The Red Canary Blog: Information Security Insights

Adversaries can compromise key material in Azure OpenAI to host malicious models, poison trained models, and steal intellectual property.

LummaC2 lurks thanks to PowerShell pasting in this month's edition of Intelligence Insights

Your company’s Apple devices are ripe for attacks using macOS malware such as Atomic Stealer. Here’s what to look out for.

Zodiac-inspired predictions, advice, and resources for security operations center (SOC) teams and other infosec professionals

We share virtual private network hardening guidance to cut through FOG ransomware in this month's edition of Intelligence Insights

The SourceIdentity attribute in AWS’s Security Token Service (STS) can help defenders trace AWS role activity back to its source.

We’re revisiting our annual Threat Detection Report with a midyear update highlighting trends from detections in the first half of 2024.

By adopting defense in depth, security operations teams can avoid any single point of failure in the tangles of the global supply chain

Red Canary uses AWS API Gateway webhooks to process floods of security telemetry every day. Here's how we do it.

Red Canary Intel discovered overlaps in code between dllFake and previous campaigns leveraging Iranian user monitoring software SecondEye.

Keep tabs on ChromeLoader and other browser-related threats in this month's edition of Intelligence Insights

Experts from Red Canary and elsewhere break down how adversaries rely on crypters and loaders, including detection guidance

Adversaries often sign malicious binaries to create a facade of validity, but a signed binary isn’t necessarily a safe one

A Red Canary software engineer looks back on the first three years of her career and offers advice for those just getting started

Amber Albatross arrives via potentially unwanted programs (PUP) and dllFake debuts in this month's edition of Intelligence Insights

Explore how Red Canary fosters accessibility in its coding environment with intuitive interfaces, comprehensive documentation, community support, accessible features, and ongoing enhancements.

Red Canary prevented a hospital from being breached. See how we stopped ransomware from enabling a catastrophic event.

Discover the differences between Managed Security Providers (MSPs) and Managed Detection and Response (MDR) for cloud security.

Everything you need to know about Scarlet Goldfinch, which uses fake browser updates to trick users into downloading NetSupport Manager.