Insights · Category

Threat intelligence

1 post in Threat intelligence, featured first then newest.

All Threat intelligence Adversary emulation DFIR Threat hunting ICS / OT Training Product Community Industry analysis

Threat intelligence 17 Apr 2026

Browser-based initial access in 2026

The fastest-growing initial-access surface in the engagement data is the browser session, not the credential. Reverse-proxy phishing kits, OAuth consent abuse, extension supply-chain hijacks, and infostealer-fed cookie marketplaces — what changed, why MFA and password rotation no longer cover the dominant case, and which controls actually move the curve.

By Cyberange Threat Intel