Blog
Threat intel
ClearFake gets more evasive with new living off the land (LOTL) techniquesClearFake's latest campaign uses fake CAPTCHAs and social engineering trick victims into installing malware, and it's getting more evasive.
Expel culture | 2 min read
Meet the Expletive: Cole Finch, Senior Web DeveloperMeet Cole Finch, Senior Web Developer at Expel. He's an Indiana native whose heart resides in Chicago with his favorite sports teams.
Product | 2 min read
Expel deepens CrowdStrike partnership with support for Falcon Next-Gen SIEMExpel now integrates with CrowdStrike Falcon Next-Gen SIEM (NG-SIEM), expanding our existing partnership with CrowdStrike.
MDR | 7 min read
Cybersecurity ROI: why boring security is your best investmentPatch management isn't glamorous—but it stops most attacks. Learn how to make the ROI case for fundamental security controls to your CFO.
Data & research | 2 min read
Expel’s 2026 Annual Threat Report is live–here’s what you need to knowExpel's latest threat intelligence report is here, ready to help sharpen your defenses with recommendations from lived SOC experience.
MDR | 3 min read
Spoiler alert: Cybersecurity has never been about the attacksOur 2026 Annual Threat Report highlights identity incidents as most common. CISOs must translate that risk to quantitative measures to make a difference.
Company news | 2 min read
Announcing the winners of our second annual Partner of the Year AwardsAnnouncing Expel's second annual Partner of the Year awards, recognizing recipients who help orgs maximize security ROI and build operational resilience.
Product | 4 min read
How we built it: Expel’s latest RMM detectionsExpel is leveling up its detection capabilities against remote monitoring and management tools (RMMs). Here's how we're doing it.
Threat intel | 5 min read
Patch Tuesday: February 2026 (Expel’s version)We're highlighting three critical CVEs, and we're also sharing some thoughts around the deprecation timeline of NTLM.
MDR | 5 min read
Cybersecurity ROI: why security leaders report what finance doesn’t want to seeLearn why program maturity fails to show cybersecurity ROI and discover which metrics finance leaders actually use to measure investments and business value.
MDR | 3 min read
Four threat hunting fundamentals you need to masterLearn about the four threat hunting basics you need to master to successfully integrate it into your cybersecurity program.
Rapid response | 1 min read
Notepad++ supply chain incidentThe developer of Notepad++ disclosed an incident where actors identified a means to tamper with the delivery of automatic updates.
Company news | 2 min read
Three of Expel’s partner leaders land on the 2026 CRN® Channel Chiefs listThree Expel leaders—Alex Glass, Derek Hart, and Kaitlin Waite—are honored in CRN's 2026 Channel Chiefs list.