Flare

By Adrian Cheek, Senior Cybercrime Researcher What Passive DNS Discloses About the Systems Behind the Cameras Automated license plate readers and AI-assisted video surveillance have moved from a handful of pilot deployments to tens of thousands of install

With women comprising approximately 22% of the global cybersecurity workforce, organizations like Women in CyberSecurity (WiCyS) are actively working to close the gender gap. As a proud partner of WiCyS, we joined forces with SANS Institute to bring the "

By Adrian Cheek, Senior Cybercrime Researcher ReliaQuest Threat Research published a short public advisory about a ShinyHunters campaign on August 17, 2026. This campaign was built on domains following a company.claims pattern, and reported that the group

By Adrian Cheek, Senior Cybercrime Researcher On August 22, 2026, The Telegraph reported that a small UK power generator had been shut down for four days in July following a cyberattack by hackers linked to Iran. The government confirmed that a small-scal

By Adrian Cheek, Senior Cybercrime Researcher Ask an internet-wide scanning index how many satellite mission-control systems are exposed and you can get the answer 1,776. All but 18 of those results turn out to be the same static web page, replicated acro

By Adrian Cheek, Senior Cybercrime Researcher The standard story about higher education cybersecurity is that it's target-rich and cyber-poor: a sprawling, underfunded sector where the weakest links are the community colleges and cash-strapped campuses wi

Abstract page for arXiv paper 2608.25220: FLARE: Verifying MILP Reformulations with LLM-Based Theorem Proving

A walkthrough of the process of deanonymization By Flare's Emerging Threats Team For five days in March 2026, a single stolen token let one group poison five software ecosystems including a package downloaded 95 million times a month. The attack started w