News
The Language of Emojis in Threat Intelligence: How Adversaries Signal, Obfuscate, and Coordinate Online
3+ hour, 42+ min ago (663+ words) In this post, we examine how threat actors use emojis across illicit communities, how these symbols function as a form of coded language, and why understanding this form of communication is increasingly critical for threat intelligence teams. As threat actor…...
What to Know About the Notepad++ Supply-Chain Attack
1+ mon, 4+ day ago (201+ words) In this post we examine the mechanics of the CVE-2025-15556 supply-chain attack and provide actionable steps to secure your environment. The vulnerability, tracked as CVE-2025-15556 (VulnDB ID: 430205), exploits a critical flaw in the Notepad++ updater component, WinGUP. In versions prior to…...
The Human Element: Turning Threat Actor OPSEC Fails into Investigative Breakthroughs
1+ mon, 2+ week ago (335+ words) In this post, we explore how the psychological traps of operational security can unmask even the most sophisticated actors. In our latest webinar, "OPSEC Fails: The Secret Weapon for People-Centric OSINT," Flashpoint was joined by Joshua Richards, founder of OSINT…...
N-Day Vulnerability Trends: The Shrinking Window of Exposure and the Rise of "Turn-Key" Exploitation
1+ mon, 2+ week ago (427+ words) In this post we explore the data-driven shrinkage of the Time to Exploit (TTE) window from 745 days to just 44, and examine why N-day vulnerabilities have become the "turn-key" weapon of choice for modern threat actors. The race between defenders and…...
Flashpoint’s Threat Intelligence Capability Assessment
1+ mon, 3+ week ago (314+ words) In this post we introduce a new free assessment designed to pinpoint intelligence gaps, top strategic priorities for progress, and prioritized practical actions to drive real impact. These blind spots create friction across security operations'and make it difficult to improve…...
How China’s "Walled Garden" is Redefining the Cyber Threat Landscape
2+ mon, 3+ day ago (268+ words) In our latest webinar, Flashpoint unpacks the architecture of the Chinese threat actor cyber ecosystem'a parallel offensive stack fueled by government mandates and commercialized hacker-for-hire industry. For defenders, this means that by the time a vulnerability is public, there is…...
Digital Supply Chain Risk: Critical Vulnerability Affecting React Allows for Unauthorized Remote Code Execution
3+ mon, 4+ week ago (444+ words) CVE-2025-55182 (VulnDB ID: 428930), is a severe, unauthenticated RCE impacting a major component of React and its ecosystem, putting global applications at immediate, high-fidelity risk. The React team disclosed a critical vulnerability impacting three products in the React Server Components (RSC) that…...
The CEO Database Exposes Information on Over 1,000 Executives
9+ mon, 4+ week ago (156+ words) In this post, we delve into the emergence of The CEO Database, analyzing the escalated threat it poses to executive protection'from doxxing to sophisticated AI-powered phishing and deepfake campaigns. Flashpoint obtained the full list and is in the process of…...
AI and Threat Intelligence: The Defenders’ Guide
9+ mon, 1+ week ago (137+ words) How adversaries are scaling attacks with AI'and how defenders are fighting back. - Resources Blog Article Flashpoint 2025 Global Threat Intelligence Report: Stay Ahead of Emerging Threats- Why Flashpoint WHY FLASHPOINT Comprehensive Intelligence for Mission-Critical Teams - Company Flashpoint Research The Flashpoint 2025 Global…...