Cybersecurity threat intelligence
and research

Real attacks. Real analysis. Zero fluff.

Thumbnail for Expel 2026 Annual Threat Report

Annual Report

2026 Threat Report

Expel’s Annual Threat Report 2026 takes real-life cybersecurity lessons learned and transforms them into actionable insights for security operators.
resource thumbnail for quarterly threat report

Threat Report

Quarterly threat intelligence report

Get the latest threat intelligence data, straight from our SOC to you.
Thumbnail with shield icon

Threat Intel

Patch Tuesday: April 2026 (Expel’s version)

We're highlighting two critical CVEs, and we're also reviewing the Axios npm compromise from the end of March.

Check out the latest

View all articles
alt=""
May 21, 2026  |  Scout Scholes

AI malware: The claims are getting wilder, but the reality is more interesting

AI malware is real—but most of what you've read about it isn't. Marcus Hutchins and Aaron Walton separate the legitimate concerns from the hype.
alt=""
May 1, 2026  |  Scout Scholes

The AI threat that’s actually worth worrying about from Q1 2026 (part two)

How North Korea's Lazarus group uses AI to industrialize attacks, and what Anthropic Mythos means for defenders navigating the real AI threat landscape.
How AI is reshaping the threat landscape, and what our Q1 2026 data shows (part one)
April 30, 2026  |  Scout Scholes

How AI is reshaping the threat landscape, and what our Q1 2026 data shows (part one)

What Q1 2026 threat data shows about AI: how it's being used as bait and delivery—and the vectors defenders need to watch in Q2.
alt=""
April 28, 2026  |  Ben Baker

Mythos found the canary. Here’s what’s in the mine.

Expel Chief Technology Officer (CTO) Greg Notch sat down to discuss the real problem Anthropic Mythos is highlighting: patching governance.
alt=""
April 22, 2026  |  Marcus Hutchins

Inside Lazarus: How North Korea uses AI to industrialize attacks on developers

Expel is tracking a North Korean (DPRK) state-sponsored APT group. This group is targeting Web3 developers to steal cryptocurrency and NFTs.