corpus.blog
56,966 blogs · [ { "id": "01a07df4-d6a1-7160-beaa-6fbbfa6595c0", "title": "Intelligence Insights: August 2026", "url": "https://redcanary.com/blog/threat-intelligence/intelligence-insights-august-2026/", "published_at": "2026-08-20T20:09:55+00:00" }, { "id": "01a07df4-d6a1-7160-beaa-6fbbfb58c0d0", "title": "Intelligence Insights: July 2026", "url": "https://redcanary.com/blog/threat-intelligence/intelligence-insights-july-2026/", "published_at": "2026-07-23T17:12:43+00:00" }, { "id": "01a07df4-d6a1-7160-beaa-6fbbfb58ef1b", "title": "Train, triage, repeat: The AI agent changing how we fight phishing", "url": "https://redcanary.com/blog/threat-detection/phishing-ai-agent/", "published_at": "2026-06-30T12:33:22+00:00" }, { "id": "01a07df4-d6a1-7160-beaa-6fbbfc505b22", "title": "Intelligence Insights: June 2026", "url": "https://redcanary.com/blog/threat-intelligence/intelligence-insights-june-2026/", "published_at": "2026-06-18T17:49:20+00:00" }, { "id": "01a07df4-d6a1-7160-beaa-6fbbfd4250c3", "title": "The dual-use dilemma: Rethinking detection for remote access tool abuse", "url": "https://redcanary.com/blog/security-operations/rmm-detection/", "published_at": "2026-06-17T16:15:51+00:00" }, { "id": "01a07df4-d6a1-7160-beaa-6fbbfdc16bd3", "title": "How threat hunting evolves at scale", "url": "https://redcanary.com/blog/threat-detection/threat-hunting-scaled/", "published_at": "2026-06-11T13:09:00+00:00" }, { "id": "01a07df4-d6a1-7160-beaa-6fbbfe7b9ce0", "title": "Investigating suspicious AI workflows in Microsoft Entra Agent ID: Assistive agents", "url": "https://redcanary.com/blog/threat-detection/entra-id-ai-workflows-assistive-agents/", "published_at": "2026-06-08T15:37:01+00:00" }, { "id": "01a07df4-d6a1-7160-beaa-6fbbff333fef", "title": "Red Canary CFP tracker: June 2026", "url": "https://redcanary.com/blog/news-events/red-canary-cfp-tracker-june-2026/", "published_at": "2026-06-01T18:59:52+00:00" }, { "id": "01a07df4-d6a1-7160-beaa-6fbbff8d475c", "title": "Investigating suspicious AI workflows in Microsoft Entra Agent ID: Agent’s user account", "url": "https://redcanary.com/blog/threat-detection/entra-id-ai-workflows-teams/", "published_at": "2026-06-01T13:04:01+00:00" }, { "id": "01a07df4-d6a1-7160-beaa-6fbc005e46a8", "title": "Grading on a curve: How to assess a pentest", "url": "https://redcanary.com/blog/testing-and-validation/pentesting/", "published_at": "2026-05-28T13:13:04+00:00" }, { "id": "01a0bdf4-0aa7-71fe-bec8-ba42bfbf6e63", "title": "Investigating suspicious AI workflows in Microsoft Entra Agent ID: Autonomous agents", "url": "https://redcanary.com/blog/threat-detection/entra-id-ai-workflows/", "published_at": "2026-05-27T12:58:44+00:00" }, { "id": "01a0bdf4-0aa7-71fe-bec8-ba42c042fa65", "title": "Intelligence Insights: May 2026", "url": "https://redcanary.com/blog/threat-intelligence/intelligence-insights-may-2026/", "published_at": "2026-05-26T13:55:13+00:00" }, { "id": "01a0bdf4-0aa7-71fe-bec8-ba42c099ed0b", "title": "Investigating server compromises with cgroups: A Linux DFIR primer", "url": "https://redcanary.com/blog/threat-detection/linux-cgroups/", "published_at": "2026-05-13T13:01:43+00:00" }, { "id": "01a0bdf4-0aa7-71fe-bec8-ba42c117c68a", "title": "Spring cleaning your browser", "url": "https://redcanary.com/blog/security-operations/spring-cleaning-your-browser/", "published_at": "2026-05-07T14:13:27+00:00" }, { "id": "01a0bdf4-0aa7-71fe-bec8-ba42c1ee5f32", "title": "Red Canary CFP tracker: May 2026", "url": "https://redcanary.com/blog/news-events/red-canary-cfp-tracker-may-2026/", "published_at": "2026-05-04T15:44:20+00:00" }, { "id": "01a0bdf4-0aa7-71fe-bec8-ba42c2118d1a", "title": "How AI can streamline your security testing", "url": "https://redcanary.com/blog/testing-and-validation/ai-security-testing/", "published_at": "2026-04-29T13:33:45+00:00" }, { "id": "01a0bdf4-0aa7-71fe-bec8-ba42c30a0f27", "title": "Intelligence Insights: April 