Experienced a breach?
Contact us
Experienced a breach?
CONTACT US
Resource Type
Blog
Threat Reports and Advisories
Guides and tools
Datasheet
Webinars
Topics
Cloud
Incident Response
OT Security
Malware
Vulnerabilities
Attack Techniques
Detection
State Actors
Research
Forensics
Email
Cyber Crime
Ransomware
Mitigation and Response
Managed Detection and Response
Tabletop War Games
Threat Intelligence
Security Mitigation
VMware Security
Artificial intelligence (AI)
Threat Research
Threat Reports and Advisories Attack Techniques Detection Incident Response Malware Threat Research
Shai-Hulud Returns: When Software Trust Becomes the Attack Surface
The August 2026 Shai-Hulud campaign was more than another npm compromise, it reflected the evolution of software supply chain attacks, where build pipelines and trust mechanisms have become high-value targets.
Omer Kidron, Enterprise Security Expert
Lahav Meir, Senior Enterprise Security Expert
5.08.2026
11 min
Blog Attack Techniques Cyber Crime Detection Ransomware
Velvet Ant’s Operation Highland: How a China-Nexus Actor Infiltrated an Internal Network Undetected
Discover the detailed forensic investigation by Sygnia into the sophisticated cyber attack by Velvet Ant on a major organization.
Chen Tiktin
8.06.2026
21 min
Threat Reports and Advisories Attack Techniques Detection
The Mythos Effect: Preparing for AI-Accelerated Exploitation
How Vulnerability Management Programs Must Evolve
The Mythos Effect: Preparing for AI-Accelerated Exploitation
17.04.2026
12 min
Blog Cyber Crime Detection Incident Response Research
Bybit – What We Know So Far
The February 2025 Bybit hack exposed critical security gaps across multiple domains. This summary compiles findings from various investigations, shedding light on the attackers’ tactics, industry-wide risks, and key lessons to enhance crypto security.
Sygnia Team
16.03.2025
12 min
Blog Detection Forensics Ransomware
The Anatomy of Abyss Locker Ransomware Attack
Abyss Locker ransomware targets critical network devices with swift, disruptive attacks. This blog breaks down its tactics and defense strategies.
Abigail See, Zhongyuan (Aaron) Hau, Ren Jie Yow, Yoav Mazor, Omer Kidron, Oren Biderman
4.02.2025
16 min
Blog Attack Techniques Detection Forensics Incident Response Malware Managed Detection and Response Research
A Surge in Identity-based Attacks: Cybersecurity trends from Sygnia’s new 2025 Threat Report
Explore key cybersecurity trends for 2025, including ransomware evolution, supply chain vulnerabilities, and identity-based threats. Discover actionable strategies and expert insights to strengthen your organization’s resilience.
Sygnia Team
2.02.2025
5 min
Blog Detection Ransomware Research
CrowdStrike Fallout: Navigating the Risks of Intrusive Security Tools
Learn how to balance robust cybersecurity with operational stability in the wake of the CrowdStrike outage.
Koby Zvirsh, Donovan Pace, Haim Nachmias
7.10.2024
21 min
Blog Attack Techniques Cyber Crime Detection Ransomware
China-Nexus Threat Group ‘Velvet Ant’ Leverages a Zero-Day to Deploy Malware on Cisco Nexus Switches
Sygnia uncovers the China-Nexus group ‘Velvet Ant’ leveraging a zero-day exploit (CVE-2024-20399) on Cisco Switch appliances, escalating evasion tactics to maintain long-term network persistence.
Sygnia Team
22.08.2024
9 min
Guides and tools Detection Incident Response
Incident Response Readiness: What is it and how to improve it?
The most dangerous cyber attackers have something in common: they are tenacious at their craft and dogged in their determination to find and exploit security weaknesses.
Rena Stern, Director Solutions Marketing, Sygnia
11.08.2024
6 min
Blog Detection Research
The Return of Ghost Emperor’s Demodex
A Comprehensive Look at the Updated Infection Chain of Ghost Emperor's Demodex Rootkit.
Dor Nizar, Malware Researcher
17.07.2024
13 min
Blog Threat Reports and Advisories Attack Techniques Detection Mitigation and Response Ransomware
China-Nexus Threat Group ‘Velvet Ant’ Exploits Cisco Zero-Day (CVE-2024-20399) to Compromise Nexus Switch Devices – Advisory for Mitigation and Response
Learn about the forensic investigation by Sygnia, the cyber espionage operation by Velvet Ant, and best practices for safeguarding your network against sophisticated threats.
Sygnia Team
1.07.2024
7 min
Blog Attack Techniques Cyber Crime Detection Ransomware
China-Nexus Threat Group ‘Velvet Ant’ Abuses F5 Load Balancers for Persistence
Discover the detailed forensic investigation by Sygnia into the sophisticated cyber attack by Velvet Ant on a major organization.
Sygnia Team
3.06.2024
22 min
Solutions
Blog Attack Techniques Detection Ransomware
ESXi Ransomware Attacks: Evolution, Impact, and Defense Strategy
Understand how ransomware attacks unfold in virtualized environments, and how to defend against these attacks across each phase of the cyber-attack kill chain.
Nital Ruzin, Omer Kidron
15.05.2024
16 min
Blog Attack Techniques Cyber Crime Detection Forensics Incident Response Malware Ransomware Research
Chapter 3 – Reversing DoSvc C++ using Ghidra – Part 1
In this chapter, we’ll finally get started on my favorite part: the reversing phase. Reversing is like looking for a needle in a haystack, so prepare yourselves, because things are about to get technical.
Binyamin Levine, Oleg Lerner
6.05.2024
18 min
Blog Attack Techniques Cyber Crime Detection Forensics Incident Response Malware Ransomware Research
Chapter 2 – Black Box Research
The intricacies of WUDO (Windows Update Delivery Optimization).
Binyamin Levine, Oleg Lerner
16.04.2024
23 min
Threat Reports and Advisories Attack Techniques Detection Research
Defending Your Network Edge Against the Next Zero-Day Exploit
Learn how to break the endless cycle of vulnerable network edge devices, by combining immediate actions with strategic initiatives to transition from conventional methods to a Zero Trust approach.
Rob Kehl, Haim Nachmias, Omer Kidron
9.04.2024
13 min
Threat Reports and Advisories Attack Techniques Detection Research
XZ Utils Backdoor – Advisory for Mitigation and Response
Organizations Urged to Address Newly Discovered Security Flaw to Prevent Unauthorized Access to Linux Machines.
Lahav Meir, Omer Kidron
2.04.2024
7 min
Blog Attack Techniques Cyber Crime Detection Forensics Incident Response Malware Ransomware Research
Chapter 1 – Introduction
The intricacies of WUDO (Windows Update Delivery Optimization).
Binyamin Levine, Oleg Lerner
1.04.2024
6 min
subsctibe decor
Want to get in touch?
Contact us