Vulnerabilities
CVE-2026-20245, the 7th Cisco SD-WAN vulnerability exploited in 2026, was used for months prior to its disclosure and patching.
Hi, what are you looking for?
SecurityWeek
All posts tagged "Mandiant"
Cybercrime
The latest M-Trends report is based on insights from over 500,000 hours of Mandiant incident response investigations in 2025.
Artificial Intelligence
Armadin uses AI-powered red teaming to find and exploit weaknesses in the same way that attackers attack them.
Network Security
A threat actor that may be financially motivated is targeting SonicWall devices with a backdoor and user-mode rootkit.
Cybercrime
Google is warning insurance companies that Scattered Spider appears to have shifted its focus from the retail sector.
Cloud Security
According to reports, the US Department of Justice will assess whether the deal would harm competition in the cybersecurity market.
Artificial Intelligence
Mandiant warns that a Vietnamese hacking group tracked as UNC6032 is distributing malware via fake AI video generator websites.
Threat Intelligence
Mandiant’s latest threat report shows how attackers adapt faster than defenses, shifting strategies toward credential theft and insider threats.
Incident Response
The CVE-2025-22457 has already been exploited by a China-nexus hacking gang notorious for breaking into edge network devices.
Artificial Intelligence
Google plans to unleash automated AI agents into overtaxed SOCs to reduce the manual workload for cybersecurity investigators.
Artificial Intelligence
Experimental Sec-Gemini v1 touts a combination of Google’s Gemini LLM capabilities with real-time security data and tooling from Mandiant.
Malware & Threats
Ivanti misdiagnoses a remote code execution vulnerability and Mandiant reports that Chinese hackers are launching in-the-wild exploits.
Nation-State
China-nexus cyberespionage group caught planting custom backdoors on end-of-life Juniper Networks Junos OS routers.
Malware & Threats
Mandiant warns that multiple Russian APTs are abusing a nifty Signal Messenger feature to surreptitiously spy on encrypted conversations.
Nation-State
The targeting of Diehl Defence is significant because the company specializes in the production of missiles and ammunition.
Nation-State
Iranian state-sponsored threat actor UNC1860 is operating as an initial access provider to high-profile networks in the Middle East.
Fraud & Identity Theft
Mandiant shines the spotlight on the growing infiltration of US and Western companies by North Korean fake IT workers.
Malware & Threats
A fresh Mandiant report documents North Korea's APT45 as a distinct hacking team conducting cyberespionage and ransomware operations.
Cyberwarfare
Chinese government-backed hacking team caught breaking into organizations in shipping, logistics and automotive sectors in Europe and Asia.
Artificial Intelligence
Google rolls out new threat-intel and security operations products and looks to the magic of AI to tap into the booming cybersecurity market.
Cybercrime
The FBI has officially pinned the $6 billion Binance hack on North Korea’s TraderTraitor as the attackers launder the stolen crypto.
Malware & Threats
Vulnerabilities
Funding/M&A
Significant cybersecurity deals were announced by Absolute Security, Aikido, Anthropic, Cohere, Hex-Rays, and Proofpoint.
Data Breaches
Cloud Security
