SURIQBrowse
Topics
Every topic we cover, from ransomware and edge security to supply-chain attacks and AI security. Pick one to see the latest research and news.
Each topic page collects every post we have written on that subject, newest first, so you can follow one threat over time instead of scrolling the whole feed. The counts show how much ground each topic covers. To get new posts by email, pick your topics on the newsletter page.
Malware & C2 76 posts Backdoors, web shells, rootkits, loaders, and the command-and-control tradecraft behind active intrusions. Remote code execution 69 posts The most dangerous class of bug: flaws that let an attacker run their own code on your systems, often with no login required. Supply-chain attacks 63 posts Compromised packages, poisoned updates, and vendor integrations turned hostile across the software and SaaS supply chain. Active exploitation 55 posts Vulnerabilities under attack right now: CISA KEV additions, in-the-wild exploitation, and what to patch first. Detection & threat hunting 55 posts Detection engineering, threat hunting, and the SIEM and endpoint signals that catch attacks the network can't see. AI & LLM security 46 posts Security of AI systems: agent and large-language-model vulnerabilities, prompt injection, model supply chain, and Model Context Protocol (MCP) tooling. Cloud security 36 posts Misconfigurations, identity, and vulnerabilities across AWS, Azure, GCP, Kubernetes, and the containerized stack. WordPress security 34 posts Core and plugin vulnerabilities, backdoors, and account-takeover flaws across WordPress, the web's most-deployed CMS, plus the patches that actually matter. Patch management 33 posts Patch Tuesday roundups, update guidance, and the operational reality of keeping fleets current. Privilege escalation 30 posts Flaws that let an attacker gain admin, root, or kernel-level control from a lesser foothold. Edge & VPN security 29 posts Vulnerabilities in the internet-facing gear attackers hit first: firewalls, VPNs, and load balancers from Fortinet, Citrix, Ivanti, Palo Alto, and more. Ransomware 27 posts Ransomware attacks, extortion crews, and the intrusions that end in encryption. What happened, who is behind it, and how to cut off the path before the payload runs. Data breaches 20 posts Confirmed breaches and large-scale data theft: what was taken, how it happened, and what exposed organizations should do next. Zero-days 19 posts Previously unknown vulnerabilities exploited or disclosed before a patch existed. Takedowns & law enforcement 13 posts Botnet disruptions, infrastructure seizures, and coordinated law-enforcement operations against cybercrime. Phishing & social engineering 10 posts Credential theft, business email compromise, and the human-targeted attacks that open the door for everything else. OAuth & SaaS tokens 8 posts OAuth token abuse, connected-app compromise, and the identity layer behind SaaS integrations. Vulnerable drivers (BYOVD) 7 posts Bring-your-own-vulnerable-driver attacks that load a signed but flawed driver to disable endpoint defenses from the kernel.
See what Suriq finds on your own servers.
Agentless checks for uptime and your cloud, a lightweight agent for detection on each server, and one console that ranks and explains what it finds.