Mandiant tops 2026 incident response retainer ranking
Mandiant leads with guaranteed bench access; Unit 42 offers flexible credits in 2026 IR retainer rankings.
1
Stories per day · 30 days
4 RSS
Relatedcrowdstrike5recorded-future4threat-intelligence4incident-response2kaspersky2opencti2unit422anomali1aomei1backdoor1crossroad1cti1dfir1kroll1retainer1retainers1shinyroad1siem1
41 stories, newest first · one card per story
Stories tagged #mandiant
Mandiant leads 2026 DFIR company rankings
Mandiant tops for APT depth while CrowdStrike excels in telemetry-accelerated response in 2026 DFIR rankings.
Buyer’s guide compares 12 incident response retainer services
The review weighs SLAs, unused-hour conversion, onboarding and post-acquisition ownership rather than responder reputation alone.
1
2026 ranking puts Recorded Future first among CTI providers
Mandiant and CrowdStrike place second and third; Kaspersky is flagged as jurisdiction-gated for Western buyers.
4
2026 buyer's guide ranks 12 cyber threat intelligence feeds
The unpaid comparison maps each provider to the question it answers best and flags Kaspersky for US and allied procurement bans.
1
2026 guide compares 12 threat intelligence platforms
The unpaid review judges platforms on operationalization and flags Mastercard and Securonix ownership as RFP questions.
1
2026 ranking puts Recorded Future first among threat intelligence platforms
Editorial scores, not lab tests, place Anomali second and open-source OpenCTI third.
2
Investigating Ephemeral Supply Chain Tampering
UNC7017 briefly hijacked AOMEI updates to deliver CROSSROAD and SHINYROAD malware.
8
The First 24 Hours: What Happens When Ransomware Lands
Huntress describes the first day after ransomware is discovered, citing a 14-day median dwell time and rapid Akira theft.
6
Kevin Mandia’s new ‘agent swarm’ security startup Armadin raises $255.5M at $2.5B valuation
Kevin Mandia’s Armadin raised $255.5 million at a $2.5 billion valuation for always-on agentic security testing.
Kevin Mandia’s Armadin Raises $255 Million at $2.5 Billion Valuation
Kevin Mandia's AI-native security startup Armadin raised $255.5 million Series B at a $2.5 billion-plus valuation, bringing total funding to $445 million.
3
Bitget Confirms Third-Party Zero-Day Behind $387.5 Million Cryptocurrency Theft
Bitget confirms North Korean-linked attackers stole $387.5M via a zero-day in third-party security appliances, deploying web shells and a custom withdrawal tool.
6
Suspected state-sponsored hackers exploited NetScaler zero-day since early September (CVE-2026-88772)
Suspected state-sponsored actors exploited NetScaler zero-day CVE-2026-88772 since early September, affecting dozens of organizations.
Bitget hacked via zero-day in third-party security products
Bitget confirms attackers stole $387.5 million using zero-days in two third-party security appliances, deploying web shells and a custom withdrawal tool against hot wallets.
7
Hackers Exploit Citrix NetScaler Zero-Day to Gain Root Access and Deploy Web Shells
Attackers exploit Citrix NetScaler zero-day CVE-2026-88772 for root access and PHP web shells.
WHIPSHOT and SLAPSHOT: the tools behind an active Citrix NetScaler campaign
Attackers exploit Citrix NetScaler zero-days and deploy WHIPSHOT and SLAPSHOT for persistent root access.
Attackers exploited Citrix NetScaler zero-day for at least three weeks undetected
Suspected state-sponsored actors mass-exploited Citrix NetScaler zero-day CVE-2026-88772 undetected for over three weeks, hitting dozens of organizations.
Custom malware used in Citrix 0-day attacks targeting govt, banks, professional services
Unknown attackers exploited critical Citrix NetScaler zero-days CVE-2026-88771/88772 since early September, deploying custom WHIPSHOT and SLAPSHOT malware for persistence and tunneling.
Defending Against Active Exploitation of Citrix NetScaler ADC and Gateway Appliances
Actively exploited Citrix NetScaler zero-days CVE-2026-88772/88771 give attackers root access; Mandiant uncovers WHIPSHOT web shells and SLAPSHOT tunneler in ongoing campaign.
ShinyHunters exploiting workarounds for Oracle PeopleSoft bug, Mandiant warns
Mandiant says ShinyHunters is again exploiting unpatched Oracle PeopleSoft flaw CVE-2026-35273, including after workarounds.
3
Bitget Restarts Bitcoin Withdrawals Following $387.5m Wallet Breach
Bitget resumed Bitcoin withdrawals after a third-party security product flaw let attackers steal $387.5M in unauthorized transfers from hot/warm wallets.
2
Kiteworks Urges Server Shutdown, Finds Advanced Forms Vulnerability
Kiteworks briefly urged server shutdowns after finding a severe, apparently unexploited Advanced Forms vulnerability.
Cryptocurrency exchange Bitget Says North Korea-Linked Hackers Stole $351.6 Million
Bitget says suspected North Korea-linked hackers stole $351.6 million from hot and warm wallets.
1
Crypto CEO accuses North Korea of stealing $387 million from Bitget platform
Bitget says hackers stole $387.5 million and its CEO links the theft to North Korean groups.
1