Cybersecurity threat intelligence
and research

Real attacks. Real analysis. Zero fluff.

Thumbnail for Expel 2026 Annual Threat Report

Annual Report

2026 Threat Report

Expel’s Annual Threat Report 2026 takes real-life cybersecurity lessons learned and transforms them into actionable insights for security operators.
resource thumbnail for quarterly threat report

Threat Report

Quarterly threat intelligence report

Get the latest threat intelligence data, straight from our SOC to you.
web thumbnail with threat alert icon

Threat Intel

SynkLoader: when you throw in everything but the kitchen sink

Discover a new malware family, SynkLoader. See how we reverse-engineered its phishing tactics to expose its attack chain.

Check out the latest

View all articles
Placeholder image for The AI CVE exploitation evidence story: Headlines are scarier than reality
August 27, 2026  |  Matt Jastram

The AI CVE exploitation evidence story: Headlines are scarier than reality

Expel's vulnerability intel team is currently monitoring 1,250+ CVEs related to 50 unique AI vendors; here's what we think you should know.
Expel Intel blog thumbnail
August 20, 2026  |  Marcus Hutchins

SynkLoader: when you throw in everything but the kitchen sink

Discover a new malware family, SynkLoader. See how we reverse-engineered its phishing tactics to expose its attack chain.
Placeholder image for Patch Tuesday: August 2026 (Expel’s version)
August 13, 2026  |  Matt Jastram

Patch Tuesday: August 2026 (Expel’s version)

August's Patch Tuesday is here, and it includes 398 CVEs, with three zero-days we recommend adding to the top of your priority list.
Placeholder image for Reading the certificate leaves: Understanding GoldenEyeDog’s teams—CylindricalCanine and CuboidalCanine—through code-signing certificates
August 6, 2026  |  Aaron Walton

Reading the certificate leaves: Understanding GoldenEyeDog’s teams—CylindricalCanine and CuboidalCanine—through code-signing certificates

In part two of this blog series, we're exploring CubodialCanine (Expel-TA-0003), and comparing their attack styles to CylindricalCanine (Expel-TA-0002).
Expel Intel blog thumbnail
August 3, 2026  |  Scout Scholes

Expel’s Q2 2026 threat report: Identity’s back on top, and Teams phishing isn’t slowing down

Expel's Q2 2026 threat data: identity attacks jump to 68.1%, Teams phishing drives an endpoint spike, and a new supply chain worm hits cloud infrastructure.