All posts
flare.io
flare.io
2026
How an Average of $6 Can Buy Personal Information: Inside Latin America’s “Identity-as-a-Service” MarketsRead at flare.io (opens in a new tab)
16 Oct 2026
16 Oct 2026
Analysis After the Refrigeration System Attack in France: Two Thirds of Exposed Refrigeration Controllers Share an Address with Cameras, Remote Desktop, and VPNsRead at flare.io (opens in a new tab)
15 Oct 2026
15 Oct 2026
Navigating the Waves of AI-Powered Identity Attacks: Lessons From One Year of Identity Exposure ManagementRead at flare.io (opens in a new tab)
13 Oct 2026
13 Oct 2026
Healthcare Is Cybercrime’s Highest-Value Target: Ransomware, Exposure, and the Expanding Attack SurfaceRead at flare.io (opens in a new tab)
8 Oct 2026
8 Oct 2026
Exposed Agent Keys Can Become a Route into Infrastructure: What Leaked AI and MCP Credentials Actually ExposeRead at flare.io (opens in a new tab)
7 Oct 2026
7 Oct 2026
CrocoRat Adds a New Twist to ClickFix with DNS Payload DeliveryRead at flare.io (opens in a new tab)
6 Oct 2026
6 Oct 2026
What a Spanish Carding Tutorial Reveals About How Fraudsters Actually ThinkRead at flare.io (opens in a new tab)
1 Oct 2026
1 Oct 2026
Hacker-for-Hire Economy: How Cyber Mercenaries Turned Digital Revenge Into a BusinessRead at flare.io (opens in a new tab)
29 Sept 2026
29 Sept 2026
The Airport isn’t Online but its Directory is: A Sector-Wide Look at What DNS Reveals About Aviation InfrastructureRead at flare.io (opens in a new tab)
28 Sept 2026
28 Sept 2026
The Overlooked Healthcare Attack Surface: 1,057 FHIR Endpoints and 656 HL7 Systems Found Without Sending a Single PacketRead at flare.io (opens in a new tab)
28 Sept 2026
28 Sept 2026
25 Sept 2026
25 Sept 2026
TWEAKOS Uncovered: A Telegram-Driven Stealer and C2 Ecosystem for Discord and Telegram TokensRead at flare.io (opens in a new tab)
24 Sept 2026
24 Sept 2026
40% of Exposed Medical Image Consoles Answer without a PasswordRead at flare.io (opens in a new tab)
23 Sept 2026
23 Sept 2026
77% of Flock Safety’s Public DNS Namespace is Development InfrastructureRead at flare.io (opens in a new tab)
18 Sept 2026
18 Sept 2026
Sisterhood of the Traveling Packets: How 1,300 Practitioners Hacked a Ransomware Gang’s Leak Site (Flare CTF Writeup)Read at flare.io (opens in a new tab)
15 Sept 2026
15 Sept 2026
Finding and Notifying a ShinyHunters Claims Impersonation Campaign Before It Activated: 61 Domains, 48 BrandsRead at flare.io (opens in a new tab)
10 Sept 2026
10 Sept 2026
427 or 4 Devices?: Measuring Internet-Exposed Industrial Infrastructure in the UKRead at flare.io (opens in a new tab)
2 Sept 2026
2 Sept 2026
Finding the Fleet: What SNMP Finds in the Satellite Ground Segment that HTTP MissesRead at flare.io (opens in a new tab)
31 Aug 2026
31 Aug 2026
45% of Top American Research Universities Expose Computing Infrastructure to the Open InternetRead at flare.io (opens in a new tab)
28 Aug 2026
28 Aug 2026
27 Aug 2026
27 Aug 2026
Lookalike Domains are an Identity Problem, Not Just a Domain ProblemRead at flare.io (opens in a new tab)
26 Aug 2026
26 Aug 2026
Is an Agent a Bot with Better PR?: 5 Questions to Ask About NHIRead at flare.io (opens in a new tab)
25 Aug 2026
25 Aug 2026
What is EvilTokens?: The PhaaS Platform That Tells Attackers What to Do After They Get InRead at flare.io (opens in a new tab)
24 Aug 2026
24 Aug 2026
19 Aug 2026
19 Aug 2026
Plugged In and Exposed: The Growing Cybersecurity Threat to EV Charging InfrastructureRead at flare.io (opens in a new tab)
12 Aug 2026
12 Aug 2026
FirewallFalcon Manager: Supply-Chain Backdoors in Underground VPN InfrastructureRead at flare.io (opens in a new tab)
7 Aug 2026
7 Aug 2026
Combined PII is Worth Thousands of Times More Than its Parts: Stolen Data MathRead at flare.io (opens in a new tab)
5 Aug 2026
5 Aug 2026
After the Minnesota Water System Cyberattacks: Why Every Count of Exposed Rockwell PLCs DiffersRead at flare.io (opens in a new tab)
4 Aug 2026
4 Aug 2026
Kali365: The Phishing-as-a-Service Operation Expanding Beyond Microsoft 365Read at flare.io (opens in a new tab)
27 Jul 2026
27 Jul 2026