2026", "url": "https://redcanary.com/blog/threat-intelligence/intelligence-insights-april-2026/", "published_at": "2026-04-23T16:03:33+00:00" }, { "id": "01a0bdf4-0aa7-71fe-bec8-ba42c32e8a3a", "title": "Identity, browsers, and node.js: Everything you missed in the Threat Detection Report miniseries", "url": "https://redcanary.com/blog/security-operations/tdr-secops-recap/", "published_at": "2026-04-15T13:42:56+00:00" }, { "id": "01a0bdf4-0aa7-71fe-bec8-ba42c3c49c11", "title": "New: Use response actions to update Zscaler policies and block threats", "url": "https://redcanary.com/blog/product-updates/zia-response-actions/", "published_at": "2026-04-14T12:55:58+00:00" }, { "id": "01a0bdf4-0aa7-71fe-bec8-ba42c4a4cf1f", "title": "AI in cybersecurity: The good, the bad, and the FUD", "url": "https://redcanary.com/blog/security-operations/ai-in-cybersecurity/", "published_at": "2026-04-08T13:43:10+00:00" }, { "id": "01a0be03-a3d4-73f4-bf49-b921a3a93863", "title": "Red Canary CFP tracker: April 2026", "url": "https://redcanary.com/blog/news-events/red-canary-cfp-tracker-april-2026/", "published_at": "2026-04-01T15:36:46+00:00" }, { "id": "01a0be03-a3d4-73f4-bf49-b921a3cf03a6", "title": "Scarlet Goldfinch’s year in ClickFix", "url": "https://redcanary.com/blog/threat-intelligence/scarlet-goldfinch-clickfix/", "published_at": "2026-03-26T16:18:49+00:00" }, { "id": "01a0be03-a3d4-73f4-bf49-b921a424be4f", "title": "Intelligence Insights: March 2026", "url": "https://redcanary.com/blog/threat-intelligence/intelligence-insights-march-2026/", "published_at": "2026-03-19T18:34:19+00:00" }, { "id": "01a0be03-a3d4-73f4-bf49-b921a4c42804", "title": "AI and browser threats stand out in the 2026 Threat Detection Report", "url": "https://redcanary.com/blog/threat-detection/2026-threat-detection-report/", "published_at": "2026-03-18T15:05:27+00:00" }, { "id": "01a0be03-a3d4-73f4-bf49-b921a5853291", "title": "Moving up the Assemblyline: Exposing malicious code in browser extensions", "url": "https://redcanary.com/blog/threat-detection/assemblyline-browser-extensions/", "published_at": "2026-03-12T13:00:59+00:00" }, { "id": "01a0be03-a3d4-73f4-bf49-b921a6359892", "title": "The RSAC 2026 Conference talks worth catching", "url": "https://redcanary.com/blog/news-events/rsac-2026/", "published_at": "2026-03-10T13:00:32+00:00" }, { "id": "01a0be03-a3d4-73f4-bf49-b921a6e266f6", "title": "Hunting for malicious OpenClaw AI in the modern enterprise", "url": "https://redcanary.com/blog/threat-detection/openclaw-ai/", "published_at": "2026-03-05T14:42:22+00:00" }, { "id": "01a0be03-a3d4-73f4-bf49-b921a787642e", "title": "Breaking down a supply chain attack leveraging a malicious Google Workspace OAuth app", "url": "https://redcanary.com/blog/threat-detection/google-workspace-oauth-attack/", "published_at": "2026-03-04T14:30:54+00:00" }, { "id": "01a0be03-a3d4-73f4-bf49-b921a80e2b7b", "title": "Red Canary CFP tracker: March 2026", "url": "https://redcanary.com/blog/news-events/red-canary-cfp-tracker-march-2026/", "published_at": "2026-03-02T21:05:42+00:00" }, { "id": "01a0be03-a3d4-73f4-bf49-b921a89d085f", "title": "The million-dollar front door and the tailgater: Why strong auth could fail at SaaS session integrity", "url": "https://redcanary.com/blog/security-operations/saas-session-integrity/", "published_at": "2026-02-25T14:00:19+00:00" }, { "id": "01a0be0a-2ed4-7339-bb8d-c9723a590d52", "title": "ChatGPT in your inbox? Investigating Entra apps that request unexpected permissions", "url": "https://redcanary.com/blog/threat-detection/entra-id-oauth-attacks/", "published_at": "2026-02-24T14:05:58+00:00" }, { "id": "01a0be0a-2ed4-7339-bb8d-c9723b03959b", "title": "Intelligence Insights: February 2026", "url": "https://redcanary.com/blog/threat-intelligence/intelligence-insights-february-2026/", "published_at": "2026-02-19T21:22:14+00:00" }, { "id": "01a0be0a-2ed4-7339-bb8d-c9723bd8dbf4", "title": "A masterclass in agentic security