05 October 2026
September's most significant attacks and near-misses landed on privately owned infrastructure: the Houthis took ground on the Bab el-Mandeb, Russian sabotage in Europe moved from deniable to declared, ransomware spread across more groups but kept the same way in, and stolen AI keys became an underground commodity.
Read more →23 October 2026
Less than two days after PHP fixed PHP2Shell, an established cryptomining botnet was already trying to exploit it. Fenestra traced the operation across its sensors, ran the malware in an isolated lab and mapped its infrastructure. Here are the indicators, the techniques and what to do.
Read more →22 October 2026
Two critical flaws in PHP itself let attackers run code on web servers without logging in. Details leaked before the fix, and Fenestra's own sensors recorded a PHP2Shell probe hours before the patch was released. Here's what happened, the indicators we observed and what to do now.
Read more →27 September 2026
Armed police arrested five men after a call about three suspicious vehicles heading towards RAF Fairford. The picture has changed several times since last night. Our threat brief sets out what is confirmed, what is not, and what to watch.
Read more →25 September 2026
Our first sector briefing tracks how energy became a primary target: a two-way energy war between Russia and Ukraine, attacks spreading across the Gulf, ransomware concentrated on oil & gas, and state-linked cyber activity reaching operational systems — with a winter outlook and recommended actions.
Read more →20 September 2026
Security teams can describe how a ransomware crew breaks in using a shared framework. Nothing comparable existed for kidnappings, ambushes, blockades or protest tactics. Fenestra MODUS, our physical TTP framework v0.1 — 10 tactics, 86 techniques — is our first answer.
Read more →15 September 2026
We ran our own geospatial intelligence platform against seven major international business and expat hubs over 30 days. The real incident count near each one shows why a country-level risk score isn't enough for corporate security or close protection teams with people overseas.
Read more →14 September 2026
One of our honeypot sensors caught an attacker rotating through four spoofed AI and search crawler identities to probe for exposed credentials. Here's what the data shows about 'trusted bot' allowlisting.
Read more →10 September 2026
We analysed real data from password-stealing malware, sourced from dark web and underground criminal channels. The numbers change what 'password risk' should actually mean to you.
Read more →09 September 2026
A closer look at how Panoptic's VIP Travel Itinerary feature checks every stop on a route against Fenestra's own live intelligence — illustrated with a real-data worked example across three continents.
Read more →