The Red Canary Blog: Information Security Insights

Red Canary's ecosystem of integrations and tech partnerships ensures you have the data, tools, and expertise to keep your organization safe.

Google Cloud Platform security: How our threat research team gets from “huh, that's weird” to robust detection coverage

Storm-1811's latest help desk scam begins with email bombing leading to IT impersonation and ends with Black Basta ransomware 

Stay ahead of modern adversaries with real-time identity monitoring, threat detection, and response from Red Canary and CrowdStrike Falcon

LummaC2 sets the table and gobbles up sensitive information in this month's edition of Intelligence Insights

Microsoft’s unified security workloads, combined with Red Canary’s detection and response expertise, can simplify your security posture.

In spite of Chrome’s new encryption feature, infostealers like Stealc, VIdar, and LummaC2 are still getting their hands in the cookie jar.

The redesigned Atomic Red Team website features a new browser interface, improved search capabilities, and easier test execution

Unboxing some of the year’s most prevalent threats with detection and prevention guidance from Barbie’s boyfriend

Adversaries can compromise key material in Azure OpenAI to host malicious models, poison trained models, and steal intellectual property.

LummaC2 lurks thanks to PowerShell pasting in this month's edition of Intelligence Insights

Your company’s Apple devices are ripe for attacks using macOS malware such as Atomic Stealer. Here’s what to look out for.

Zodiac-inspired predictions, advice, and resources for security operations center (SOC) teams and other infosec professionals

We share virtual private network hardening guidance to cut through FOG ransomware in this month's edition of Intelligence Insights

The SourceIdentity attribute in AWS’s Security Token Service (STS) can help defenders trace AWS role activity back to its source.

We’re revisiting our annual Threat Detection Report with a midyear update highlighting trends from detections in the first half of 2024.

By adopting defense in depth, security operations teams can avoid any single point of failure in the tangles of the global supply chain

Red Canary uses AWS API Gateway webhooks to process floods of security telemetry every day. Here's how we do it.

Red Canary Intel discovered overlaps in code between dllFake and previous campaigns leveraging Iranian user monitoring software SecondEye.