operations", "url": "https://redcanary.com/blog/security-operations/ai-security-operations/", "published_at": "2026-02-12T13:51:24+00:00" }, { "id": "01a0be0a-2ed4-7339-bb8d-c9723cce1fcf", "title": "Take back control: A modern guide to mastering application control", "url": "https://redcanary.com/blog/security-operations/guide-to-mastering-app-control/", "published_at": "2026-02-10T16:45:24+00:00" }, { "id": "01a0be0a-2ed4-7339-bb8d-c9723d394c79", "title": "Red Canary CFP tracker: February 2026", "url": "https://redcanary.com/blog/news-events/cfp-tracker-february-2026/", "published_at": "2026-02-02T16:50:05+00:00" }, { "id": "01a0be0a-2ed4-7339-bb8d-c9723d72b3df", "title": "The key of AI: How Agentic Tuning can make your detection strategy sing", "url": "https://redcanary.com/blog/product-updates/ai-agentic-tuning/", "published_at": "2026-01-26T18:00:45+00:00" }, { "id": "01a0be0a-2ed4-7339-bb8d-c9723da983d9", "title": "Accelerate investigation and response with Red Canary and Zscaler Internet Access", "url": "https://redcanary.com/blog/product-updates/zscaler-internet-access/", "published_at": "2026-01-23T20:54:44+00:00" }, { "id": "01a0be0a-2ed4-7339-bb8d-c9723dbc57bc", "title": "Intelligence Insights: January 2026", "url": "https://redcanary.com/blog/threat-intelligence/intelligence-insights-january-2026/", "published_at": "2026-01-22T19:45:20+00:00" }, { "id": "01a0be0a-2ed4-7339-bb8d-c9723e980183", "title": "Clear skies ahead with Wiz visibility and Red Canary MDR", "url": "https://redcanary.com/blog/product-updates/wiz-integration/", "published_at": "2026-01-20T21:05:01+00:00" }, { "id": "01a0be0a-2ed4-7339-bb8d-c9723f83de07", "title": "Go jump in a lake: Data storage for the win", "url": "https://redcanary.com/blog/security-operations/security-data-lake-architecture/", "published_at": "2026-01-08T15:40:45+00:00" }, { "id": "01a0dcc8-212f-7226-972e-85df83ec5f9c", "title": "Go jump in a lake: Measuring the data lake effect on your SIEM", "url": "https://redcanary.com/blog/security-operations/data-lake-siem/", "published_at": "2026-01-07T16:11:29+00:00" }, { "id": "01a0dcc8-212f-7226-972e-85df842800a4", "title": "Red Canary CFP tracker: January 2026", "url": "https://redcanary.com/blog/news-events/cfp-tracker-january-2026/", "published_at": "2026-01-05T17:46:02+00:00" }, { "id": "01a0dcc8-212f-7226-972e-85df8525f92b", "title": "Here’s what you missed on Office Hours: December 2025", "url": "https://redcanary.com/blog/security-operations/office-hours-december-2025/", "published_at": "2025-12-22T14:32:43+00:00" }, { "id": "01a0dcc8-212f-7226-972e-85df857aa863", "title": "Intelligence Insights: December 2025", "url": "https://redcanary.com/blog/threat-intelligence/intelligence-insights-december-2025/", "published_at": "2025-12-18T18:42:53+00:00" }, { "id": "01a0dcc8-212f-7226-972e-85df8663ca51", "title": "Red Canary’s best of 2025", "url": "https://redcanary.com/blog/security-operations/best-of-2025/", "published_at": "2025-12-17T15:10:41+00:00" }, { "id": "01a0dcc8-212f-7226-972e-85df86b022ee", "title": "KPop Malware Hunters: 2025’s takedowns", "url": "https://redcanary.com/blog/security-operations/kpop-malware-hunters/", "published_at": "2025-12-16T14:47:35+00:00" }, { "id": "01a0dcc8-212f-7226-972e-85df86ef913f", "title": "Bun and done: The second coming of the Shai-Hulud worm", "url": "https://redcanary.com/blog/threat-detection/shai-hulud-worm/", "published_at": "2025-12-10T16:58:18+00:00" }, { "id": "01a0dcc8-212f-7226-972e-85df8778b31e", "title": "Beyond the bomb: When adversaries bring their own virtual machine for persistence", "url": "https://redcanary.com/blog/threat-intelligence/email-bombing-virtual-machine/", "published_at": "2025-12-09T18:02:31+00:00" }, { "id": "01a0dcc8-212f-7226-972e-85df882a7895", "title": "Lost in the cloud: What Home Alone 2 teaches us about cloud