SURIQTopic
Phishing & social engineering
Credential theft, business email compromise, and the human-targeted attacks that open the door for everything else.
All topics Malware & C2Detection & threat huntingSupply-chain attacksAI & LLM securityRemote code executionActive exploitationEdge & VPN securityPrivilege escalationRansomwareWordPress securityPatch managementCloud securityData breachesTakedowns & law enforcementVulnerable drivers (BYOVD)Zero-daysOAuth & SaaS tokensPhishing & social engineering
Security news
Signal's recovery key never expires, and Russian intelligence is now phishing for it
Russian intelligence is phishing Signal users for the Backup Recovery Key, a secret that decrypts a whole message history and that no reset or new account can
Security news
ClickFix is now shared attack infrastructure, and the lure is the wrong thing to detect
Three unrelated crews adopted ClickFix delivery in a single quarter. The lure keeps changing; the execution chain does not. Here is where to detect it.
Ready to meet the Guardians?
Deploys fast - agentless for monitoring and cloud, a lightweight agent for deep endpoint security. Just Suriq, standing watch.