As Kubernetes adoption accelerates, especially for AI workloads, Darktrace extends behavioral security across runtime activity, delivering visibility, detection, response, forensics, and risk context ...

Darktrace researchers investigate CikaBika Bot, a Rust-based remote access trojan delivered through a document-themed lure. The malware uses a Nim loader, PowerShell UAC bypass and DLL search-order ...

Darktrace, a global leader in behavioral security, today announced three appointments to its Executive Leadership Team: Adam Towns as Chief Financial and Operating Officer (CFOO), Mike McGuinness as ...

Connect one-to-one with a Darktrace Subject Matter Expert during re:Invent week to discuss your current security priorities and learn how Darktrace can help you secure your AI agents. Our leaders will ...

MITRE ATT&CK has 191 techniques. Here's how Darktrace helps support detection across the full attack killchain Detailed mapping of Darktrace AI detection capabilities to MITRE ATT&CK techniques, ...

Darktrace cyber analysts are world-class experts in threat intelligence, threat hunting and incident response, and provide 24/7 SOC support to thousands of Darktrace customers around the globe. Inside ...

Tycoon 2FA uses AiTM phishing and legitimate services to bypass MFA. Darktrace AI stopped it, read the blog to learn how Self-Learning AI detects sophisticated threats. In late 2024 and early 2025, ...

Darktrace analysis reveals ZionSiphon, an OT‑focused malware targeting Israeli water treatment and desalination systems. The malware combines privilege escalation, persistence, USB propagation, and ...

Docker is a prime target for malware, with new strains emerging daily. This blog explores a novel campaign showcasing advanced obfuscation and cryptojacking techniques. Out of all the services ...

Chaos malware is increasingly targeting misconfigured cloud deployments, expanding beyond its traditional focus on routers and edge devices. Darktrace’s honeypot networks revealed evolving tactics and ...

Darktrace investigated “PumaBot,” a Go-based Linux botnet targeting IoT devices. It avoids internet-wide scanning, instead using a C2 server to get targets and brute-force SSH credentials. Once inside ...

Air-gapped security measures are not enough for resilience against cyber attacks. Read about how to gain visibility & reduce your cyber vulnerabilities. Darktrace cyber analysts are world-class ...