The purpose of SOS is to discuss state-sponsored operations and drive understanding of geopolitical risk and impact through study of the actors or systems that facilitate them.

Discover how the Russian state-sponsored threat group BlueDelta is using the HOOKEDGE backdoor to target defense and diplomatic organizations across Europe

Distinct Russian clusters have been conducting phishing activity focused on Application Specific Passwords (ASP), OAuth flows, and malware delivery. All of these operations seem focused on account com...

Threat Research would like to thank the Proofpoint Cloudmark Authority team for their collaboration. Key Findings On 22 July 2026, one day prior to Proofpoint’s recent joint release

China and India ran separate espionage operations against the same Pakistani police force, each drawn by different stakes in Pakistan's internal security.

Discover how Iranian-nexus threat cluster TAG-182 uses MarkiRAT malware and fake VPN/media apps to conduct cyber surveillance operations against domestic targets.

Add missing machine architecture types to pe module (#687). Add warning for single-byte patterns (71baa67). Add warning for duplicate patterns in a rule (9061803). Small optimization when generatin...

38th Annual FIRST Conference - Denver (US), June 14-19, 2026.

In September 2025, Volexity conducted an incident response engagement that began after suspicious network traffic was observed from a Linux-based virtual machine appliance on a customer’s network. The...

One of the things I value most about the open-source community is that the best improvements to a tool often don’t come from inside it — they come from outside conversations.  A short while back, the author of mlget, xorhex,  reached out and suggested I add more malware retrieval sources to FOSSOR, one of my earlier tools for pulling down samples from threat intel repositories.  

Contribute to xorhex/BinYars-SideWidget development by creating an account on GitHub.

Binary Ninja is a modern reverse engineering platform with a scriptable and extensible decompiler.

ALT: two men are standing next to each other and one of them is wearing a shirt that says nuts

We all take on different roles in relation to our friends, neighbors, family members, and colleagues. Keep those different roles clear in your many Signal group chats by using group member labels, now...

YouTube video by REverse Conference

A collection of malware families and malware samples which use the Rust programming language. - decoderloop/rust-malware-gallery

Transform your threat analysis workflow with intelligence you can understand and trust.

ALT: a man in a suit and tie stands in front of an amazon prime logo