security", "url": "https://redcanary.com/blog/security-operations/home-alone-2-cloud-security/", "published_at": "2025-12-04T14:00:59+00:00" }, { "id": "01a0dcc8-212f-7226-972e-85df889053f6", "title": "Red Canary CFP tracker: December 2025", "url": "https://redcanary.com/blog/news-events/cfp-tracker-december-2025/", "published_at": "2025-12-01T14:00:00+00:00" }, { "id": "01a0dcd0-e898-72e2-b556-75eaff8c7563", "title": "Here’s what you missed on Office Hours: November 2025", "url": "https://redcanary.com/blog/security-operations/office-hours-november-2025/", "published_at": "2025-11-24T16:20:59+00:00" }, { "id": "01a0dcd0-e898-72e2-b556-75eb0045f3be", "title": "Intelligence Insights: November 2025", "url": "https://redcanary.com/blog/threat-intelligence/intelligence-insights-november-2025/", "published_at": "2025-11-20T14:29:31+00:00" }, { "id": "01a0dcd0-e898-72e2-b556-75eb00c50413", "title": "Empowering your SOC: The strategic imperative of building reliable AI agents", "url": "https://redcanary.com/blog/security-operations/ai-agents-guide/", "published_at": "2025-11-19T17:59:46+00:00" }, { "id": "01a0dcd0-e898-72e2-b556-75eb0131843e", "title": "Stay on top of GitHub vulnerabilities with Dependabot Configurator", "url": "https://redcanary.com/blog/threat-detection/dependabot-configurator/", "published_at": "2025-11-18T14:00:03+00:00" }, { "id": "01a0dcd0-e898-72e2-b556-75eb01735109", "title": "Sniffing out TruffleHog in AWS", "url": "https://redcanary.com/blog/threat-detection/trufflehog-aws/", "published_at": "2025-11-13T13:08:04+00:00" }, { "id": "01a0dcd0-e898-72e2-b556-75eb0209776c", "title": "A defender’s guide to phishing", "url": "https://redcanary.com/blog/threat-detection/phishing-detection/", "published_at": "2025-11-06T14:36:01+00:00" }, { "id": "01a0dcd0-e898-72e2-b556-75eb027476d9", "title": "Red Canary CFP tracker: November 2025", "url": "https://redcanary.com/blog/news-events/cfp-tracker-november-2025/", "published_at": "2025-11-03T16:38:41+00:00" }, { "id": "01a0dcd0-e898-72e2-b556-75eb034cc2ab", "title": "Here’s what you missed on Office Hours: October 2025", "url": "https://redcanary.com/blog/security-operations/office-hours-october-2025/", "published_at": "2025-10-30T17:52:08+00:00" }, { "id": "01a0dcd0-e898-72e2-b556-75eb03d437d8", "title": "Unmasking risks that haunt your supply chain", "url": "https://redcanary.com/blog/threat-detection/supply-chain-compromises/", "published_at": "2025-10-30T14:45:56+00:00" }, { "id": "01a0dcd0-e898-72e2-b556-75eb0441976a", "title": "The art and science of effective security storytelling", "url": "https://redcanary.com/blog/threat-detection/detection-engineering-storytelling/", "published_at": "2025-10-27T13:00:07+00:00" }, { "id": "01a0dcdb-136f-7062-8959-52e777e0f2f8", "title": "Intelligence Insights: October 2025", "url": "https://redcanary.com/blog/threat-intelligence/intelligence-insights-october-2025/", "published_at": "2025-10-23T16:53:52+00:00" }, { "id": "01a0dcdb-136f-7062-8959-52e77896484a", "title": "Commanding attention: How adversaries are abusing AI CLI tools", "url": "https://redcanary.com/blog/threat-detection/ai-cli-tools/", "published_at": "2025-10-15T12:53:01+00:00" }, { "id": "01a0dcdb-136f-7062-8959-52e7794ea768", "title": "A taxonomy of Mac stealers: Distinguishing Atomic, Odyssey, and Poseidon ", "url": "https://redcanary.com/blog/threat-intelligence/atomic-odyssey-poseidon-stealers/", "published_at": "2025-10-09T13:52:30+00:00" }, { "id": "01a0dcdb-136f-7062-8959-52e779fffe83", "title": "Red Canary CFP tracker: October 2025", "url": "https://redcanary.com/blog/news-events/cfp-tracker-october-2025/", "published_at": "2025-10-01T17:37:59+00:00" }, { "id": "01a0dcdb-136f-7062-8959-52e77a189f9c", "title": "Here’s what you missed on Office Hours: September 2025", "url": "https://redcanary.com/blog/security-operations/office-hours-september-2025/", "published_at": "2025-09-29T13:00:56+00:00" }, { "id": "01a0dcdb-136f-7062-8959-52e77ae9084d", "title": "Redefining incident response in the age of