Cyber Threat Intelligence

Cyber Threat Intelligence

Inside the Retail Fraud Underground: The Schemes Targeting Retailers Ahead of the Holiday Season

Flashpoint analysts examine the fraud schemes targeting retailers, from refund abuse and gift card fraud to compromised ecommerce sites, and the tactics circulating across illicit communities ahead of the holiday shopping season.

Public Sector and Government

The Flashpoint Threat Intelligence Brief: Middle East

Flashpoint’s weekly analysis tracks shifting kinetic and cyber threat radiuses, geopolitical disruptions, and provides critical operational forecasts for the ongoing Middle East conflict.

Cyber Threat Intelligence

DefenderKiller: How Vulnerable Drivers Are Being Abused to Disable Endpoint Security

Flashpoint analysts examine an open-source EDR killer that exploits a legacy Microsoft driver to terminate security processes, including modified variants of the original proof of concept.

Featured

Ransomware in the Age of AI: How Defenders Can Break the Attack Chain

Flashpoint's new guide examines how modern ransomware attacks unfold, from initial access to recovery, and the intelligence security teams need to disrupt attacks at every stage.

Cyber Threat Intelligence

AI Threat Report: How Artificial Intelligence Is Used Across Illicit Communities

A monthly analysis of how artificial intelligence is used in illicit communities, based on Flashpoint proprietary intelligence and direct visibility into real threat actor environments.

Cyber Threat Intelligence

Preparing for 2027: Five Trends Shaping Enterprise Threat Intelligence

As AI accelerates cybercrime and reshapes enterprise security priorities, Flashpoint experts examine what threat intelligence teams need to prepare for in 2027.

Featured

Inside Joint Disruption Week: 28 Arrests and 3.7 Million Scam Accounts Removed

Flashpoint joined international law enforcement and private-sector partners in a coordinated operation targeting West African scam networks, resulting in dozens of arrests, millions of fraudulent accounts removed, and over one hundred victims of human trafficking identified.

Insider Threats

Insider Threat Report: Dark Web Recruitment & Access Trends

Flashpoint’s monthly analysis of insider threat recruitment, illicit access advertising, and threat actor activity targeting enterprise environments.

Cyber Threat Intelligence

The Enterprise Threat Intelligence Report: 2026

New research examines the challenges shaping enterprise threat intelligence programs, what teams are prioritizing for the months ahead, and how they are approaching agentic AI plans and budgets.

Cyber Threat Intelligence

CastleStealer: An Emerging Infostealer Growing More Sophisticated

In this post, we analyze the evolution of CastleStealer, including the sensitive data it targets, new techniques for bypassing browser protections, remote command capabilities, and an approach to exfiltration designed to help stolen data blend into network traffic.

Featured

Process Parameter Poisoning: Inside a Novel EDR Evasion Technique

In this post, Flashpoint analysts examine Process Parameter Poisoning—a novel EDR evasion technique we validated in Rust—and detail how abusing undocumented process parameters allows attackers to inject code and bypass standard security products.

Corporate and Physical Security

How Natural Language Search Powers Rapid Physical Security Intelligence

A look at how natural language processing makes searching and refining results in Echosec simpler.