EDR
How Attackers Use Legitimate Remote Support Tools for Silent Persistence
Modern cyber intrusions increasingly avoid custom malware and obvious exploit chains. Instead, attackers are abusing tools that organizations already trust, deploy, and…
Blog
Research & viewpoints
Research and viewpoints from the NetSecurity team. 209 articles, newest first.
EDR
How IT Breaches Cascade Into OT Disruption
For years, organizations treated information technology and operational technology as separate worlds. IT handled email, servers, identity, and business applications. OT…
ITDR
How Threat Actors Abuse Microsoft Teams for Social Engineering and Malware Delivery
Microsoft Teams has rapidly evolved from a collaboration tool into a core enterprise control plane. It is deeply integrated with identity, file storage, meeting…
CISOThreat Intel & Research
Anthropic Mythos Explained: A Paradigm Shift in Vulnerability Discovery and Critical Infrastructure Risk
Anthropic Mythos represents a turning point in cybersecurity that goes beyond incremental improvements in scanning or automation. It signals a change in who can discover…
CISO
Initial Access Entry Paths Most Commonly Abused in Recent Intrusions
Initial access is no longer a single technical event. It is a sequence of trust failures, exposed pathways, and human dependencies that attackers exploit to quietly…
CISO
What CISOs Get Wrong About OT Cyber Risk
Operational Technology cyber risk continues to be misunderstood, underestimated, or oversimplified at the CISO level. Many security leaders come from IT-first…
CISOThreat Intel & Research
Critical Infrastructure as a Messaging Target: What Disruption Campaigns Really Aim to Do
Critical infrastructure cybersecurity is no longer only about preventing financial loss. It is about protecting trust, continuity, and public confidence. In today’s…
CISOThreat Intel & Research
Iran’s Cyber Retaliation Doctrine: What CISOs Must Prepare for During Geopolitical Escalation
Iran’s approach to cyber operations is not random, purely criminal, or limited to espionage. It is a doctrine shaped by asymmetric power projection, plausible…
Threat Intel & Research
Misspelled Impersonating Domains, Real Breaches: Inside Typosquatting Campaigns
Typosquatting is one of the oldest techniques in the threat actor playbook, yet it remains one of the most effective. Attackers exploit minor spelling mistakes, visual…
ITDR
The Predictive Security Model Is Dead, Preemptive Security Is the Only Way Forward
The cybersecurity industry has reached a breaking point. For years, organizations invested heavily in predictive security models that promised early warning, risk…
CISO
The Cyber Threats That Will Define 2026
The cybersecurity landscape is entering a decisive phase. As organizations accelerate digital transformation, attackers are evolving their tactics at an equal or faster…
ITDR
Session Hijacking Is the New MFA Bypass: Why Authentication No Longer Equals Security
For years, security strategy revolved around one moment in time: authentication. If a user passed MFA, the assumption was that access was trustworthy. In 2026, that…