The most recent updates to our reverse engineering tool FLARE VM make it more open and maintainable.

Defend against a Citrix NetScaler ADC and Gateway vulnerability (CVE-2023-4966) being exploited in the wild.

Despite Metasploit’s over 15 year existence, there are still core techniques that go undetected, allowing malicious actors to evade detection.

The ninth annual Flare-On Challenge has come to an end, now check out the solutions.

We help defenders understand Cobalt Strike and share new ways to hunt for, respond to, and attribute malicious actors using this tool.

We responded to a supply chain compromise by a likely DPRK-nexus threat actor, who we believe leveraged JumpCloud.

We have been seeing notable changes to TTPs used in GOOTLOADER operations since 2022.

See our full WannaCry (also known as WCry or WanaCryptor) malware profile, including in-depth file characteristics and MD5 hashes.

A new Windows Persistence Toolkit created by FireEye Mandiant’s Red Team called SharPersist.