Cybersecurity threat intelligence
and research

Real attacks. Real analysis. Zero fluff.

Thumbnail for Expel 2026 Annual Threat Report

Annual Report

2026 Threat Report

Expel’s Annual Threat Report 2026 takes real-life cybersecurity lessons learned and transforms them into actionable insights for security operators.
resource thumbnail for quarterly threat report

Threat Report

Quarterly threat intelligence report

Get the latest threat intelligence data, straight from our SOC to you.
Thumbnail with shield icon

Threat Intel

Patch Tuesday: April 2026 (Expel’s version)

We're highlighting two critical CVEs, and we're also reviewing the Axios npm compromise from the end of March.

Check out the latest

View all articles
Placeholder image for Introducing CylindricalCanine: The GoldenEyeDog subgroup responsible for the April DigiCert incident
July 15, 2026  |  Aaron Walton

Introducing CylindricalCanine: The GoldenEyeDog subgroup responsible for the April DigiCert incident

CylindricalCanine is a new threat group within GoldenEyeDog, and they're actively using their malware for email phishing. Here's what you need to know.
Placeholder image for Patch Tuesday: July 2026 (Expel’s version)
July 14, 2026  |  Matt Jastram

Patch Tuesday: July 2026 (Expel’s version)

July's Patch Tuesday release includes a record-breaking 570 CVEs. These are the four we think need your attention now.
Placeholder image for Not very gentlemanly: Analyzing a zero-day exploit used by The Gentlemen ransomware to disable targets’ EDRs
June 30, 2026  |  Marcus Hutchins

Not very gentlemanly: Analyzing a zero-day exploit used by The Gentlemen ransomware to disable targets’ EDRs

How the threat group used a zero-day vulnerability to disable the target's EDR, preventing it from intervening in their ransomware attack.
Placeholder image for Patch Tuesday: June 2026 (Expel’s version)
June 11, 2026  |  Ben Nahorney

Patch Tuesday: June 2026 (Expel’s version)

This month's Patch Tuesday includes 204 CVEs and three zero-day vulnerabilities. We're also diving into a recent Copy Fail incident.
Placeholder image for AI malware: The claims are getting wilder, but the reality is more interesting
May 21, 2026  |  Scout Scholes

AI malware: The claims are getting wilder, but the reality is more interesting

AI malware is real—but most of what you've read about it isn't. Marcus Hutchins and Aaron Walton separate the legitimate concerns from the hype.