Blog
MDR
The Complimentary 2025 Gartner® Market Guide for Managed Detection & Response Services is here (and Expel is recognized, again)The 2025 Gartner® Market Guide for Managed Detection & Response Services is here, and Expel is recognized as a Representative Vendor again.
Threat intel | 2 min read
Patch Tuesday: October 2025 (Expel’s version)This month, we're highlighting top critical vulnerabilities, including six zero-day vulnerabilities, and one in Cisco IOS.
Current events | 2 min read
Cybersecurity Awareness Month: Good reminders for the entire yearOctober is Cybersecurity Awareness Month. Here are four tips for staying secure this month (and the rest) at work and at home.
MDR | 3 min read
The Complimentary 2025 Gartner® Market Guide for Managed Detection & Response Services is here (and Expel is recognized, again)The 2025 Gartner® Market Guide for Managed Detection & Response Services is here, and Expel is recognized as a Representative Vendor again.
Threat intel | 6 min read
Cache smuggling: When a picture isn’t a thousand wordsWe recently observed an innovative campaign using the ClickFix attack tactic for cache smuggling. Here's what you need to know.
MDR | 3 min read
Stop counting integrations. Start counting what matters.With integrations and security, quantity is not the same as quality. Integration counts are a vanity metric that make you less secure.
Expel culture | 3 min read
How Expletives use AI in their day-to-day workExpel’s approach to AI is measured and thoughtful, but that doesn’t stop us from getting creative. Check out these ideas on using AI at work.
SOC | 3 min read
Stories from the SOC: When threats come from inside the houseMDR email coverage is more than just flagging spam to contain threats. Here's what happens when malicious emails come from within an org.
MDR | 7 min read
Gonzo threat hunting: LapDogs & ShortLeashFollow along as a senior detection & response engineer locates threat actors using SOHO devices & ORB networks, Gonzo-style.
MDR | 5 min read
Cybersecurity myths from the depths of Reddit (that security pros want you to know about)Cybersecurity professionals often take to Reddit to share thoughts with their community. You can learn more secure practices from it, too.
Product | 2 min read
Email coverage expansion: Sublime Security integration now liveExpel MDR for Email now integrates with Sublime Security for enhanced threat visibility across your inboxes.
MDR | 3 min read
Getting real value from your Palo Alto investment: how Expel MDR transforms security operationsExpel MDR reduces Palo Alto alert noise by 87% with 17-minute response times. Expert 24x7 analysis maximizes your security investment ROI.
Threat intel | 17 min read
The history of AppSuite: the certs of the BaoLoader developerWe're tracking the malware BaoLoader and their fraudulent code-signing certificates via AppSuite-PDF and PDF editor campaigns.