Detection Without Automated Response Fails: Lessons for Identity-First CTIRead at flare.io (opens in a new tab)
24 Jul 2026
24 Jul 2026
23 Jul 2026
23 Jul 2026
NULLZEREPTOOL: Inside a Telegram-Controlled DDoS and Multi-Function Attack FrameworkRead at flare.io (opens in a new tab)
21 Jul 2026
21 Jul 2026
Strengthening Our Commitment to Responsible Threat IntelligenceRead at flare.io (opens in a new tab)
20 Jul 2026
20 Jul 2026
Stolen Healthcare Data Exists in the Gap of High-Value PII and Lower SentencesRead at flare.io (opens in a new tab)
20 Jul 2026
20 Jul 2026
Arrest and Sentencing Disparities Across Russian-Speaking Threat ActorsRead at flare.io (opens in a new tab)
13 Jul 2026
13 Jul 2026
The Tudou Succession: How Three Platforms Carved Up a $12 Billion Guarantee MarketplaceRead at flare.io (opens in a new tab)
9 Jul 2026
9 Jul 2026
Monitoring Cyberattacks Directly Linked to the US-Israel-Iran Military ConflictRead at flare.io (opens in a new tab)
8 Jul 2026
8 Jul 2026
Mycelium Framework: First Ever Witnessed AI-as-a-Service BotnetRead at flare.io (opens in a new tab)
7 Jul 2026
7 Jul 2026
15,000+ Leaked Healthcare Secrets Found: Code Blue in the Server RoomRead at flare.io (opens in a new tab)
6 Jul 2026
6 Jul 2026
$4 Social Security Numbers on the Dark Web Carry 30 Year Sentences: The Stolen Data Courts Punish the Most SeverelyRead at flare.io (opens in a new tab)
2 Jul 2026
2 Jul 2026
6 Key Findings from the SANS CTI Survey: How to Build Influence with CTIRead at flare.io (opens in a new tab)
23 Jun 2026
23 Jun 2026
Inside the FortiBleed Dataset: 46,799 Working Logins, and the Internal Addresses That Show Where They Came FromRead at flare.io (opens in a new tab)
19 Jun 2026
19 Jun 2026
136 Critical Vulnerabilities, 212 Organizations, Zero Exploits Required: What Attackers See in Canadian Healthcare Read at flare.io (opens in a new tab)
19 Jun 2026
19 Jun 2026
4 Categories of Breach Data, 4 Different Frameworks for ResponseRead at flare.io (opens in a new tab)
18 Jun 2026
18 Jun 2026
StealerLens: Turn Hours of Stealer Log Analysis Into a Coffee BreakRead at flare.io (opens in a new tab)
17 Jun 2026
17 Jun 2026
Prediction Markets Under Fire: Criminal Prosecutions, Moral Hazard, and the Exploitation of a $25-Billion SectorRead at flare.io (opens in a new tab)
16 Jun 2026
16 Jun 2026
Stolen Medical Records Fuel a Black Market of Fraud, Identity Theft, and Patient HarmRead at flare.io (opens in a new tab)
15 Jun 2026
15 Jun 2026
Supply Chain Ransomware: TeamPCP Weaponizes Worms to Fuel Partnerships and $95K Data SalesRead at flare.io (opens in a new tab)
14 Jun 2026
14 Jun 2026
Ransomware-as-a-Service: LockBit Alumni Launch Competing Programs as Ecosystem Consolidates in Q1 2026Read at flare.io (opens in a new tab)
12 Jun 2026
12 Jun 2026
5 Sessions to Catch at Identiverse 2026 (Plus 2 on the Future of AI Identity)Read at flare.io (opens in a new tab)
12 Jun 2026
12 Jun 2026
10 Jun 2026
10 Jun 2026
AI Enables Both Efficiency and a New Attack Surface in US HealthcareRead at flare.io (opens in a new tab)
9 Jun 2026
9 Jun 2026
Automated Telegram Bot Uses One Leak to Compile a Full Dossier: From Single Email Address to Complete Victim ProfileRead at flare.io (opens in a new tab)
5 Jun 2026
5 Jun 2026
The Underground Economy of Illegal 2026 FIFA World Cup StreamingRead at flare.io (opens in a new tab)
4 Jun 2026
4 Jun 2026
KeyCat Stealer Uncovered: Inside a $40 Multi-Platform Infostealer with Telegram C2 and Active Staging InfrastructureRead at flare.io (opens in a new tab)
3 Jun 2026
3 Jun 2026
2 Jun 2026
2 Jun 2026
What Security Leaders Need to Know About the 2026 DBIR: 50% of Ransomware Victims Had Credential Exposure Within 95 DaysRead at flare.io (opens in a new tab)
1 Jun 2026
1 Jun 2026
Inside the Chinese-Language Gambling Infrastructure Targeting the 2026 World CupRead at flare.io (opens in a new tab)
28 May 2026
28 May 2026
Account Takeover is a Churn Problem: Why 65% of Consumers Abandon Platforms After FraudRead at flare.io (opens in a new tab)
27 May 2026
27 May 2026
26 May 2026
26 May 2026
22 May 2026
22 May 2026
What Attackers See When They Look at US Healthcare: A Sector-Wide External Attack Surface AnalysisRead at flare.io (opens in a new tab)
