Related Articles
Threat intel
Reading the certificate leaves: Understanding GoldenEyeDog’s teams—CylindricalCanine and CuboidalCanine—through code-signing certificates
In part two of this blog series, we're exploring CubodialCanine (Expel-TA-0003), and comparing their attack styles to CylindricalCanine (Expel-TA-0002).
Rapid response
ChainDrop: The Mini Shai Hulud npm worm’s latest wave hits keyv and cacheable
A self-propagating npm worm hit keyv, cacheable, and hundreds of dependent packages to steal CI/CD, cloud, and API credentials. Here's what to do now.
Product
Expel now covers the full AI attack surface
Expel is the top MDR provider covering the full AI attack surface: AI-powered attacks, employee misuse, and exposure inside AI systems. See what's live now.
Product
What we built: July 2026
In July, Expel launched six new threat hunts spanning the AI attack surface, for new features, and one integration update.