https://www.reconinfosec.com/articles/ Guides, threat research, and news from Recon InfoSec. en-us https://www.reconinfosec.com/articles/case-study-a-countys-journey-from-chasing-alerts-to-stopping-threats/https://www.reconinfosec.com/articles/case-study-a-countys-journey-from-chasing-alerts-to-stopping-threats/Wed, 10 Jun 2026 12:00:00 GMTExplore how a Texas county transformed its cybersecurity from reactive to proactive, partnering with Recon to enhance security and protect against threats.Case StudiesRecon Team https://www.reconinfosec.com/articles/cross-org-visibility-for-limacharlie/https://www.reconinfosec.com/articles/cross-org-visibility-for-limacharlie/Wed, 03 Jun 2026 12:00:00 GMTDiscover how Recon InfoSec enhances security operations with LimaCharlie, offering cross-org visibility through a Prometheus exporter for unified insights.GuidesBen Webb https://www.reconinfosec.com/articles/whats-actually-hitting-organizations-right-now/https://www.reconinfosec.com/articles/whats-actually-hitting-organizations-right-now/Fri, 08 May 2026 12:00:00 GMTExplore current security threats like ClickFix, identity compromise, and AI risks, and learn how to protect your organization from evolving attacks.InsightsAndrew Cook https://www.reconinfosec.com/articles/iranian-government-affiliated-intrusions-documented-tradecraft/https://www.reconinfosec.com/articles/iranian-government-affiliated-intrusions-documented-tradecraft/Tue, 03 Mar 2026 12:00:00 GMTInsights into Iranian cyber tactics, targeting critical sectors, and defensive measures based on documented tradecraft from CISA, FBI, and NSA reports.InsightsLuke Rusten https://www.reconinfosec.com/articles/clawdhype-making-sense-of-recent-ai-cybersecurity-news/https://www.reconinfosec.com/articles/clawdhype-making-sense-of-recent-ai-cybersecurity-news/Fri, 06 Feb 2026 12:00:00 GMTIs your team using unauthorized AI? Learn how to navigate the security risks of OpenClaw and Moltbook. Get expert AI governance advice and actionable security rules for IT managers to protect your organization's data.InsightsNicholas Lupien https://www.reconinfosec.com/articles/planning-for-the-worst-making-ir-bc-and-dr-plans-work/https://www.reconinfosec.com/articles/planning-for-the-worst-making-ir-bc-and-dr-plans-work/Fri, 09 Jan 2026 12:00:00 GMTLearn how to create effective Incident Response, Business Continuity, and Disaster Recovery plans to protect your organization from ransomware and other cyber incidents.InsightsMacie Thompson https://www.reconinfosec.com/articles/case-study-from-running-blind-to-active-defense/https://www.reconinfosec.com/articles/case-study-from-running-blind-to-active-defense/Thu, 04 Dec 2025 12:00:00 GMTDiscover how a mid-size energy infrastructure company transformed its security posture, achieving a 95%+ security score and peace of mind through strategic partnerships and active defense.Case StudiesRecon Team https://www.reconinfosec.com/articles/a-pragmatic-approach-to-vulnerability-management/https://www.reconinfosec.com/articles/a-pragmatic-approach-to-vulnerability-management/Mon, 10 Nov 2025 12:00:00 GMTIs your vulnerability data just noise? Is traditional CVSS scoring failing to measure real-world risk? Discover a pragmatic approach for filtering, prioritizing, and gaining value.InsightsBen Webb https://www.reconinfosec.com/articles/closing-the-loop-how-recon-infosec-uses-pentests/https://www.reconinfosec.com/articles/closing-the-loop-how-recon-infosec-uses-pentests/Wed, 08 Oct 2025 12:00:00 GMTRecon InfoSec treats every pentest as a real attack, using them to enhance detection logic, refine procedures, and strengthen overall SOC operations.InsightsAndrew Cook https://www.reconinfosec.com/articles/introducing-recon-labs/https://www.reconinfosec.com/articles/introducing-recon-labs/Mon, 22 Sep 2025 12:00:00 GMTIntroducing Recon Labs: Empowering security teams with AI to enhance investigations, automate workflows, and reduce false positives, transforming how professionals combat evolving threats.NewsNicholas Lupien