Lots of news last month related to individuals associated with The Com. Here's overview of who they are and how they operate. blog.pulsedive.com/inside-th…

In light of the recent ShinyHunters arrest, we analyzed the massive threat network they operate within: "The Com". We cover who they are, how groups like Scattered Spider and LAPSUS$ operate, and key mitigations for cybersecurity teams. Read now: blog.pulsedive.com/inside-th…

We recently wrote a guide for operationalizing ASN data for threat detection with @feedly TI Essentials. Check out how, when, and why to track ASNs alongside IOCs here: feedly.com/ti-essentials/pos… What's inside - How to score ASNs with free tools - Alerting vs. blocking - Clustering to connect infrastructure - Dive into Tycoon2FA

Our team recently did a deep-dive technical analysis of SolyxImmortal, a Python-based infostealer targeting Windows environments. Read the full post for a step-by-step breakdown of the full execution flow: blog.pulsedive.com/solyximmo…

We took a look at some malware samples that used Telegram as C2: blog.pulsedive.com/analyzing…

New and improved Pulsedive Docs now live! We just released a dedicated documentation site with a complete API reference, live playgrounds, and MCP server support for AI-assisted development. docs.pulsedive.com/

What to know about the Aisuru-Kimwolf botnet: pulsedive.com/threat/Aisuru-… - Massive botnet, 1M+ compromised devices - Kimwolf = specialized Android variant - Aisuru = parent botnet that has spawned other botnets - Used in DDoS and other attacks Expect more news and updates on this threat in the coming weeks.

VoidLink - a nascent threat developed using AI, according to @CheckPointSW's research team. What We Know: - Advanced Linux malware framework - 30+ modules for a plug-in based design - Cloud-native and cloud-aware - First observed late 2025, not seen in the wild yet More news at: pulsedive.com/threat/VoidLin…

Newly Added Threat Page: PeckBirdy -  JScript-based C2 framework - Used by threat actors aligned with China - Since 2023 - New primary research from @trendaisecurity: trendmicro.com/en_us/researc… Latest news, TTPs, IOCs available on Pulsedive's PeckBirdy Threat page: pulsedive.com/threat/PeckBir…

A lot happened in 2025 - some surprising, some expected. 2024: we predicted increased adoption Gen AI by threat actors for social engineering lures & malicious tooling. 2025: we saw that threat actors have integrated AI into malware and used prompt engineering to bypass AI safety controls. Notably, @Anthropic reported on the first AI-orchestrated cyber espionage campaign. See below for the breakdown by task & AI v. human activity. Read our full recap of the last 12 months in our Year in Review: blog.pulsedive.com/2025-in-r…

Exploitation attempts for #React2Shell (CVE-2025-55182) have been widespread over the last week. Three resources that outline exploitation are: greynoise.io/blog/cve-2025-5… esentire.com/security-adviso… huntress.com/blog/peerblight… Recommendation: Deploy patches as soon as possible

LAST CALL Get 30% off Pro with code BLACKFRIDAY25: pulsedive.com/purchase/pro Less than a day left for our biggest deal of the year for Pro. Pulsedive Pro comes with an upgraded API, Feed, and additional features. Monthly and annual plans both apply for first-time customers. More info available on our blog: blog.pulsedive.com/black-fri…

We analyzed the malicious code in the recent "second coming" of Shai-Hulud. blog.pulsedive.com/return-of…