Function

Cyber Threat Intelligence

Inside the Retail Fraud Underground: The Schemes Targeting Retailers Ahead of the Holiday Season

Flashpoint analysts examine the fraud schemes targeting retailers, from refund abuse and gift card fraud to compromised ecommerce sites, and the tactics circulating across illicit communities ahead of the holiday shopping season.

Public Sector and Government

The Flashpoint Threat Intelligence Brief: Middle East

Flashpoint’s weekly analysis tracks shifting kinetic and cyber threat radiuses, geopolitical disruptions, and provides critical operational forecasts for the ongoing Middle East conflict.

Cyber Threat Intelligence

DefenderKiller: How Vulnerable Drivers Are Being Abused to Disable Endpoint Security

Flashpoint analysts examine an open-source EDR killer that exploits a legacy Microsoft driver to terminate security processes, including modified variants of the original proof of concept.

Featured

Ransomware in the Age of AI: How Defenders Can Break the Attack Chain

Flashpoint's new guide examines how modern ransomware attacks unfold, from initial access to recovery, and the intelligence security teams need to disrupt attacks at every stage.

Cyber Threat Intelligence

AI Threat Report: How Artificial Intelligence Is Used Across Illicit Communities

A monthly analysis of how artificial intelligence is used in illicit communities, based on Flashpoint proprietary intelligence and direct visibility into real threat actor environments.

Cyber Threat Intelligence

Preparing for 2027: Five Trends Shaping Enterprise Threat Intelligence

As AI accelerates cybercrime and reshapes enterprise security priorities, Flashpoint experts examine what threat intelligence teams need to prepare for in 2027.

Vulnerability Management

The Missing Layer in Vulnerability Prioritization: Full Visibility Into Your Attack Surface

Discover how connecting external attack surface visibility with threat-informed vulnerability intelligence helps security teams identify exposures, assess risk, and prioritize remediation.

Featured

Inside Joint Disruption Week: 28 Arrests and 3.7 Million Scam Accounts Removed

Flashpoint joined international law enforcement and private-sector partners in a coordinated operation targeting West African scam networks, resulting in dozens of arrests, millions of fraudulent accounts removed, and over one hundred victims of human trafficking identified.

Insider Threats

Insider Threat Report: Dark Web Recruitment & Access Trends

Flashpoint’s monthly analysis of insider threat recruitment, illicit access advertising, and threat actor activity targeting enterprise environments.

Cyber Threat Intelligence

The Enterprise Threat Intelligence Report: 2026

New research examines the challenges shaping enterprise threat intelligence programs, what teams are prioritizing for the months ahead, and how they are approaching agentic AI plans and budgets.

Cyber Threat Intelligence

CastleStealer: An Emerging Infostealer Growing More Sophisticated

In this post, we analyze the evolution of CastleStealer, including the sensitive data it targets, new techniques for bypassing browser protections, remote command capabilities, and an approach to exfiltration designed to help stolen data blend into network traffic.

Vulnerability Management

Ransomware Risk Model: Flashpoint’s Patented Scoring Method to Inform Vulnerability Prioritization

Flashpoint was awarded U.S. Patent No. 12,705,360 for its Ransomware Risk model, which rates how closely new vulnerabilities match those used in ransomware attacks.