Intelligence & Insights

Threat Intelligence Blog

Expert analysis, adversary research, technical guides, and security news from the Port Cyber Defense operations team.

Threat Intelligence CRITICAL

New APT Group "SilverThread" Targeting Critical Infrastructure: Full TTPs Breakdown

Our threat intelligence team has identified a new advanced persistent threat actor targeting energy sector SCADA systems across Europe and North America. This comprehensive breakdown covers their tooling, C2 infrastructure, initial access vectors, and defensive countermeasures you can deploy today.

HIGH  Ransomware

LockBit 4.0 Analysis: New Encryptor Variants and Bypass Techniques

Deep-dive technical analysis of the latest LockBit 4.0 variants observed in Q1 2026. We break down the new encryption routines, ESXi targeting capabilities, and defensive detection strategies using Sigma rules ready for your SIEM.

GUIDE  Penetration Testing

Active Directory Attack Paths: From Domain User to Domain Admin in Under 30 Minutes

A technical walkthrough of the most common Active Directory attack paths — Kerberoasting, AS-REP Roasting, ACL abuse, and delegation attacks — with defensive mitigations mapped to each technique.

INTEL  Cloud Security

AWS S3 Misconfiguration Surge: 2,400+ Exposed Buckets Found in Healthcare Sector

Our attack surface management platform identified a significant increase in exposed AWS S3 buckets across healthcare organizations. This report covers the scope, root causes, and a step-by-step remediation checklist.

GUIDE  vCISO

How to Build a Board-Worthy Security Risk Report: A CISO Template

Most security teams struggle to communicate risk to non-technical boards. This guide provides a practical framework for translating technical findings into business-language risk reporting that drives investment decisions.

HIGH  Zero Day

CVE-2026-0847: Critical RCE in Widely-Used VPN Appliances — Patch Now

A critical remote code execution vulnerability affecting major enterprise VPN appliances is being actively exploited in the wild. This advisory covers affected versions, exploitation indicators, and emergency mitigation steps.

GUIDE  Red Team

Building a Custom C2 Framework: What Red Teams Need to Know in 2026

A technical exploration of modern C2 framework design patterns, evasion techniques for bypassing modern EDR solutions, and the operational security considerations every red team operator needs to understand.