ThreatDown

Threat Intelligence, Threat Walkthroughs CARBONATO: a botnet built around an AI agent ThreatDown researchers uncovered CARBONATO, a Docker botnet built around an AI agent that compromises exposed Docker daemons, spreads across reachable hosts, and gives o

SANTA CLARA, Calif., September 10, 2026--ThreatDown, a leader in elite Managed Detection and Response (MDR), today announced that its ThreatDown Endpoint Protection + EDR solution blocked 100% of malware samples in the July 2026 Advanced In-The-Wild Malwa

Ransomware, Threat Intelligence This SonicWall bug is 2 years old. Akira ransomware is still exploiting it. No zero-day required. Just a patch left unapplied. September 8, 2026 L. Travis The Akira ransomware gang is still breaking into networks through a

News, Threat Intelligence AI threat so great that security "takes precedence over everything except critical business operations" What OpenAI's open letter means for teams running lean. August 28, 2026 L. Travis OpenAI just published an open letter, co-si

Cybercrime, Threat Intelligence How Grok unknowingly powers cybercrime Kriminal isn't a custom-built criminal AI model: it's Grok in a trench coat. The proof sits in its own code. August 18, 2026 ThreatDown Writer Our collective safety increasingly depend

74% of organizations are running more AI tools than anticipated. A majority of the companies surveyed expected five or less tools deployed in their environments; however, 30% of those organizations discovered 16 or more were running.

New research finds most orgs badly undercount their AI tools and usage. Cybersecurity experts say the real risk is agentic AI acting without oversight.

Awareness, Threats 74% of organizations exposed to shadow AI Companies vastly underestimate how much unknown and ungoverned AI is running in their environment, creating an entirely new attack surface. August 10, 2026 L. Travis If you were to guess how man

Lava found 36,872 management interfaces reachable from the public internet, and showed that unique factory passwords on modern Supermicro and HPE hardware can be recovered in an hour or less.

Frontier AI model safety guardrails impeded Hugging Face's analysis of attack evidence, forcing it to rely on an open-weight model for incident response instead.