https://www.reconinfosec.com/articles/microsoft-teams-social-engineering-a-ransomware-attack-vector/https://www.reconinfosec.com/articles/microsoft-teams-social-engineering-a-ransomware-attack-vector/Thu, 18 Sep 2025 12:00:00 GMTMicrosoft Teams is being abused in ransomware campaigns to gain VPN access. Learn the tactics and how to safeguard your organization.InsightsAndrew Cook https://www.reconinfosec.com/articles/mastering-threat-hunting-operations/https://www.reconinfosec.com/articles/mastering-threat-hunting-operations/Tue, 12 Aug 2025 12:00:00 GMTExplore Recon InfoSec's proactive threat hunting methodology. Learn how our team uses threat intelligence, hypothesis-driven investigations, & tools to find and mitigate hidden threats before they cause damage.InsightsWatson Brown https://www.reconinfosec.com/articles/zoom-events-phishing/https://www.reconinfosec.com/articles/zoom-events-phishing/Fri, 20 Jun 2025 12:00:00 GMTPhishing campaign exploits Zoom Events infrastructure to deliver credential phishing and malicious downloads, bypassing email security filters. Learn how to protect your organization.InsightsMichael Robertson https://www.reconinfosec.com/articles/detecting-fake-captcha-campaigns/https://www.reconinfosec.com/articles/detecting-fake-captcha-campaigns/Mon, 21 Apr 2025 12:00:00 GMTDiscover how cybercriminals trick users with fake CAPTCHA pages to deploy malware and learn effective detection techniques to safeguard your systems against these evolving threats.GuidesLuke Rusten https://www.reconinfosec.com/articles/sigmahq-essentials-building-robust-detection-capabilities-part-2/https://www.reconinfosec.com/articles/sigmahq-essentials-building-robust-detection-capabilities-part-2/Tue, 01 Oct 2024 12:00:00 GMTThe blog post provides a detailed guide on creating SigmaHQ detections. It explains the process of selecting relevant log data and translating it into a Sigma detection rule, emphasizing the importance of customized detections for better security monitoring.GuidesWatson Brown https://www.reconinfosec.com/articles/effective-threat-hunting/https://www.reconinfosec.com/articles/effective-threat-hunting/Fri, 27 Sep 2024 12:00:00 GMTLearn effective threat hunting strategies from Luke Rusten's insights on prioritization, continuous improvement, and practical techniques to enhance your organization's security operations.GuidesLuke Rusten https://www.reconinfosec.com/articles/sigmahq-essentials-building-robust-detection-capabilities/https://www.reconinfosec.com/articles/sigmahq-essentials-building-robust-detection-capabilities/Mon, 09 Sep 2024 12:00:00 GMTThis series of blog posts should cover the basics to get you started. What is sigmaHQ? How are detections written? How can detection engineering be integrated into your tools/soc/security team? And a few other fancy uses you can get out of this free and amazing repository of detections.GuidesWatson Brown https://www.reconinfosec.com/articles/your-ransomware-incident-is-predictable/https://www.reconinfosec.com/articles/your-ransomware-incident-is-predictable/Fri, 23 Aug 2024 12:00:00 GMTExplore the predictable patterns of ransomware attacks and learn how to fortify your defenses with this insightful blog. Discover the common entry points, defense strategies, and recovery plans to keep your organization one step ahead of cybercriminals.InsightsAndrew Cook https://www.reconinfosec.com/articles/advanced-email-protection-detection-techniques-in-action/https://www.reconinfosec.com/articles/advanced-email-protection-detection-techniques-in-action/Fri, 21 Jun 2024 12:00:00 GMTTake a deeper dive into Advanced Email Protection from Recon InfoSec.GuidesMacie Thompson https://www.reconinfosec.com/articles/advanced-email-protection-to-be-thrilled-about/https://www.reconinfosec.com/articles/advanced-email-protection-to-be-thrilled-about/Wed, 05 Jun 2024 12:00:00 GMTRecon Infosec's Advanced Email Protection (AEP) service represents a significant leap forward in fortifying organizations against the pervasive threat of email-based attacks. With AEP, organizations can ensure that their digital assets remain secure.NewsMacie Thompson