

February 19, 2026

Agentic Commerce Fraud: When AI Buyers Become Victims

Agentic commerce promises frictionless purchasing. It also creates a new class of fraud victim:…

PDF document hooked by a red phishing hook illustrating MatrixPDF credential theft hidden inside trusted files

Threat Intelligence

February 11, 2026

When PDFs Become Phishing Pages: The MatrixPDF Technique

A phishing-as-a-service toolkit is turning the most trusted document format into a credential harvesting…

Computer screen showing “Verify You Are Human” prompt illustrating ClickFix phishing that evades security scanners

Threat Intelligence

February 9, 2026

ClickFix: The Attack Scanners Can’t See

Security teams have grown accustomed to a particular workflow: a customer reports something suspicious,…

Fake “Verify you are human” prompt with warning icon in front of shadowy figure, illustrating phishing kit using CAPTCHA to evade scanners

Threat Intelligence

January 29, 2026

Tykit: Inside the Phishing Kit Turning Defenses Into Weapons

A sophisticated credential-theft operation is deploying Cloudflare’s anti-bot technology to shield its own attacks…

See the threats targeting your brand right now

Get a customized assessment showing active impersonation, phishing infrastructure, and exposed credentials specific to your organization. No commitment required.