Blog

Security research, threat intelligence insights, and product updates.

March 2, 2026

The Life of a Redis Bot: A Nature Documentary

We observed a Redis exploitation bot in its natural habitat: an unprotected instance on port 6379. What followed was a textbook cron injection, captured in full by our honeypot network. INFO recon, 6.5 seconds of stillness, then 25 commands in 11 seconds. A parasitoid wasp in digital form.

security sensors honeypots behaviors primitives research malware persistence redis cron injection redis exploitation

February 22, 2026

Threat Catalog Update — Behaviors Now Show Linked Detection Primitives

Attack behaviors in the SikkerAPI detection catalog now display their underlying primitives as clickable tags. Browse the relationship between high-level attack patterns and the low-level detection rules that compose them.

updates catalog behaviors primitives detection threat intelligence