AI", "url": "https://redcanary.com/blog/incident-response/ai-incident-response/", "published_at": "2025-09-26T13:01:56+00:00" }, { "id": "01a0dcdb-136f-7062-8959-52e77b40b04c", "title": "Intelligence Insights: September 2025", "url": "https://redcanary.com/blog/threat-intelligence/intelligence-insights-september-2025/", "published_at": "2025-09-25T13:58:58+00:00" }, { "id": "01a0dcdb-136f-7062-8959-52e77b9eff71", "title": "Double agents: How adversaries can abuse “agent mode” in commercial AI products", "url": "https://redcanary.com/blog/threat-detection/ai-agent-mode/", "published_at": "2025-09-24T15:20:17+00:00" }, { "id": "01a0dcdb-136f-7062-8959-52e77c78c3ff", "title": "Node problem: Tracking recent npm package compromises", "url": "https://redcanary.com/blog/threat-detection/npm-package-compromises/", "published_at": "2025-09-23T16:45:04+00:00" }, { "id": "01a0dcdb-136f-7062-8959-52e77d0548a0", "title": "You’re invited: Four phishing lures in campaigns dropping RMM tools", "url": "https://redcanary.com/blog/threat-intelligence/phishing-rmm-tools/", "published_at": "2025-09-12T12:59:09+00:00" }, { "id": "01a0dce3-71b0-7106-b82f-cbc4aafbc479", "title": "Understanding OAuth application attacks and defenses", "url": "https://redcanary.com/blog/threat-detection/oauth-app-attacks/", "published_at": "2025-09-04T13:29:03+00:00" }, { "id": "01a0dce3-71b0-7106-b82f-cbc4abecc1ad", "title": "Red Canary CFP tracker: September 2025", "url": "https://redcanary.com/blog/news-events/cfp-tracker-september-2025/", "published_at": "2025-09-02T19:46:08+00:00" }, { "id": "01a0dce3-71b0-7106-b82f-cbc4ace8dee3", "title": "Here’s what you missed on Office Hours: August 2025", "url": "https://redcanary.com/blog/security-operations/office-hours-august-2025/", "published_at": "2025-08-28T17:07:08+00:00" }, { "id": "01a0dce3-71b0-7106-b82f-cbc4ad527d29", "title": "Intelligence Insights: August 2025", "url": "https://redcanary.com/blog/threat-intelligence/intelligence-insights-august-2025/", "published_at": "2025-08-21T16:55:52+00:00" }, { "id": "01a0dce3-71b0-7106-b82f-cbc4ae2c6d7a", "title": "Respond faster and empower users with Red Canary Managed Phishing Response", "url": "https://redcanary.com/blog/product-updates/managed-phishing-response/", "published_at": "2025-08-19T14:00:21+00:00" }, { "id": "01a0dce3-71b0-7106-b82f-cbc4ae7710da", "title": "Patching for persistence: How DripDropper Linux malware moves through the cloud", "url": "https://redcanary.com/blog/threat-intelligence/dripdropper-linux-malware/", "published_at": "2025-08-19T13:00:52+00:00" }, { "id": "01a0dce3-71b0-7106-b82f-cbc4aecdb2c6", "title": "12 questions to ask before you buy MDR", "url": "https://redcanary.com/blog/threat-detection/mdr-questions/", "published_at": "2025-08-14T14:39:59+00:00" }, { "id": "01a0dce3-71b0-7106-b82f-cbc4af77f08c", "title": "Ranking the top threats and techniques for the first half of 2025", "url": "https://redcanary.com/blog/threat-detection/2025-threat-detection-report-midyear/", "published_at": "2025-08-05T12:56:51+00:00" }, { "id": "01a0dce3-71b0-7106-b82f-cbc4afd32af2", "title": "Red Canary CFP tracker: August 2025", "url": "https://redcanary.com/blog/news-events/red-canary-cfp-tracker-august-2025/", "published_at": "2025-08-04T18:47:19+00:00" }, { "id": "01a0dce3-71b0-7106-b82f-cbc4b0bf6c02", "title": "Here’s what you missed on Office Hours: July 2025", "url": "https://redcanary.com/blog/security-operations/office-hours-july-2025/", "published_at": "2025-07-31T15:22:38+00:00" }, { "id": "01a0dceb-5cdf-735c-8b58-c5daaf798a7b", "title": "Our favorite talks from fwd:cloudsec 2025", "url": "https://redcanary.com/blog/news-events/fwdcloudsec-2025/", "published_at": "2025-07-30T13:42:41+00:00" }, { "id": "01a0dceb-5cdf-735c-8b58-c5daafa7a0a7", "title": "Intelligence Insights: July 2025", "url": "https://redcanary.com/blog/threat-intelligence/intelligence-insights-july-2025/", "published_at": "2025-07-24T17:38:26+00:00" }, { "id": "01a0dceb-5cdf-735c-8b58-c5daaff1b503", "title": "10 