Image I’m under attack
Contact us
Image I’m under attack
CONTACT US
Image
Topics
Cloud
Incident Response
OT Security
Malware
Vulnerabilities
Attack Techniques
Detection
State Actors
Research
Forensics
Email
Cyber Crime
Ransomware
Mitigation and Response
Managed Detection and Response
Tabletop War Games
Threat Intelligence
Security Mitigation
VMware Security
Artificial intelligence (AI)
Threat Research
Image
Blog Threat Intelligence Threat Research
When Technical Controls Work, Attackers Change the Rules: How a Failed Intrusion Became a Data Exposure Incident
Discover how a failed intrusion quickly became a data exposure incident after a threat actor pivoted from blocked technical attacks to social engineering, and why layered defenses, rapid response, and operational safeguards are essential when attackers change the rules.
Sygnia Team
12.07.2026
6 min
Image
Blog Ransomware Threat Intelligence Threat Research
Ransomware Incident Response in 2026: What Has Changed and What CISOs Are Still Getting Wrong
Learn what has changed in ransomware incident response in 2026, and what CISOs are still getting wrong
Sygnia Team
12.07.2026
13 min
Image
Blog Threat Intelligence Threat Research
Inside an AI-Assisted Cloud Attack: Familiar Techniques at Unfamiliar Speed
Learn how a threat actor used AI to accelerate a cloud attack from initial access to broad compromise in just 72 hours
Sergey Kozyrev, Enterprise Security Team Lead
Eldar Goren, Incident Response Team Leader
Arsela Rama, Enterprise Security Team Lead
Liad Minster, Incident Response Manager
Asaf Saada, Incident Response Manager
29.06.2026
21 min
Image
Blog Threat Intelligence Threat Research
Why 73% of Organizations Still Aren’t Ready for a Cyberattack
Explore lessons from Sygnia's 2026 CISO Survey on Incident Response Readiness.
Rena Stern, Director Solutions Marketing, Sygnia
28.06.2026
7 min
Image
Blog Threat Intelligence Threat Research
Crypto Security in 2026: Why Transaction Authority Is the Most Important Security Control
Most crypto breaches occur when attackers reach transaction authority. Learn how to secure identities, infrastructure, and authorization systems.
Rena Stern, Director Solutions Marketing, Sygnia
18.06.2026
4 min
Image
Blog Attack Techniques Cyber Crime Detection Ransomware
Velvet Ant’s Operation Highland: How a China-Nexus Actor Infiltrated an Internal Network Undetected
Discover the detailed forensic investigation by Sygnia into the sophisticated cyber attack by Velvet Ant on a major organization.
Sygnia Team
8.06.2026
21 min
Image
Blog Threat Intelligence Threat Research
Incident Response Metrics That Actually Matter to Boards (And the Ones That Don’t)
Learn which incident response metrics boards actually need to make decisions, and which ones create false confidence.
Sygnia Team
27.05.2026
14 min
Image
Blog Threat Intelligence Threat Research
8 Incident Response Plan Mistakes That Lead to Failures
Learn the 8 critical incident response mistakes that leave 73% of organizations unprepared, and how to close the execution gaps that turn manageable cyber incidents into full-scale business crises.
Sygnia Team
12.05.2026
12 min
Image
Blog Mitigation and Response
Cyber Risk and Private Equity: How Threat Intelligence Protects Large Investment Portfolios
Explore how leading PE firms are shifting from reactive cyber incident response to continuous portfolio-wide risk visibility, using threat intelligence to protect enterprise value, reduce deal friction, and prevent a single breach from cascading across the entire portfolio.
Kobi Shetret, VP, Corporate Development
Shai Goel, Manager, Corporate Development
12.05.2026
9 min
Image
Blog Incident Response Threat Intelligence Threat Research
How to Leverage an Incident Response Retainer
Discover how to get the most from an incident response retainer, and what sets apart a provider that can respond effectively when your organization is under real pressure.
Sygnia Team
24.03.2026
12 min
Image
Blog Mitigation and Response
One Commit Away from Theft: When Supply Chain Attacks Hit the Crypto Ecosystem
Explore patterns observed across real-world crypto incidents and controlled adversary exercises, along with a containment-first defense roadmap built on lessons learned from those cases.
Omer Kidron, Enterprise Security Expert
Matan Naftali, Enterprise Security Consultant
17.03.2026
10 min
Image
Blog Threat Intelligence Threat Research
Exfiltration in Plain Sight: SafePay’s OneDrive Play
Discover how SafePay’s rapid, high-pressure ransomware campaigns unfold, and what Sygnia learned while investigating a real-world double extortion attack that put a global organization to the test.
Sygnia Team
10.03.2026
8 min
Solutions
Image
Blog Threat Intelligence Threat Research
Incident Response in the AI Threat Era: What Boards Must Re-Evaluate in 2026
Explore how AI-driven cyber threats are reshaping board-level risk decisions and what executives must re-evaluate for incident response in 2026.
Sygnia Team
8.03.2026
10 min
Image
Blog Threat Intelligence Threat Research
What 2025’s Major Cyber Incidents Taught Executives About Incident Response Readiness
Discover what Threat Detection, Investigation & Response (TDIR) means for modern enterprises, including frameworks, risks, and executive-level decision insights.
Sygnia Team
15.02.2026
11 min
Image
Blog OT Security
When Expectations Meet Reality: The Anatomy of Cyber Incidents Affecting OT Organizations
Real world incident response experience shows that many attacks against OT centric organizations unfold differently than expected. There are several key reasons why reality diverges from initial assumptions, and understanding these gaps offers critical lessons for strengthening operational resilience.
Tamir Margalit, Director of ICS/OT Security
Ofir Sandovski, Incident Response Manager
8.02.2026
8 min
Image
Blog Cyber Crime Incident Response Malware Ransomware
Inside a Sophisticated Recovery Scam Network: Evidence from a Live Investigation into Legal Services Impersonation
A live investigation into a global recovery scam network exploiting business impersonation, fake websites, and repeat victimization across industries.
Alon Eliassaf, Ronen Regev, Amir Sadon
5.02.2026
15 min
Image
Blog Threat Intelligence
What is Threat Detection, Investigation & Response (TDIR)
Discover what Threat Detection, Investigation & Response (TDIR) means for modern enterprises, including frameworks, risks, and executive-level decision insights.
Sygnia Team
14.12.2025
13 min
Image
Blog Incident Response
Incident Response Strategies for Technology and SaaS Companies
Executive-level incident response strategies for Technology and SaaS companies to strengthen resilience, reduce business impact, and accelerate recovery.
Sygnia Team
14.12.2025
10 min
subsctibe decor
Want to get in touch?
Contact us