Threat Intelligence

Frontline Mandiant investigations, expert analysis, tools and guidance, and in-depth security research.

Threat Intelligence

Investigating FortiManager Zero-Day Exploitation (CVE-2024-47575)

Mandiant collaborated with Fortinet to investigate mass zero-day exploitation of FortiManager appliances.

By Mandiant • 19-minute read

https://storage.googleapis.com/gweb-cloudblog-publish/images/threat-intelligence-default-banner-simplif.max-1800x1800.png

Google Threat Intelligence News and Alerts

Subscribe now to receive timely news and alerts from Google Threat Intelligence, including the latest threat-focused blog posts, reports, webinars, podcasts and more.

Subscribe now

Threat Intelligence

Staying a Step Ahead: Mitigating the DPRK IT Worker Threat

By Mandiant • 25-minute read

Threat Intelligence

How Low Can You Go? An Analysis of 2023 Time-to-Exploit Trends

By Mandiant • 10-minute read

Threat Intelligence

UNC5537 Targets Snowflake Customer Instances for Data Theft and Extortion

By Mandiant • 9-minute read

Threat Intelligence RSS Feed

Want to keep up-to-date on the latest Threat Intelligence posts? Add the Threat Intelligence RSS feed URL to your RSS reader today.

Threat Intelligence RSS feed URL

Threat Intelligence

Empowering Gemini for Malware Analysis with Code Interpreter and Google Threat Intelligence

By Bernardo Quintero • 6-minute read

Threat Intelligence

Pirates in the Data Sea: AI Enhancing Your Adversarial Emulation

By Mandiant • 25-minute read

Threat Intelligence

Emerging Threats: Cybersecurity Forecast 2025

By Adam Greenberg • 3-minute read

Threat Intelligence

Flare-On 11 Challenge Solutions

By Mandiant • 2-minute read

Threat Intelligence

(In)tuned to Takeovers: Abusing Intune Permissions for Lateral Movement and Privilege Escalation in Entra ID Native Environments

By Mandiant • 7-minute read

Threat Intelligence

Hybrid Russian Espionage and Influence Campaign Aims to Compromise Ukrainian Military Recruits and Deliver Anti-Mobilization Narratives

By Google Threat Intelligence Group • 10-minute read

Threat Intelligence

capa Explorer Web: A Web-Based Tool for Program Capability Analysis

By Mandiant • 6-minute read

Threat Intelligence

LummaC2: Obfuscation Through Indirect Control Flow

By Mandiant • 23-minute read

Threat Intelligence

UNC1860 and the Temple of Oats: Iran’s Hidden Hand in Middle Eastern Networks

By Mandiant • 21-minute read

Threat Intelligence

An Offer You Can Refuse: UNC2970 Backdoor Deployment Using Trojanized PDF Reader

By Mandiant • 22-minute read