Black Hat talks we want to see in 2025", "url": "https://redcanary.com/blog/security-operations/black-hat-2025/", "published_at": "2025-07-23T13:45:43+00:00" }, { "id": "01a0dceb-5cdf-735c-8b58-c5dab0acc38d", "title": "A defender’s guide to initial access techniques", "url": "https://redcanary.com/blog/threat-detection/initial-access-techniques/", "published_at": "2025-07-14T13:51:58+00:00" }, { "id": "01a0dceb-5cdf-735c-8b58-c5dab0bddcb8", "title": "The double-edged sword of MCP: Understanding the threat landscape for AI workflows", "url": "https://redcanary.com/blog/threat-detection/mcp-ai-workflows/", "published_at": "2025-07-10T15:06:53+00:00" }, { "id": "01a0dceb-5cdf-735c-8b58-c5dab0ea2549", "title": "Announcing Red Canary MDR for Cisco Duo", "url": "https://redcanary.com/blog/product-updates/cisco-duo-integration/", "published_at": "2025-07-07T16:03:45+00:00" }, { "id": "01a0dceb-5cdf-735c-8b58-c5dab100d02e", "title": "Red Canary named a Leader in G2’s Summer 2025 MDR Reports — #1 in enterprise customer satisfaction", "url": "https://redcanary.com/blog/news-events/g2-summer-2025-mdr-reports/", "published_at": "2025-07-02T15:07:35+00:00" }, { "id": "01a0dceb-5cdf-735c-8b58-c5dab1cafacb", "title": "Red Canary CFP tracker: July 2025", "url": "https://redcanary.com/blog/news-events/cfp-tracker-july-2025/", "published_at": "2025-07-01T15:39:27+00:00" }, { "id": "01a0dceb-5cdf-735c-8b58-c5dab29fe814", "title": "Here’s what you missed on Office Hours: June 2025", "url": "https://redcanary.com/blog/security-operations/office-hours-june-2025/", "published_at": "2025-06-27T14:31:45+00:00" }, { "id": "01a0dceb-5cdf-735c-8b58-c5dab333126d", "title": "Contain identity threats automatically with Red Canary and Microsoft Entra ID", "url": "https://redcanary.com/blog/product-updates/microsoft-entra-id/", "published_at": "2025-06-26T16:00:01+00:00" }, { "id": "01a0dcfa-3099-714c-a636-34acb923fcf8", "title": "Email bombs and fake CAPTCHAs: A social engineering survival guide", "url": "https://redcanary.com/blog/threat-intelligence/social-engineering/", "published_at": "2025-06-24T15:30:05+00:00" }, { "id": "01a0dcfa-3099-714c-a636-34acb9a79ba3", "title": "Shape shifting: How to wrangle unpredictable data at scale", "url": "https://redcanary.com/blog/security-operations/data-shaping/", "published_at": "2025-06-23T17:58:28+00:00" }, { "id": "01a0dcfa-3099-714c-a636-34acba3107c3", "title": "Intelligence Insights: June 2025", "url": "https://redcanary.com/blog/threat-intelligence/intelligence-insights-june-2025/", "published_at": "2025-06-18T19:51:53+00:00" }, { "id": "01a0dcfa-3099-714c-a636-34acba592daf", "title": "Mocha Manakin delivers custom NodeJS backdoor via paste and run", "url": "https://redcanary.com/blog/threat-intelligence/mocha-manakin-nodejs-backdoor/", "published_at": "2025-06-18T19:51:32+00:00" }, { "id": "01a0dcfa-3099-714c-a636-34acba8bf80f", "title": "A large learning model: Red Canary’s AI journey", "url": "https://redcanary.com/blog/security-operations/ai-journey/", "published_at": "2025-06-10T13:24:18+00:00" }, { "id": "01a0dcfa-3099-714c-a636-34acbadd5c4d", "title": "All about that baseline: Detecting anomalies with Surveyor", "url": "https://redcanary.com/blog/threat-detection/detecting-anomalies-with-surveyor/", "published_at": "2025-06-05T14:13:33+00:00" }, { "id": "01a0dcfa-3099-714c-a636-34acbbc90766", "title": "Red Canary CFP tracker: June 2025", "url": "https://redcanary.com/blog/news-events/cfp-tracker-june-2025/", "published_at": "2025-06-04T17:12:37+00:00" }, { "id": "01a0dcfa-3099-714c-a636-34acbc399d41", "title": "Here’s what you missed on Office Hours: May 2025", "url": "https://redcanary.com/blog/security-operations/office-hours-may-2025/", "published_at": "2025-05-29T21:59:17+00:00" }, { "id": "01a0dcfa-3099-714c-a636-34acbc63f3b1", "title": "Red Canary joins Zscaler", "url": "https://redcanary.com/blog/news-events/redcanary-joining-zscaler/", "published_at": "2025-05-27T20:25:42+00:00" }, { "id": "01a0dcfa-3099-714c-a636-34acbccfbbc9", "title": "Intelligence Insights: May 2025", "url": "https://redcanary.com/blog/threat-intelligence/intelligence-insights-may-2025/", "published_at": "2025-05-22T20:16:11+00:00" } ] posts Claim your blog
