The Red Canary Blog: Information Security Insights

JustAskJacky jeopardizes users and Rhadamanthys rises in this month's edition of Intelligence Insights

Read our practical guide on how to build reliable AI agents for security operations—along with open source code and a workflow graph

Red Canary's newest open source tool helps automate dependency management throughout your GitHub repositories

How Red Canary detected cloud activity tied to the Salesloft Drift supply chain attack before it was made public.

Experts from Red Canary, MITRE ATT&CK®, and CrowdStrike walk through how to detect and prevent the many varieties of phishing.

Red Canary's monthly roundup of upcoming security conferences and calls for papers (CFP) submission deadlines

AI agents, threat hunting 101, supply chain scaries, and more: Catch up on the last month's episodes of Red Canary Office Hours.

A spooky guide to supply chain vulnerabilities with advice on how to scare off adversaries from your system

Three criteria for assessing quality security data that enables faster responses and effective ROI storytelling

Tampered Chef serves up a smorgasbord of suspicious activity in this month’s edition of Intelligence Insights

Adversaries are taking to the command line, abusing AI tools like Claude Code to launch malicious prompts and steal credentials.

Set sail with us as we compare and contrast three of the biggest players in the macOS stealer ecosystem: Atomic, Poseidon, and Odyssey

Red Canary's monthly roundup of upcoming security conferences and calls for papers (CFP) submission deadlines

Phishing campaigns dropping RMM tools and WordPress sites delivering malware: Catch up on the last month of Red Canary Office Hours

Our updated Incident Response and Readiness guide provides a blueprint for responsibly incorporating AI into your IR program.

King KongTuke debuts at no. 1, and we offer detection opportunities for paste-and-run-lures in this month’s edition of Intelligence Insights

As AI assistants become capable of performing actions on behalf of a user, be on the lookout for “AI-in-the-middle (AIitM) attacks”

Recent npm supply chain attacks highlight why robust mitigation and response strategies are required for both developers and users.

Joint research from Red Canary Intelligence and Zscaler threat hunters spotlights phishing campaigns dropping RMM tools

Red Canary’s Threat Hunting team recently uncovered a malicious OAuth application attack, demonstrating the need for specific defenses.