What Was a 45-GPU Cracking Farm Built For?

Blog What Was a 45-GPU Cracking Farm Built For? A 45-GPU Cracking Rig and 74,000 Records: Inside the Global FortiGate Access Campaign Most credential leaks are messy. Someone dumps a pile of raw data, half of it stale, and walks away. What ThreatMon’s research team pulled apart in June 2026 was the opposite: a clean, […]

Why Would an Adversary Collect 74,000 FortiGate

Why Would an Adversary Collect 74,000 FortiGate

Blog Why Would an Adversary Collect 74,000 FortiGate ThreatMon Analysis of a Global FortiGate Access Collection Operation Executive Summary In June 2026, security researcher Volodymyr “Bob” Diachenko disclosed the existence of a large dataset associated with internet-facing FortiGate deployments worldwide. The disclosure immediately attracted attention due to the scale of the exposed information and the […]

Oil & Gas Under Siege: What the 2026 Cyber Threat Landscape Actually Looks Like

Oil & Gas Under Siege: What the 2026 Cyber Threat Landscape Actually Looks Like

The pipelines keep running. The rigs keep drilling. But somewhere in the background, threat actors are quietly doing their own kind of work stealing credentials, probing control systems, and waiting for the right moment to pull the trigger on a ransomware payload. The 2026 threat intelligence picture for the oil and gas sector is not pretty, and if you’re involved in energy security, it deserves your full attention.

GitHub’s Source Code Is for Sale And They’ve Confirmed It

GitHub's Source Code Is for Sale And They've Confirmed It

Blog GitHub’s Source Code Is for Sale And They’ve Confirmed It On May 19, 2026, a threat actor going by the handle TeamPCP posted a sale listing on the Breached cybercrime forum offering roughly 4,000 private GitHub repositories including the company’s core Rails application for a starting price of $50,000. By the time researchers caught […]

Seedworm Expands Operations with Stealth-Focused Espionage Campaign

Seedworm Expands Operations with Stealth-Focused Espionage Campaign

Blog Seedworm Expands Operations with Stealth-Focused Espionage Campaign ThreatMon researchers identified a new espionage campaign linked to Seedworm, the Iran-aligned threat actor also known as MuddyWater and Static Kitten. The activity affected organizations across multiple industries, including manufacturing, finance, government, aviation, and education. The campaign shows a clear shift toward stealth and operational security. Instead […]

Financial Sector Under Siege The New Cyber Threat Reality (2025–2026)

Financial Sector Under Siege The New Cyber Threat Reality (2025–2026)

Blog Financial Sector Under Siege The New Cyber Threat Reality (2025–2026) Financial Sector Under Siege The financial sector has always been a target for cybercriminals. Now attacks are no longer just isolated incidents. They are part of a connected and evolving cyber ecosystem. According to ThreatMon analysis todays attacks are not about breaching systems. They […]

Handala Hack Team and the Stryker Breach: When Hacktivism Masks State-Level Cyber Warfare

Handala Hack Team and the Stryker Breach: When Hacktivism Masks State-Level Cyber Warfare

Blog Handala Hack Team and the Stryker Breach: When Hacktivism Masks State-Level Cyber Warfare Handala Hack Team and the Stryker Breach Cyber operations increasingly blur the lines between hacktivism, cybercrime, and state-sponsored warfare. A recent attack attributed to the Handala Hack Team highlights how modern threat actors combine political narratives with highly destructive cyber capabilities. […]

When War Goes Digital: The Cyber Side of the Iran–Gulf Crisis

When War Goes Digital: The Cyber Side of the Iran–Gulf Crisis

Blog When War Goes Digital: The Cyber Side of the Iran–Gulf Crisis The Cyber Side of the Iran–Gulf Crisis A 5W1H Guide for Security Teams Geopolitical crises do not stay on the battlefield. The Iran–Gulf crisis shows how quickly physical escalation can spill into cyberspace. For security teams, this matters now. Not next week. If […]

New Features to Strengthen Your Cyber Defense

New Features to Strengthen Your Cyber Defense

Blog New Features to Strengthen Your Cyber Defense Cyber Defense 🧠 Brainify Risk Score: Smarter Scoring, Clearer Priorities Turn Alert Chaos into Executive-Grade Risk Clarity Our new Brainify Risk Score system brings a modular, explainable, and highly visual approach to risk analysis. It is structured across three intelligence layers to help security teams move from noise to insight: Core […]

2025: The Year Government Cybersecurity Reached a Breaking Point

2025: The Year Government Cybersecurity Reached a Breaking Point

Blog 2025: The Year Government Cybersecurity Reached a Breaking Point Government Cybersecurity The global government sector entered 2025 under unprecedented cyber pressure. ThreatMon’s latest intelligence analysis reveals that public institutions worldwide are facing a multidimensional threat landscape shaped by intense DDoS operations, identity-driven intrusions, expanding ransomware campaigns, and sophisticated state-sponsored espionage. This year’s data underscores […]