Star Blizzard refines phishing and malware delivery with the RedFlick technique
Since January 2026, Microsoft has observed Russian state threat actor Star Blizzard evolve their detection evasion capabilities through large-scale phishing...
Threat Research
OperTraitors: How Kubernetes Operators Betray Your Security Posture
Executive Summary Kubernetes operators are coded to drastically reduce operational toil by acting as automated site reliability engineers. However, their...
Securing the keys to the kingdom: Announcing Executive Threat Detection
Attackers are using greater sophistication to gain access to high-yield targets like executives, and company-wide security measures can easily miss...
NeedyMantis: Unpacking a post-compromise malware family used in targeted operations
Microsoft Threat Intelligence has identified NeedyMantis, a modular post-compromise malware family observed in a limited number of targeted operations affecting...
Citrix NetScaler vulnerabilities (CVE-2026-88771, CVE-2026-88772) in active exploitation
On September 27, 2026, Citrix disclosed eight vulnerabilities affecting NetScaler Application Delivery Controller (ADC) and NetScaler Gateway. Two of these...
3 Consulting Myths Debunked by Unit 42 Experts
We interviewed three Unit 42 consultants to examine the most critical cybersecurity misconceptions observed in their casework across customer environments,...
Kiteworks recommends server shutdown pending possible attack
Threat ResearchadvisoryKiteworksOn September 25, 2026, reports emerged that Kiteworks (formerly Acellion) emailed customers that law enforcement alerted them about an...
Trust and the enticing consultancy offer
Welcome to this week’s edition of the Threat Source newsletter. In the cybersecurity industry, trust is the invisible currency. Every practitioner...
UN Reports Citing Citizen Lab Submissions Published
Two UN reports that the Citizen Lab submitted recommendations to have been published this month. One report, from the UN...
Submission to the Immigration and Refugee Board of Canada
Date Published September 22, 2026 Topics Digital Transnational Repression surveillance, transnational repression Mentions Emile Dirks <!-- Senior Research Associate -->...