Whitepapers and Reports

Stay ahead of threats with our in-depth research on malware, ransomware, and emerging vulnerabilities. Equip your organization with the latest insights and tools to safeguard your digital landscape

BeVigil Exposes Mobile App Danger: Over 4 Million Users Globally at Risk from Hardcoded Shopify Tokens

CloudSEK’s BeVigil, the world’s first security search engine for mobile apps, uncovered a critical security flaw in the mobile app industry.

Global Threat Landscape Report 2021-2022

XVigil’s Underground Intelligence module records and reports the ongoing criminal activity from various underground forums. The data collected in 2021 and 2022 contained some very interesting patterns in the activity of threat actors. CloudSEK’s TRIAD was able to identify the following drastic changes in the recorded patterns.

Cyber Threats Targeting Global Banking & Finance Customers

CloudSEK has identified an increase in cyber threats targeting the banking sector in 2022, as compared to the same period in 2021.

Hardcoded Algolia API Keys Could be Exploited by Threat Actors to Steal Millions of Users’ Data

Algolia's API is used by companies to incorporate search, discovery, and recommendations into their voice, mobile, and website applications. It is currently used by over 11,000 companies, including Lacoste, Stripe, Slack, Medium, and Zendesk to manage ~1.5 trillion search queries a year.

How Leaked Twitter API Keys Can be Used to Build a Bot Army

CloudSEK’s Attack Surface Monitoring Platform, uncovered 3207 apps, leaking Twitter API keys, that can be utilized to gain access to or to take over Twitter accounts.

Cybercriminals Exploit Reverse Tunnel Services and URL Shorteners to Launch Large-Scale Phishing Campaigns

In this report, we delve into how threat actors use reverse tunnel services, along with URL shorteners, to orchestrate widespread campaigns, without leaving any traces.