Analysis of server-side data associated with The Gentlemen ransomware group identified the complete TukTuk C2 project structure, DLL side-loading configurations, EDR neutralization research, vulnerable driver materials, and data assessed to have been exfiltrated from multiple organizations.

Real-world backup infrastructure attacks revealing how misconfigured Veeam servers and unencrypted backups enable domain compromise

Ransomware affiliates have long since abused Cloudflared tunnels to maintain persistent access to compromised environments. These tunnels can be utilized as a strong indicator of compromise when examined at-scale.

How AI-assisted reverse engineering of stripped PAN-OS binaries led to finding a JWT algorithm confusion vulnerability in GlobalProtect's Cloud Authentication Service, enabling full VPN auth bypass with just a username.

Learn 7 techniques to enable RDP remotely via NetExec, Impacket, Evil-WinRM & Metasploit for lateral movement in pentesting.

Detailed Analysis of DragonForce Ransomware Author: S2W TALON (Byeongyeol An) First Published: Jan 14, 2026 Executive Summary (Introduction) The DragonForce Ransomware Group, first detected in …