ThreatLabz analyzes CVE-2026-88771 exploitation attempts targeting NetScaler, including log poisoning, web shell deployment, and payload delivery.
Artificial Intelligence technologies have made a huge impact on the security industry. But as with any public technology, adversaries have access to AI as well. They’re wasting no time incorporating ...
Introduction Zscaler ThreatLabz analyzed a recently active exploitation campaign in which a threat actor abused ARTEX to target South Korean financial institutions. ARTEX is an open source agentic ...
Introduction In August 2026, Zscaler ThreatLabz observed new activity by the Pakistan-nexus threat actor APT36 in a campaign we’re tracking as Operation RapidRust. Since our last publication about the ...
Key Takeaways In June 2026, ThreatLabz identified SloppyRAT, a new malware family likely used in ransomware attacks to establish a foothold for lateral movement. SloppyRAT uses several techniques to ...
Disclaimer: This blog post has been created by Zscaler for informational purposes only and is provided "as is" without any guarantees of accuracy, completeness or reliability. Zscaler assumes no ...
Threat Attribution Public reporting indicates that this campaign targets cryptocurrency and Web3 developers through trojanized developer tools that deliver cross-platform malware—tactics consistent ...
Technical Analysis The following sections offer a technical analysis of an attack chain used to deploy DarkVision RAT, as well as an in-depth examination of the RAT itself. The figure below ...
Fewer, sharper alerts and better sleep at night Since deploying Red Canary’s Microsoft Defender for Endpoint integration and managed detection and response solution, their security team has reduced ...
In 2020, following a significant cyber event, we conducted a comprehensive review of our tools and security posture. Initially, we partnered with an MDR provider, but found limited value in their ...
The mechanical contractor became a customer of Red Canary in 2023. The company’s security team had prior experience with Crowdstrike and FireEye. However, during the late winter of 2025, the company ...
Based on the similarity of the domains between two of our customers, we were able to quickly identify that Unitus’s third-party vendor was compromised via Kaseya. In time, as the news went public on ...
Results that may be inaccessible to you are currently showing.
Hide inaccessible results