Sekoia Blogs

At Sekoia, the integration of the MITRE ATT&CK framework into our Security Operations Center (SOC) platform is a cornerstone of our approach to cybersecurity. The ATT&CK framework serves as a comprehensive knowledge base of cyber adversary behaviours.

During the first semester of 2024, FakeBat (aka EugenLoader, PaykLoader) was one of the most widespread loaders using the drive-by download technique.

Discover how new cybersecurity tools can revolutionize SOC operations. Boost efficiency and stay ahead of cyber threats with integrated solutions.

The cybersecurity market is undergoing significant transformation marked by major acquisitions and mergers among key players. Traditional on-premise solutions are being replaced by comprehensive, SaaS-based platforms that offer faster deployment.

The Filigran x Sekoia.io partnership announcement is an opportunity to put the spotlight back on the benefits of the integration between OpenCTI and Sekoia Threat Intelligence.

This blog post provides an in-depth analysis of PikaBot, focusing on its anti-analysis techniques implemented in the different malware stages.

This time, we're not revealing a new cyber threat investigation or analysis, but I want to share some insights about the team behind all Sekoia Threat Intelligence and Detection Engineering reports. Let me introduce you to the Sekoia TDR…

Uncover the details of the DoppelGänger campaign, a Russian influence operation aimed at undermining support for Ukraine.

The Sekoia's AI SOC platform, designed for MSSP, centralizes management, integrates with any infrastructure, and automates tasks with pre-built playbooks. It supports MSSPs' transformation into MDRs, offering an intuitive XDR approach and multi-tenant mod

Learn how Sekoia.io stay ahead of the curve with sophisticated detection engineering strategies and proactive threat anticipation.

Learn about the techniques used by the Mallox ransomware affiliate to compromise an MS-SQL server. Dive into our detailed technical analysis.

Sekoia TDR analysts conduct an assessment of threats regarding the major elections that will occur in 2024.

Learn about our process for collecting telemetry data from PlugX worm-infected workstations, as well as how to disinfect them.

Sekoa helps companies to protect their cloud perimeters (AWS, Google Cloud, Azure). Enhance your cloud security with our in-built rules.

A broad introduction to AWS logs sources and relevant events for detection engineering.

Understand how EDR and XDR differ, where they overlap, and how MDR, MXDR & NDR fit in. A clear guide to choosing the right solution.

Tycoon 2FA has become one of the most widespread AiTM phishing kits over the last few months.

Learn how Sekoia and GLIMPS are working together to provide a rapid and coordinated response to sophisticated cyberattacks.

Discover the growing threat of residential proxies, their role in hiding among legitimate traffic and the challenges they pose in cyberspace.

At Sekoia, accurate IOC detection plays a vital role: Sekoia’s intelligence is based on more than 400 sources and more than 8 million of IOCs

Sekoia offers a cutting-edge Cyber Threat Intelligence (CTI) platform. With over 400 sources and 8 million indicators of compromise (IOC), Sekoia's experienced team delivers comprehensive cyber threat intelligence.