Threat Intelligence

Frontline Mandiant investigations, expert analysis, tools and guidance, and in-depth security research.

Threat Intelligence

Widespread Data Theft Targets Salesforce Instances via Salesloft Drift

An actor tracked as UNC6395 stole OAuth tokens from the Salesloft Drift app and leveraged them for widespread data theft.

By Google Threat Intelligence Group • 10-minute read

Read article

https://storage.googleapis.com/gweb-cloudblog-publish/images/03_ThreatIntelligenceWebsiteBannerIdeas_BA.max-1800x1800.png

Google Threat Intelligence News and Alerts

Subscribe now to receive timely news and alerts from Google Threat Intelligence, including the latest threat-focused blog posts, reports, webinars, podcasts and more.

Subscribe now

Threat Intelligence RSS Feed

Want to keep up-to-date on the latest Threat Intelligence posts? Add the Threat Intelligence RSS feed URL to your RSS reader today.

Threat Intelligence RSS feed URL

Threat Intelligence

Deception in Depth: PRC-Nexus Espionage Campaign Hijacks Web Traffic to Target Diplomats

By Google Threat Intelligence Group • 19-minute read

Threat Intelligence

A Cereal Offender: Analyzing the CORNFLAKE.V3 Backdoor

By Mandiant • 32-minute read

Threat Intelligence

Beyond Convenience: Exposing the Risks of VMware vSphere Active Directory Integration

By Mandiant • 31-minute read

Threat Intelligence

From Help Desk to Hypervisor: Defending Your VMware vSphere Estate from UNC3944

By Mandiant • 37-minute read

Threat Intelligence

Ongoing SonicWall Secure Mobile Access (SMA) Exploitation Campaign using the OVERSTEP Backdoor

By Mandiant • 22-minute read

Threat Intelligence

Isolated Recovery Environments: A Critical Layer in Modern Cyber Resilience

By Mandiant • 9-minute read

Threat Intelligence

Protecting the Core: Securing Protection Relays in Modern Substations

By Mandiant • 37-minute read

Threat Intelligence

Trix Shots: Remote Code Execution on Aviatrix Controller

By Mandiant • 38-minute read

Threat Intelligence

What’s in an ASP? Creative Phishing Attack on Prominent Academics and Critics of Russia

By Google Threat Intelligence Group • 6-minute read

Threat Intelligence

Hello, Operator? A Technical Analysis of Vishing Threats

By Mandiant • 12-minute read