Relying on the kindness of strangers is not an ideal st […]

The time to repurpose vulnerabilities into working expl […]

"Dr. Claw and M.A.D. Cat have started their cyber […]

McAfee Enterprise and FireEye recently teamed to releas […]

The holiday season is upon us, and many are preparing t […]

McAfee Enterprise and FireEye recently released its 202 […]

McAfee Enterprise and FireEye recently released its 202 […]

Though COVID-19 has had enormous effects on our society and economy, its effects on the cyber threat landscape remain limited. For the most part, the same [...]

With organizations struggling with alert fatigue and di […]

For most of us, 2020 was one of the most challenging ye […]

When planning Cyber Summit 2020, we thought it would be […]

As the U.S. elections near an end, the nature of succes […]

Security teams are doing their best to keep employees o […]

For the first time in its history, the European Union ( […]

What cyber security threats should enterprises look out […]

Today marks a significant and exciting step forward for […]

In June, Symphony Technology Group (STG) announced its […]

In the pilot episode of the Apple TV+ show Ted Lasso, a […]

Government security teams often do not know what type o […]

Since our initial public release of capa, incident responders and reverse engineers have used the tool to automatically identify capabilities in [...]

The constant threat of data breach has organizations sc […]

In June 2019, Mandiant Threat Intelligence first reported to customers a pro-People’s Republic of China (PRC) network of hundreds of inauthentic accounts [...]

In this episode of Eye on Security we dive into a secur […]

In August 2021, Mandiant Managed Defense identified and responded to the exploitation of a chain of vulnerabilities known as ProxyShell. The ProxyShell [...]

The Mandiant Advanced Practices team recently discovered a new malware family we have named PRIVATELOG and its installer, STASHLOG. In this post, we will [...]

Email remains the number one attack vector today and, a […]

Whether it is shipping disruptions caused by the COVID- […]

Every couple of years the security threat landscape is […]

On Advanced Practices, we are always looking for new ways to find malicious activity and track adversaries over time. Today we’re sharing a technique we [...]

Today, Mandiant disclosed a critical risk vulnerability in coordination with the Cybersecurity and Infrastructure Security Agency (“CISA”) that affects [...]

There is something inspiring about a large team coming […]

We are excited to share some great new time and sanity […]

The FLARE team is once again hosting its annual Flare-On challenge, now in its eighth year. Take this opportunity to enjoy some extreme social distancing [...]

Today Mandiant made a significant announcement in furth […]

This blog post details the post-compromise tradecraft and operational tactics, techniques, and procedures (TTPs) of a Chinese espionage group we track as [...]

The Biden Administration’s recent cyber security Execut […]

Every IT security professional knows what it’s like to […]

We are excited to announce version 2.0 of our open-source tool called capa. capa automatically identifies capabilities in programs using an extensible rule [...]

In this episode of Eye on Security, I am joined by Jeff […]

FireEye Helix is a SaaS security operations platform th […]

In this episode of Eye on Security, I had Daniel Kapell […]

The Host Management module for FireEye Endpoint Securit […]

Mandiant observed DARKSIDE affiliate UNC2465 accessing at least one victim through a Trojanized software installer downloaded from a legitimate website. [...]

Cyber threat activity affects governments, businesses, […]

Alert fatigue is real. Think about this: How much time […]

On April 20, 2021, Mandiant published detailed results of our investigations into compromised Pulse Secure devices by suspected Chinese espionage [...]

In the latest episode of Eye on Security, I had Jens Mo […]

A large majority (87%) of security leaders say their or […]

Attacks on control processes supported by operational technology (OT) are often perceived as necessarily complex. This is because disrupting or modifying a [...]

We are wrapping up our "Big Four" series with […]