Suspected Iran-nexus espionage activity targeting the aerospace, aviation and defense industries in Middle East countries.

Mandiant details how  a suspected Iranian threat actor is targeting Israeli shipping, government, energy, and healthcare organizations.

FireEye has discovered additional details about the SUNBURST backdoor used in a global intrusion campaign by a sophisticated actor we are tracking as UNC2452.

Threat actors with varying motivations are actively exploiting the current pandemic and public fear of the coronavirus and COVID-19.

Read our security predictions report to learn what Mandiant leaders and experts are thinking about in 2022.

Combined visibility into both IT and OT environments is critical for detecting malicious activity at any stage of an OT intrusion.

We reveal much in our latest M-Trends report, including how organizations around the globe are detecting attackers faster than ever before.

Details of an ongoing operation that we believe is being conducted in support of Iranian political interests.

E lection security is much deeper and more complex than protecting voting infrastructure.

In this post we look at Windows’ inbuilt image parsers—specifically for vulnerabilities involving the use of uninitialized memory.