Pulsedive Threat Intelligence Read. Learn. Defend.
Pulsedive Blog Read. Learn. Defend.
- Inside The Com: Understanding the Ecosystem Behind Scattered Spider, LAPSUS$, ShinyHunters, and FALCON
by Pulsedive Threat Research on September 29, 2026 at 3:28 pmAnalysis and mitigations for “The Com”, a decentralized, fluid ecosystem of cybercriminals known to constantly rebrand and run shared playbooks.
- Blind Spots in the Build: A Supply Chain & SBOM Security Primer
by Pulsedive Threat Research on July 16, 2026 at 4:05 pmUnderstand the growing threat of software supply chain compromises and learn how leveraging a Software Bill of Materials (SBOM) alongside Build Provenance can remove vulnerability blind spots and secure applications.
- SolyxImmortal – Analysis of a Python-based Information Stealer
by Pulsedive Threat Research on May 27, 2026 at 5:04 pmGet a detailed technical breakdown with execution flow of SolyxImmortal, a Python-based information stealer.
- Analyzing Iranian Tradecraft: Leveraging Loader Scripts and Telegram for C2
by Pulsedive Threat Research on May 4, 2026 at 4:16 pmA technical deep dive into recent loader scripts used by Iranian threat actors, revealing initial access and defense evasion tactics used in MOIS-aligned cyber operations.
- Update: Introducing Pulsedive Docs
by PulsediveDocs on March 30, 2026 at 7:10 amPulsedive now has a dedicated documentation site with a complete API reference, live playgrounds, and MCP server support for AI-assisted development.
- The Operations of the Swarm: Inside the Complex World of Mirai-Based Botnets
by Pulsedive Threat Research on March 24, 2026 at 5:58 pmDive into a technical primer on the modern botnet landscape – including the evolution of Mirai-based botnets, capabilities, and recent enforcement actions.
- TAMECAT – Analysis of an Iranian PowerShell-Based Backdoor
by Pulsedive Threat Research on January 29, 2026 at 1:45 pmA detailed technical analysis of TAMECAT, a PowerShell-based backdoor used by the Iranian state-sponsored APT42 in espionage operations.
- 2025 In Review
by Grace Chi on December 18, 2025 at 4:26 pmA review of the 2025 across the threat landscape and at Pulsedive.
- Return of Shai-Hulud: The “Second Coming” of the NPM Supply Chain Compromise
by Pulsedive Threat Research on November 26, 2025 at 12:45 pmThis blog walks through the malicious code present in the second iteration of the Shai-Hulud compromise.
- Black Friday 2025
by Grace Chi on November 25, 2025 at 6:35 pmFor Black Friday 2025, get 30% off Pulsedive Pro. Valid through December 1, 2025.
- Dissecting the Infection Chain: Technical Analysis of the Kimsuky JavaScript Dropper
by Pulsedive Threat Research on November 5, 2025 at 2:45 pmThis blog analyzes a Kimsuky sample, how the dropper downloads additional stages, and network traffic observed within the infection chain.
- Share Your Feedback! 2025 Research Blog Survey
by Grace Chi on October 31, 2025 at 12:52 amWe’re looking for feedback from the community – what threat research content do you want more of?
- NPM Compromise: The Wrath of the Shai-Hulud Supply Chain Attack
by Pulsedive Threat Research on September 25, 2025 at 3:28 pmA walkthrough of two major NPM supply chain compromises in September 2025: the Shai-Hulud worm and cryptocurrency wallet hijacking.
- Thorium 101: Inside CISA’s Open Source Malware Analysis Platform
by Pulsedive Threat Research on September 10, 2025 at 12:15 pmCISA’s new open-source malware analysis tool Thorium is designed for customization, safety, and real-world security team workflows. This post introduces its core features and how to get started.
- Unpacking KiwiStealer: Diving into BITTER APT’s Malware for File Exfiltration
by Pulsedive Threat Research on August 13, 2025 at 4:34 pmLearn about KiwiStealer capabilities and malware analysis of how it exfiltrates data via HTTP POST requests.
