The Red Canary Blog: Information Security Insights

Amber Albatross abides and a new color bird threat, Mocha Manakin, manifests in this month's edition of Intelligence Insights

Named by Red Canary, Mocha Manakin uses paste and run with PowerShell to drop a custom NodeJS backdoor that could lead to ransomware

Red Canary was experimenting with generative AI B.C. (before ChatGPT). Our new next-gen AI agents are the capstone of a years-long journey.

The Surveyor open source tool can help organizations establish a baseline of their environment, verify activity, and investigate anomalies.

Red Canary's monthly roundup of upcoming security conferences and calls for papers (CFP) submission deadlines

Today we are announcing a major milestone in our journey – Zscaler has signed a definitive agreement to acquire Red Canary.

Amber Albatross continues its reign and Latrodectus crawls into the top 10 in this month's edition of Intelligence Insights

Everything you need to know about the differences between conditional access policies in Microsoft Entra ID and Cisco Duo.

Everything you need to know about the differences between conditional access policies in Microsoft Entra ID and Okta.

We walk through Conditional Access prerequisites and recommend the top five CA policies you should implement first.

Adversaries can exploit CVE-2025-31324 to upload web shells and other unauthorized files to execute on the SAP NetWeaver server

Amber Albatross looms large and Arechclient2 makes its debut in this month's edition of Intelligence Insights

Which cybersecurity metrics should SOC teams be tracking to measure their success in detecting and responding to threats?

From conversations on hacking to cybercrime capers, we look at 10 cybersecurity podcasts to learn more about the field.

Humans are creatures of habit and unusual logins are a great signal for detection, if you can gather and make sense of identity telemetry.

How AI agents can help purple teaming, inside the stolen credential ecosystem, and more: We read through the RSA agenda so you don't have to.

Inspired by our newly released Threat Detection Report, here are five things defenders can do right now to strengthen their security posture.

Worms break ground and fake browser updates march forward in this month's edition of Intelligence Insights

Cloud security is a rapidly accelerating challenge for security operations—a trend highlighted in our 2025 Threat Detection Report.