The Red Canary Blog: Information Security Insights

Mocha Manakin, malvertising, and social engineering trends: Catch up on the last month's episodes of Red Canary Office Hours.

Red Canary’s expanded integration with Microsoft Entra ID facilitates rapid response to identity threats with help from expert AI agents

Educate yourself and your organization's users about two increasingly popular social engineering schemes: email bombing and paste and run 

Red Canary’s engineering team transforms petabytes of data from third-party vendors into a consistent, readable format for threat detection

Amber Albatross abides and a new color bird threat, Mocha Manakin, manifests in this month's edition of Intelligence Insights

Named by Red Canary, Mocha Manakin uses paste and run with PowerShell to drop a custom NodeJS backdoor that could lead to ransomware

Red Canary was experimenting with generative AI B.C. (before ChatGPT). Our new next-gen AI agents are the capstone of a years-long journey.

The Surveyor open source tool can help organizations establish a baseline of their environment, verify activity, and investigate anomalies.

Red Canary's monthly roundup of upcoming security conferences and calls for papers (CFP) submission deadlines

Today we are announcing a major milestone in our journey – Zscaler has signed a definitive agreement to acquire Red Canary.

Amber Albatross continues its reign and Latrodectus crawls into the top 10 in this month's edition of Intelligence Insights

Everything you need to know about the differences between conditional access policies in Microsoft Entra ID and Cisco Duo.

Everything you need to know about the differences between conditional access policies in Microsoft Entra ID and Okta.

We walk through Conditional Access prerequisites and recommend the top five CA policies you should implement first.

Adversaries can exploit CVE-2025-31324 to upload web shells and other unauthorized files to execute on the SAP NetWeaver server

Amber Albatross looms large and Arechclient2 makes its debut in this month's edition of Intelligence Insights

Which cybersecurity metrics should SOC teams be tracking to measure their success in detecting and responding to threats?

From conversations on hacking to cybercrime capers, we look at 10 cybersecurity podcasts to learn more about the field.

Humans are creatures of habit and unusual logins are a great signal for detection, if you can gather and make sense of identity telemetry.