A beam of light showing a piece of machinery with interlocking wires.

August 24, 2026

SOC Insights & Other News

Product News

What you need to know before putting AI agents in your production SOC

A convincing demo doesn’t prove production readiness. Learn how to test an AI agent before it takes on live SOC investigations.

David Greenwood

Thank you! Your submission has been received!

Oops! Something went wrong while submitting the form.

Latest blogs

Threat Research & Intelligence

TDR Team

June 1, 2022

MSDT abused to achieve RCE on Microsoft Office

Discover through our article, how attackers hijack the Microsoft Support Diagnostic Tool to remotely execute arbitrary code under Windows.

Félix AIME

TDR Team

Aerial view of the Estonian Military Academy and Baltic Defence College in Tartu, Estonia

Detection Engineering

TDR Team

APT

May 23, 2022

TURLA’s new phishing-based reconnaissance campaign in Eastern Europe

Sekoia's Threat & Detection Researchers expose a reconnaissance and espionage campaign from TURLA against eastern-EU institutions.

Guillaume COUCHARD

Maxime ARQUILLIERE

TDR Team

Threat Research & Intelligence

TDR Team

Cybercrime

May 17, 2022

EternityTeam: a new prominent threat group on underground forums

During our monitoring of Dark Web cybercrime forums, we came across EternityTeam: here is what we found on this new active & organized threat

Quentin Bourgue

TDR Team

Product News

SOC Insights & Other News

April 29, 2022

Sekoia proudly flies the flag of “Cybersecurity Made In Europe”

The European cybersecurity market is complex. Sekoia obtained the “cybersecurity made in Europe” to help customers fulfill their needs in XDR.

Sekoia Team

Robot graphic, with green filter and blurry overlay.

Product News

Threat Research & Intelligence

TDR Team

April 22, 2022

XDR vs ransomware

XDR is a solution of choice to fight against ransomware threats and stop attacks before impact.

Nicolas CAPRONI

Sekoia Team

Threat Research & Intelligence

TDR Team

Cybercrime

April 7, 2022

Mars, a red-hot information stealer

Mars Stealer is an information stealer sold on underground forums by MarsTeam since June 22, 2021, with the malware-as-a-service model.

Pierre LE BOURHIS

Quentin Bourgue

TDR Team

Detection Engineering

Product News

March 29, 2022

Improving threat detection with Sigma correlations

Today, we are adding Sigma Correlations support to the SEKOIA.IO threat detection capabilities! In this post, we discuss what can be done with it, and why it was needed.

Upscaling Team

A blue globe overlapping with orange locks and numbers.

Threat Research & Intelligence

TDR Team

March 23, 2022

Lapsus$: when kiddies play in the big league

The extorsion group Lapsus$ that already succeeded in breaching several high profile companies is running riot and sowing confusion. In this blog, our Threat & Detection Research team answers your questions by drawing the profile of the group.

Livia TIBIRNA

Narimane LAVAY

TDR Team

Threat Research & Intelligence

TDR Team

March 7, 2022

A war on multiple fronts – the turbulent cybercrime landscape

In this blog post, we will focus on developments in the world of cybercrime (which supposedly do not involve nation-state threat actors) in the current war context.

Livia TIBIRNA

TDR Team

Threat Research & Intelligence

TDR Team

Cybercrime

February 25, 2022

The story of a ransomware builder: from Thanos to Spook and beyond (Part 2)

Ransomware spook : In this second part of the series, you will discover how to handle such evil sightings and neutralize them before impact.

Kilian SEZNEC

Livia TIBIRNA

TDR Team

Ukrainian flag in the sunset, with a forest background.

Threat Research & Intelligence

TDR Team

February 24, 2022

Invasion of Ukraine – what implications in cyberspace?

Our analysts and researchers use this very specific context to provide an overview of the current state of cybercrime.

Livia TIBIRNA

TDR Team

"ransomware" text surrounded by padlocks

Threat Research & Intelligence

TDR Team

Cybercrime

February 17, 2022

The story of a ransomware builder: from Thanos to Spook and beyond (Part 1)

In this article, we show how Sekoia came across Spook, and what they found when looking under the hood.

Sekoia Team

Threat Research & Intelligence

TDR Team

APT

January 6, 2022

NOBELIUM’s EnvyScout infection chain goes in the registry, targeting embassies

NOBELIUM is another name for the APT29 intrusion set, operated by a threat actor allegedly linked to the SVR.

Félix AIME

TDR Team

Threat Research & Intelligence

TDR Team

December 13, 2021

Log4Shell: The defender’s worst nightmare?

In this blog post, our Threat Detection & Research team answers your questions on Log4Shell.

Félix AIME

TDR Team

Product News

December 3, 2021

SIGMA, design and MITRE ATT&CK: The new features of the XDR and CTI platform

Discover in this article, all the news features of Sekoia XDR and CTI platform (SIGMA, design and MITRE ATT&CK).

Upscaling Team

Threat Research & Intelligence

TDR Team

APT

November 10, 2021

Walking on APT31 infrastructure footprints

APT31 is an Advanced Persistent Threat group whose mission is likely to gather intelligence on behalf of the Chinese government.

Félix AIME

Threat Detection & Research team

Sekoia Threat Detection & Research team, commonly known as the TDR team, is the driving force behind the Sekoia SOC platform, delivering exclusive threat intelligence.

Meet TDR team

Read latest TDR articles

All categories

Detection Engineering

Product News

SOC Insights & Other News

Threat Research & Intelligence