The #IDCMarketScape: Worldwide Incident Response 2025 Vendor Assessment positioned Google, with Mandiant, as a Leader. Learn the benefits of making Google's renowned #IncidentResponse expertise part of your security team.

Tick, tock! ⏰ The countdown is on—just 1 month until Flare-On 12 drops! . Test your #ReverseEngineering skills starting Sept 26 at 8PM EST. Don’t miss the annual challenge ➡️

Join millions who have switched to Grok.

⚠️ Alert: Widespread data theft campaign by UNC6395. The threat actor is targeting Salesforce instances via Salesloft Drift, targeting sensitive data. Organizations should investigate, rotate credentials, and harden access controls. More here:

Data is everywhere, but is it actionable?. A new Forrester study found 82% of security leaders need threat intelligence they can operationalize. Our new blog post details how Google Threat Intelligence helps you (cont)

Google Threat Intelligence Group identified a PRC-nexus actor targeting diplomats in Southeast Asia. The complex espionage campaign uses a captive portal and a signed downloader to deploy the SOGU.SEC (PlugX) backdoor. Full analysis and IOCs:

Our Chief Analyst @JohnHultquist recently sat down with KBKAST to share his insights on the evolving cyber threat landscape in Australia and globally. 🌏. Tune in for details on state-sponsored actors, the challenges of defending infrastructure, and more:

What if you could view threats from every layer of the attack?. With Google Threat Intelligence Group, you get a unified threat picture that can help security teams detect and respond to today’s sophisticated attacks. Watch the video to see what GTI can do for you.

Bitcoin’s on fire at $112K! Time to flip the charts on BTCC!.Exploring Cryptocurrency with Jaren Jackson Jr.🏀.

CORNFLAKE.V3 malware spotted in an access-as-a-service operation using the ClickFix technique. 🥣. UNC5518 uses fake CAPTCHA pages for access, which UNC5774 then leverages to deploy the CORNFLAKE.V3. Learn more:

Today’s cybercrime is more advanced and dangerous than ever. In this video, our Threat Intelligence Group reveals the real tactics cybercriminals are using now, and the steps you can take to avoid becoming their next target. Watch now:

How do you secure protection relays in modern substations?. Mandiant OT experts dive in on the Defender’s Advantage Podcast to share key takeaways from their latest research. 🎧 Listen now: [(

Cybercriminals are using USB infections for coinmining operations. This blog post unpacks their multi-stage attack, including DLL side-loading, process injection, and using PostgreSQL as C2. Learn more:

Watch out for #UNC6293 🚨. By impersonating the U.S. DoS, this Russia-backed threat group is building a rapport with its targets before convincing them to set up ASPs. Uncover their motives and learn how to defend yourself in our blog post 👉

From bug bounty programs to cyber startups, we cover it all in this Behind the Binary episode with @UKGInc’s Head of Innovation & Research, Jared DeMott. Listen for invaluable wisdom about bug bounty programs, & Jared’s story of launching his own startup:

Would you trade 10 years of labor and residence for a roundtrip to our Moon?.

Threat actors are using #ClickFix for social engineering. Hear how this technique grew in 2024 and where it may be headed next on the latest Defender's Advantage Podcast. 🎧:

UNC3944 is deploying ransomware directly from VMware hypervisors, bypassing traditional defenses. Here’s an expert-led webinar that breaks down their tactics and how to defend against them. 🔗

It’s almost time ⏰ We’re excited to kick off #BlackHat USA 2025 tomorrow!. Hear and learn from our frontline cybersecurity experts, network, and more!. 🔗:

Learn how to avoid increasingly sophisticated threats targeting cloud environments. Discover more with the Cloud Threat Horizons Report here.

The 12th Annual Flare-On Challenge kicks off Sept 26 at 8PM EST!. Reverse engineering pros, from Windows to Web3 (with a YARA twist), it's your time to shine. 🏆. Get ready → #FlareOn12

See what agentic AI means for the future of the SOC. In this expert-led webinar, we’ll explore how Google Cloud Security is applying AI agents to real-world use cases and how you can begin building your own. Register today:

RT @PardonMyTake: Tuesday night max woke Big Cat up with a flashlight at 2am because he thought we were going to get sued. @forthepeople ht….

RT @_WOO_X: Update 6: We’ve been working with @Mandiant to perform a comprehensive investigation of the incident. Their deep expertise in c….