The Red Canary Blog: Information Security Insights

Recent npm supply chain attacks highlight why robust mitigation and response strategies are required for both developers and users.

Joint research from Red Canary Intelligence and Zscaler threat hunters spotlights phishing campaigns dropping RMM tools

Red Canary’s Threat Hunting team recently uncovered a malicious OAuth application attack, demonstrating the need for specific defenses.

Red Canary's monthly roundup of upcoming security conferences and calls for papers (CFP) submission deadlines

OAuth application abuse, emerging cloud tradecraft and the AI threat landscape: Catch up on last month's episodes of Red Canary Office Hours.

Precursors get preempted and NetSupport Manager gets promoted in this month’s edition of Intelligence Insights

Managed Phishing Response offers AI-powered triage, rapid expert analysis, and tailored feedback for every user-reported phishing email

DripDropper is a Red Canary-named Linux malware variant that uses an encrypted PyInstaller ELF file to communicate with a Dropbox account.

Essential questions you should ask managed detection and response (MDR) providers before you make your investment

Identity detections climbed, color birds swooped in, and two new cloud techniques broke into our top 10 in the first half of 2025

Red Canary's monthly roundup of upcoming security conferences and calls for papers (CFP) submission deadlines

SIEMs, CleanUpLoader, FileFix, and npm packages: Catch up on the last month's episodes of Red Canary Office Hours.

Red Canary’s cloud security enthusiasts left fwd:cloudsec 2025 with some invaluable insights and community connections

CleanUpLoader compromises, Poseidon Stealer debuts, and LummaC2 lives again in this month’s edition of Intelligence Insights

Talks on bypassing SOCs and initial access—we scoured this year’s list of sessions at Black Hat to find 10 talks worth making time for.

Experts from Red Canary, MITRE ATT&CK® and Proofpoint explore the ways adversaries break in, including fake CAPTCHAs and social engineering.

We break down the cybersecurity landscape of Model Context Protocol (MCP) servers and agentic AI workflows, including monitoring advice

Pair Duo’s trusted access security with Red Canary’s 24/7 expert MDR to stop identity attacks before they disrupt your business.

A Leader in G2’s Summer 2025 Grid®, Enterprise Grid®, and Mid-Market Grid® Reports for MDR, Red Canary ranked #1 in enterprise customer satisfaction.

Red Canary's monthly roundup of upcoming security conferences and calls for papers (CFP) submission deadlines