Back to Red Canary
Blog · corpus.blog/blogs/redcanary.com/posts

Red Canary

redcanary.com

2026

Intelligence Insights: August 2026original ↗
20 Aug 2026
Intelligence Insights: July 2026original ↗
23 Jul 2026
Train, triage, repeat: The AI agent changing how we fight phishingoriginal ↗
30 Jun 2026
Intelligence Insights: June 2026original ↗
18 Jun 2026
The dual-use dilemma: Rethinking detection for remote access tool abuseoriginal ↗
17 Jun 2026
How threat hunting evolves at scaleoriginal ↗
11 Jun 2026
Investigating suspicious AI workflows in Microsoft Entra Agent ID: Assistive agentsoriginal ↗
8 Jun 2026
Red Canary CFP tracker: June 2026original ↗
1 Jun 2026
Investigating suspicious AI workflows in Microsoft Entra Agent ID: Agent’s user accountoriginal ↗
1 Jun 2026
Grading on a curve: How to assess a pentestoriginal ↗
28 May 2026
Investigating suspicious AI workflows in Microsoft Entra Agent ID: Autonomous agentsoriginal ↗
27 May 2026
Intelligence Insights: May 2026original ↗
26 May 2026
Investigating server compromises with cgroups: A Linux DFIR primeroriginal ↗
13 May 2026
Spring cleaning your browseroriginal ↗
7 May 2026
Red Canary CFP tracker: May 2026original ↗
4 May 2026
How AI can streamline your security testingoriginal ↗
29 Apr 2026
Intelligence Insights: April 2026original ↗
23 Apr 2026
Identity, browsers, and node.js: Everything you missed in the Threat Detection Report miniseriesoriginal ↗
15 Apr 2026
New: Use response actions to update Zscaler policies and block threatsoriginal ↗
14 Apr 2026
AI in cybersecurity: The good, the bad, and the FUDoriginal ↗
8 Apr 2026
Red Canary CFP tracker: April 2026original ↗
1 Apr 2026
Scarlet Goldfinch’s year in ClickFixoriginal ↗
26 Mar 2026
Intelligence Insights: March 2026original ↗
19 Mar 2026
AI and browser threats stand out in the 2026 Threat Detection Reportoriginal ↗
18 Mar 2026
Moving up the Assemblyline: Exposing malicious code in browser extensionsoriginal ↗
12 Mar 2026
The RSAC 2026 Conference talks worth catchingoriginal ↗
10 Mar 2026
Hunting for malicious OpenClaw AI in the modern enterpriseoriginal ↗
5 Mar 2026
Breaking down a supply chain attack leveraging a malicious Google Workspace OAuth apporiginal ↗
4 Mar 2026
Red Canary CFP tracker: March 2026original ↗
2 Mar 2026
The million-dollar front door and the tailgater: Why strong auth could fail at SaaS session integrityoriginal ↗
25 Feb 2026
ChatGPT in your inbox? Investigating Entra apps that request unexpected permissionsoriginal ↗
24 Feb 2026
Intelligence Insights: February 2026original ↗
19 Feb 2026
A masterclass in agentic security operationsoriginal ↗
12 Feb 2026
Take back control: A modern guide to mastering application controloriginal ↗
10 Feb 2026
Red Canary CFP tracker: February 2026original ↗
2 Feb 2026
The key of AI: How Agentic Tuning can make your detection strategy singoriginal ↗
26 Jan 2026
Accelerate investigation and response with Red Canary and Zscaler Internet Accessoriginal ↗
23 Jan 2026
Intelligence Insights: January 2026original ↗
22 Jan 2026
Clear skies ahead with Wiz visibility and Red Canary MDRoriginal ↗
20 Jan 2026
Go jump in a lake: Data storage for the winoriginal ↗
8 Jan 2026
Go jump in a lake: Measuring the data lake effect on your SIEMoriginal ↗
7 Jan 2026
Red Canary CFP tracker: January 2026original ↗
5 Jan 2026

2025

Here’s what you missed on Office Hours: December 2025original ↗
22 Dec 2025
Intelligence Insights: December 2025original ↗
18 Dec 2025
Red Canary’s best of 2025original ↗
17 Dec 2025
KPop Malware Hunters: 2025’s takedownsoriginal ↗
16 Dec 2025
Bun and done: The second coming of the Shai-Hulud wormoriginal ↗
