ZeroFox

"Watch for bad grammar" is phishing advice that no longer works. When every message reads fluently, a person's gut check can't be the first filter anymore. Chapter 3 of The Collapse of Certainty breaks down more:

Ransomware affiliates don’t need to know how to breach a perimeter. Access brokers don’t need to know how to negotiate a ransom. Our new Intelligence brief traces how cybercrime became a service economy and where defenders should focus: ow.ly/uuMq510180m

ZeroFox Signals Research will be hosting two sessions on how fraud operations really work & how we take them down: Oct 20 | Anatomy of a Takedown: From One Post to a Full Disruption Oct 22 | The Next Fraud Frontier: Inside the AI Agent Layer 🔗 ow.ly/s4I850ZY1mx

A polished, persistent campaign used to mean a well-resourced actor, and sloppy work meant an amateur. This is no longer the reality. Polish no longer tells you anything, so how do you triage? 'The Collapse of Certainty' details this and more: ow.ly/2jhf50ZY0MF

For three months, ZeroFox Signals Research has tracked election-adjacent domains ahead of November 3. Here’s what we learned and what campaigns, committees, donation platforms, and civic infrastructure teams can still do ⬇️ ow.ly/lboA50ZXfSr

A strong response brings together cyber analysts and people with on-the-ground experience—connecting digital intelligence with an understanding of how threats unfold in the physical world. "One mission, different lenses," as our VP of Threat Intelligence, Adam, says.

Signals that defenders relied on that don't hold up anymore: > Scale no longer signals effort > Capability no longer reflects skill > Identity no longer guarantees authenticity > Proof no longer confirms reality on its own Learn more: zerofox.com/e-books/how-ai-c…

"I'm just an analyst. Nobody cares about me." Our team hears this all the time, so we'll set the record straight. Watch the clip from our on-demand webinar and the full session is linked here: ow.ly/AfcV50ZTKIJ

Sandworm and a Qilin affiliate both broke into Cisco Firewall Management Center this year, using it to map networks before striking. New coverage cites ZeroFox threat intel on Qilin. Read more: ow.ly/cj9M50ZPSnQ

Cl0p posted 43 organizations to its leak site between August 14 and 19. The shift toward engineering IP marks only the third major operational change ZeroFox has tracked from the group since 2019. Read the report: zerofox.com/intelligence/fla…

Join ZeroFox next week for a live walkthrough of HNTR Executive Protection with our experts. Two sessions available: 🇺🇸 Sept 1, 11 AM EDT 🇪🇺 Sept 1, 1 PM BST ow.ly/lcvU50ZG67n

Russ Bentley, EVP of Product at ZeroFox, joined the Cyber Sidekicks podcast to discuss the rise of AI-driven impersonation and what it means for executive protection. Listen here: ow.ly/HFsW50ZFHH8

75% of executives already have exposed credentials online. That's a running start for anyone building a pattern-of-life profile. Read how digital threats against executives turn physical: ow.ly/GJnb50ZFl0H

Three weeks ago, ZeroFox released HNTR Executive Protection, and the response has told us the timing was right. This blog answers the FAQs we're hearing most. Read more: ow.ly/OTZr50ZC1uU

ZeroFox Threat Intelligence is back with the Underground Economist. 🕵️ Insider access to DoorDash and T-Mobile advertised 🤖 New ransomware pitched as AI-powered and quantum-resistant 🔓 Bolt RaaS launches an affiliate program Read more: ow.ly/syVZ50ZBwsB

Ransomware activity jumped 22% in July, up 78% year-over-year. Manufacturing stayed the top target, while North America's share of attacks kept shrinking as Europe gained ground. Read the full July Ransomware Wrap Up: ow.ly/qqso50Zzun3

Final day at Black Hat. Stop by Booth #2452 for a live look at HNTR and HNTR Executive Protection before the week wraps. Learn more: ow.ly/q89e50Zx7Gb

Black Hat is here. Find ZeroFox at Booth 2452 for a live look at HNTR and HNTR Executive Protection. Still time to book a demo onsite: ow.ly/8p9E50ZnVi4

In a new feature from Techco, ZeroFox VP of Intelligence Adam Darrah breaks down findings from our Q2 2026 Ransomware Wrap-Up, including why North America and manufacturing took the brunt of this quarter's attacks. Read more: ow.ly/u5bE50Zvabw

ZeroFox VP of Intelligence and our Threat Intelligence team were recently featured in the Wall Street Journal Pro. The piece covers how ransomware groups are rebranding under new identities to evade cybersecurity defenses and law enforcement. Read more: ow.ly/xEI650ZrrTT