21 May 2026
21 May 2026
The World Cup Fraud Infrastructure is Nearly Three Times Larger Than We First ReportedRead at flare.io (opens in a new tab)
20 May 2026
20 May 2026
Seven Red Flags to Watch Out for to Avoid a 2026 World Cup Ticket ScamRead at flare.io (opens in a new tab)
13 May 2026
13 May 2026
One Out of Four Infostealer Victims Have Corporate Infrastructure AccessRead at flare.io (opens in a new tab)
11 May 2026
11 May 2026
Flare Joins the Inaugural 2026 Gartner Magic Quadrant for Cyber Threat IntelligenceRead at flare.io (opens in a new tab)
8 May 2026
8 May 2026
PamDOORa: Analyzing a New Linux PAM-Based Backdoor for Sale on the Dark WebRead at flare.io (opens in a new tab)
7 May 2026
7 May 2026
Downloading Danger: How World Cup Hype Fuels a Global Mobile Malware EcosystemRead at flare.io (opens in a new tab)
6 May 2026
6 May 2026
Your AI Security Agents Are Only as Good as Your Cybercrime IntelligenceRead at flare.io (opens in a new tab)
30 Apr 2026
30 Apr 2026
From Pirated Software to Full Access to FIFA: Tracing the 2026 World Cup Infostealer PipelineRead at flare.io (opens in a new tab)
29 Apr 2026
29 Apr 2026
Inside the Floor: A Quantitative Analysis of One Year of Exploit Forum DataRead at flare.io (opens in a new tab)
26 Apr 2026
26 Apr 2026
Inside a Telegram Session Stealer: How a Pastebin-Hosted PowerShell Script Targets Desktop and Web SessionsRead at flare.io (opens in a new tab)
23 Apr 2026
23 Apr 2026
You Won’t Get the Ticket or Your Money Back: Inside the World Cup 2026 Ticket Fraud OperationRead at flare.io (opens in a new tab)
22 Apr 2026
22 Apr 2026
Massive World Cup Consumer Fraud Infrastructure Targets Fans Before KickoffRead at flare.io (opens in a new tab)
22 Apr 2026
22 Apr 2026
How Phantom Carbon Credits and Identity Wallet Exploitation are Reshaping Global FraudRead at flare.io (opens in a new tab)
22 Apr 2026
22 Apr 2026
Validating Thousands of Credentials at Scale: Lessons from Six Months of Identity Exposure ManagementRead at flare.io (opens in a new tab)
21 Apr 2026
21 Apr 2026
Threat Briefing for CISOs: Staying Ahead of the Industrialized Phishing EconomyRead at flare.io (opens in a new tab)
17 Apr 2026
17 Apr 2026
The Identity Kill Chain: A Complete History of Identity Security from Passwords to AI AgentsRead at flare.io (opens in a new tab)
14 Apr 2026
14 Apr 2026
State of the Dark Web in 2026: Russian-Speaking Cybercrime Ecosystem, Continued Threat of Infostealer Malware & TelegramRead at flare.io (opens in a new tab)
9 Apr 2026
9 Apr 2026
What Infostealer Victims Have in Common: 2 Behavioral Patterns That Should Reshape Cybersecurity TrainingRead at flare.io (opens in a new tab)
7 Apr 2026
7 Apr 2026
Code Names, Fake Personas, and Iranian Recruits: New Details from Inside the North Korean IT Worker OperationRead at flare.io (opens in a new tab)
2 Apr 2026
2 Apr 2026
1 Apr 2026
1 Apr 2026
Infostealers Doesn’t Discriminate: 10,000 Logs Show Who’s Getting HitRead at flare.io (opens in a new tab)
26 Mar 2026
26 Mar 2026
Leak Bazaar: Inside the New Criminal Platform Turning Stolen Data Into a Structured MarketplaceRead at flare.io (opens in a new tab)
25 Mar 2026
25 Mar 2026
North Korean IT Worker Employment Fraud: What Security Teams and HR Need to KnowRead at flare.io (opens in a new tab)
25 Mar 2026
25 Mar 2026
Top Five Considerations for Evaluating a Threat Exposure Management Integrated Product PartnerRead at flare.io (opens in a new tab)
16 Mar 2026
16 Mar 2026
Bench.sh: How Threat Actors Repurpose a Legitimate Benchmarking Tool for Post-Exploitation ReconRead at flare.io (opens in a new tab)
16 Mar 2026
16 Mar 2026
From Patch to Exploit: Flare’s Intelligence on Cybercrime After February 2026 Patch TuesdayRead at flare.io (opens in a new tab)
13 Mar 2026
13 Mar 2026
12 Mar 2026
12 Mar 2026
12 Mar 2026
12 Mar 2026
Active Phishing Campaign on Hosting Infrastructure with Alleged Links to Iranian State Aligned ActivityRead at flare.io (opens in a new tab)
10 Mar 2026
10 Mar 2026
471 posts from flare.io are held, newest first (corpus.blog, measured 17 October 2026).