10 Dec 2025
Beyond the bomb: When adversaries bring their own virtual machine for persistenceoriginal ↗
9 Dec 2025
Lost in the cloud: What Home Alone 2 teaches us about cloud securityoriginal ↗
4 Dec 2025
Red Canary CFP tracker: December 2025original ↗
1 Dec 2025
Here’s what you missed on Office Hours: November 2025original ↗
24 Nov 2025
Intelligence Insights: November 2025original ↗
20 Nov 2025
Empowering your SOC: The strategic imperative of building reliable AI agentsoriginal ↗
19 Nov 2025
Stay on top of GitHub vulnerabilities with Dependabot Configuratororiginal ↗
18 Nov 2025
Sniffing out TruffleHog in AWSoriginal ↗
13 Nov 2025
A defender’s guide to phishingoriginal ↗
6 Nov 2025
Red Canary CFP tracker: November 2025original ↗
3 Nov 2025
Here’s what you missed on Office Hours: October 2025original ↗
30 Oct 2025
Unmasking risks that haunt your supply chainoriginal ↗
30 Oct 2025
The art and science of effective security storytellingoriginal ↗
27 Oct 2025
Intelligence Insights: October 2025original ↗
23 Oct 2025
Commanding attention: How adversaries are abusing AI CLI toolsoriginal ↗
15 Oct 2025
A taxonomy of Mac stealers: Distinguishing Atomic, Odyssey, and Poseidon original ↗
9 Oct 2025
Red Canary CFP tracker: October 2025original ↗
1 Oct 2025
Here’s what you missed on Office Hours: September 2025original ↗
29 Sept 2025
Redefining incident response in the age of AIoriginal ↗
26 Sept 2025
Intelligence Insights: September 2025original ↗
25 Sept 2025
Double agents: How adversaries can abuse “agent mode” in commercial AI productsoriginal ↗
24 Sept 2025
Node problem: Tracking recent npm package compromisesoriginal ↗
23 Sept 2025
You’re invited: Four phishing lures in campaigns dropping RMM toolsoriginal ↗
12 Sept 2025
Understanding OAuth application attacks and defensesoriginal ↗
4 Sept 2025
Red Canary CFP tracker: September 2025original ↗
2 Sept 2025
Here’s what you missed on Office Hours: August 2025original ↗
28 Aug 2025
Intelligence Insights: August 2025original ↗
21 Aug 2025
Respond faster and empower users with Red Canary Managed Phishing Responseoriginal ↗
19 Aug 2025
Patching for persistence: How DripDropper Linux malware moves through the cloudoriginal ↗
19 Aug 2025
12 questions to ask before you buy MDRoriginal ↗
14 Aug 2025
Ranking the top threats and techniques for the first half of 2025original ↗
5 Aug 2025
Red Canary CFP tracker: August 2025original ↗
4 Aug 2025
Here’s what you missed on Office Hours: July 2025original ↗
31 Jul 2025
Our favorite talks from fwd:cloudsec 2025original ↗
30 Jul 2025
Intelligence Insights: July 2025original ↗
24 Jul 2025
10 Black Hat talks we want to see in 2025original ↗
23 Jul 2025
A defender’s guide to initial access techniquesoriginal ↗
14 Jul 2025
The double-edged sword of MCP: Understanding the threat landscape for AI workflowsoriginal ↗
10 Jul 2025
Announcing Red Canary MDR for Cisco Duooriginal ↗
7 Jul 2025
Red Canary named a Leader in G2’s Summer 2025 MDR Reports — #1 in enterprise customer satisfactionoriginal ↗
2 Jul 2025
Red Canary CFP tracker: July 2025original ↗
1 Jul 2025
Here’s what you missed on Office Hours: June 2025original ↗
27 Jun 2025
Contain identity threats automatically with Red Canary and Microsoft Entra IDoriginal ↗
26 Jun 2025
Email bombs and fake CAPTCHAs: A social engineering survival guideoriginal ↗
24 Jun 2025
Shape shifting: How to wrangle unpredictable data at scaleoriginal ↗
23 Jun 2025
Intelligence Insights: June 2025original ↗
18 Jun 2025
Mocha Manakin delivers custom NodeJS backdoor via paste and runoriginal ↗
18 Jun 2025
A large learning model: Red Canary’s AI journeyoriginal ↗
10 Jun 2025
All about that baseline: Detecting anomalies with Surveyororiginal ↗
5 Jun 2025
Red Canary CFP tracker: June 2025original ↗
4 Jun 2025
Here’s what you missed on Office Hours: May 2025original ↗
29 May 2025
Red Canary joins Zscaleroriginal ↗
27 May 2025
Intelligence Insights: May 2025original ↗
22 May 2025
Next