Threat Level: High (active MaaS with ongoing development and real-time credential theft capability) Target Platform:...
Threat Advisories
Commentary – CISA Guidance on O365 Admin Controls Related to the March 2026 Stryker International Incident
April 1, 2026 Subject: Blackswan Cybersecurity Response to Recent CISA Guidance on Microsoft 365 Administrative...
THREAT INTELLIGENCE REPORT LiteLLM Supply Chain Attack (March 24, 2026) March 26, 2026
LiteLLM is a widely used open-source Python library and proxy (95M+ monthly PyPI downloads) that provides a...
THREAT INTELLIGENCE REPORT Windows Remote Desktop Privilege Escalation (CVE-2026-21533) Exploit for Sale March 10, 2026
Threat Level: High (for unpatched systems with RDP exposure) Status: Patch Available (February 2026 Microsoft...
THREAT INTELLIGENCE REPORT Exploitation of Anthropic’s Claude AI March 6, 2026
Threat Advisory: Exploitation of Anthropic's Claude AI via Jailbreaking and Prompt Abuse Threat Level: High Status:...
THREAT INTELLIGENCE REPORT Top Attributable Cyber Threats March 6, 2026
Executive Summary As of March 2026, the cyber threat landscape is dominated by heightened activity from...
THREAT ADVISORY Zero-Day Windows Remote Desktop Services Elevation of Privilege CVE-2026-21533 February 11, 2026
Executive Summary A critical zero-day vulnerability, tracked as CVE-2026-21533, has been identified in Windows Remote...
THREAT ADVISORY 0APT – Ransomware Group February 2, 2026
Executive Summary 0APT (also stylized as 0apt) is a newly emerged ransomware group first publicly detected around January 28, 2026. It...
THREAT ADVISORY – Zero-Day Microsoft Office Security Feature Bypass CVE-2026-21509 – 01/27/2026
Executive Summary Microsoft released an emergency out-of-band security update to address CVE-2026-21509, a...
THREAT ADVISORY – BravoX Ransomware-as-a-Service Group – 01/27/2026
Executive Summary BravoX is a newly identified Ransomware-as-a-Service (RaaS) group that surfaced in January 2026. The...