On Oct 21, the PHP project released emergency fixes for two critical vulnerabilities in the PHP runtime, together known as PHP2Shell. Look at how Trellix has detection coverage for this event and what teams should be doing now to ensure they’re protected: trellix.com/blogs/research/p…

When AI threats hit at tens of thousands of events per second, manual SOC triage fails. Read our deep dive into how Trellix Wise for Private Cloud processes 100% of alerts on-prem or in VPC without leaking data to public LLMs: trellix.com/blogs/platform/t…

"AI agents act as unmonitored non-human identities with trusted access." When an agent strays, traditional SOC tools take 15 hours on average to flag the breach. Read our latest research analysis of 600 CISOs navigating AI risk: trellix.com/mind-of-the-ciso…

Public LLMs force regulated SOCs to make the decision between leaking data or forfeiting agentic AI. Trellix Wise for Private Cloud changes that: keep full data control, gain transparent insights, and scale with predictable pricing. Read more: trellix.com/platform/wise/

Raw threat feeds create noise: operational intelligence creates clarity. Our new white paper breaks down The Five Dimensions of Operational Threat Intelligence to help SecOps teams turn adversary context into automated detection & response: trellix.com/assets/whitepape…

Operationalizing threat intel requires more than matching static IOCs. Our new paper details the Five Dimensions of Operational Threat Intelligence to correlate telemetry, map adversary TTPs, and enable machine-speed SOC detection: trellix.com/assets/whitepape…

From APT28’s quick exploit of CVE-2026-21509 to the DarkSword iOS kit and JSCeal infostealer, adversaries are evolving evasion tactics. Our latest Second Sight Threat Hunting Report tracks 5 campaigns abusing trusted tech: bit.ly/4ryaEPM

APT28 weaponized CVE-2026-21509 in under 24 hours to target 9 Eastern European nations (40% defense, 35% logistics). In CXO Insight ME (p. 49), read how our Second Sight Threat Hunting Report uncovers evasive campaigns: bit.ly/3VkaNKL

🚨 APT group SideCopy is expanding targets to academic institutions. The spear-phishing attack abuses mshta.exe and obsolete .NET deserialization for in-memory execution. See how to obstruct it 💻🛡️: trellix.com/blogs/research/s…

🚨 APT group SideCopy is expanding targets to academic institutions. The spear-phishing attack abuses mshta.exe and obsolete .NET deserialization for in-memory execution. See how to obstruct it 💻🛡️: trellix.com/blogs/research/s…

A new ARC blog simulates NTDS.dit & SYSTEM hive exfiltration using Metasploit/Meterpreter to test tool-agnostic NDR detection. Breakdown: trellix.com/blogs/research/d…

We just released this week's top 10 cybersecurity threats. 🛡️ Here's a look at what's on the radar: trellix.com/advanced-researc…

🔍 Adversaries are moving fast. See how Trellix SecondSight combines AI scale and human curiosity 🧠 to disrupt 5 major H1 2026 cyber campaigns. Learn more in our blog: trellix.com/blogs/research/t… Get the full report 👉 trellix.com/blogs/research/t…

School's in session 📚! Our August 2026 Bug Report covers 7 actively exploited bugs, from Windows kernel zero-days to SQL injection. Patch now & stay secure. 🛡️🔍 trellix.com/blogs/research/t…

Stop scrolling! 🛑 Here are the latest cybersecurity threats you should know about today. ➡️ trellix.com/advanced-researc…

How do attackers hijack Active Directory without a trace? Our new blog covers the full Kerberoasting kill chain—from SPN scanning to silent RC4-HMAC TGS ticket requests. 🔗 trellix.com/blogs/research/n…

Every SecOps team should have eyes on this week’s findings from the team! 👀 trellix.com/advanced-researc…