Security research, threat intelligence insights, and product updates.
We added three new alert types to the dashboard. Set up alerts for your IP addresses, service account usernames, or email addresses — get an hourly digest when they show up in attacks on our honeypot network.
Our honeypot network captured an SSH attacker methodically appraising what it believed was a high-value GPU workstation. 55 commands in 100 seconds: hardware benchmarks, credential harvesting, and a paranoid honeypot detection sweep across six frameworks. It checked for Cowrie, Kippo, Dionaea, and more. Every check came back clean. The machine doesn't exist.