🧰 Mandiant

The items that name it 27

• Bitget hacker fund movements top $78.01 million in transfers to new addresses
  articleas classification.key entities2026-10-24
• Wallet Linked to Drift Exploit Sends $61 Million in Ethereum to Tornado Cash
  articleas classification.key entities2026-10-20
• AOMEI Backupper Compromised in Short-Burst Supply Chain Campaign
  articleas classification.key entities2026-10-20
• Beyond the patch: Protecting your NetScaler gateway against future vulnerabilities
  articleas classification.key entities2026-10-19
• Exploited Fortinet Bug Linked to Stealthy FortiGate Implant in Telecom Hack
  articleas classification.key entities2026-10-19
• Dark Web Informer (@DarkWebInformer) on X
  threadas classification.key entities2026-10-18
• Lessons from the SolarWinds Breach: A Discussion With CISO Tim Brown
  articleas tools2026-10-16It is written here as Mandiant (notified SolarWinds of the tainted code).

  notified SolarWinds of the tainted code

• Frequently Asked Questions About the BeyondTrust Remote Support Arbitrary File Upload (CVE-2026-102764)
  advisoryas classification.key entities2026-10-16
• BeyondTrust Remote Support Arbitrary File Upload (CVE-2026-102764)
  advisoryas tools2026-10-16

  Documented, with BeyondTrust, that the vulnerability was exploited in targeted intrusions before patches were available

• Chinese APT Exploited BeyondTrust Vulnerability as Zero-Day
  articleas classification.key entities2026-10-16
• lee1981 (@lee1981b) on X
  threadas classification.key entities2026-10-16
• ARMORY CASTLE Exploits BeyondTrust
  writeupas classification.key entities2026-10-15
• Investigating Ephemeral Supply Chain Tampering
  writeupas classification.key entities2026-10-15
• Defending Against Active Exploitation of Citrix NetScaler ADC and Gateway Appliances
  writeupas classification.key entities2026-09-29
• ShinyHunters Renewed Mass Exploitation Campaign Targeting Oracle PeopleSoft
  writeupas classification.key entities2026-09-25
• Proactive Defense: Hardening Code Pipelines and CI/CD Infrastructure
  articleas classification.key entities2026-09-24
• Package Manager Sandboxing (Andrew Nesbitt)
  articleas classification.key entities2026-09-24
• GTIG AI Threat Tracker: From Prompting to Autonomy – The Evolution of Adversarial AI
  articleas classification.key entities2026-09-08
• Financially Motivated Threat Actor BREEZE COMET Targets Brazil
  articleas classification.key entities2026-09-01
• Agentic Source Code Review for Vulnerability Discovery
  articleas classification.key entities2026-08-21
• UNC6671 Rebrands: Multi-Brand Vishing Extortion Targets Financial Services and Enterprise Cloud Environments
  articleas classification.key entities2026-08-06
• Reptile's Custom Kernel-Module Launcher
  writeupas classification.key entities2024-11-10
• Today I Learned - kernel.modules_disabled
  writeupas classification.key entities2024-07-10
• Weekly Research Brief: PHP Vulnerability; Objections to OKX-ICE’s Stock Tokenization; Solana Alpenglow Ships
  articleas classification.key entities
• chainguard-dev/malcontent
  repoas tools

  Third-party YARA rule contributor to malcontent

• Bitget — Rekt
  writeupas tools

  Incident response firm; published preliminary and Incident Response Status Reports on the intrusion, identifying web shell, C2 connection, and lateral movement to wallet job server.

• Bitget Confirms Third-Party Zero-Day Behind $387.5 Million Cryptocurrency Theft
  articleas classification.key entities