The Red Canary Blog: Information Security Insights

AI agents, threat hunting 101, supply chain scaries, and more: Catch up on the last month's episodes of Red Canary Office Hours.

A spooky guide to supply chain vulnerabilities with advice on how to scare off adversaries from your system

Three criteria for assessing quality security data that enables faster responses and effective ROI storytelling

Tampered Chef serves up a smorgasbord of suspicious activity in this month’s edition of Intelligence Insights

Adversaries are taking to the command line, abusing AI tools like Claude Code to launch malicious prompts and steal credentials.

Set sail with us as we compare and contrast three of the biggest players in the macOS stealer ecosystem: Atomic, Poseidon, and Odyssey

Red Canary's monthly roundup of upcoming security conferences and calls for papers (CFP) submission deadlines

Phishing campaigns dropping RMM tools and WordPress sites delivering malware: Catch up on the last month of Red Canary Office Hours

Our updated Incident Response and Readiness guide provides a blueprint for responsibly incorporating AI into your IR program.

King KongTuke debuts at no. 1, and we offer detection opportunities for paste-and-run-lures in this month’s edition of Intelligence Insights

As AI assistants become capable of performing actions on behalf of a user, be on the lookout for “AI-in-the-middle (AIitM) attacks”

Recent npm supply chain attacks highlight why robust mitigation and response strategies are required for both developers and users.

Joint research from Red Canary Intelligence and Zscaler threat hunters spotlights phishing campaigns dropping RMM tools

Red Canary’s Threat Hunting team recently uncovered a malicious OAuth application attack, demonstrating the need for specific defenses.

Red Canary's monthly roundup of upcoming security conferences and calls for papers (CFP) submission deadlines

OAuth application abuse, emerging cloud tradecraft and the AI threat landscape: Catch up on last month's episodes of Red Canary Office Hours.

Precursors get preempted and NetSupport Manager gets promoted in this month’s edition of Intelligence Insights

Managed Phishing Response offers AI-powered triage, rapid expert analysis, and tailored feedback for every user-reported phishing email

DripDropper is a Red Canary-named Linux malware variant that uses an encrypted PyInstaller ELF file to communicate with a Dropbox account.

Essential questions you should ask managed detection and response (MDR) providers before you make your investment