Why Holistic Sourcing Wins: The Numbers Behind the Recorded Future Advantage

Threats don't operate in silos, and neither should your intelligence. This post, the first in a three-part series, breaks down why...

Threats to the 2026 FIFA World Cup

Executive Summary The 2026 FIFA World Cup, which takes place across sixteen host cities in the United States (US), Mexico, and Canada, presents...

Remembering Sir Alex Younger

There are moments when you meet a person who you immediately know will have a formative influence on you — a person you...

Iran Expands Handala Brand to Physical Threats

Executive Summary Iran’s Ministry of Intelligence (MOIS) has likely broadened the use of its “Handala” brand to encompass MOIS’s external physical and influence...

The Vulnerability Flood Is Now a Board Conversation. Here’s How to Lead It.

I've had some version of the same conversation dozens of times since Mythos and Daybreak emerged. CISOs want to know how worried they...

At Mythos Speed: A Defender’s Playbook for the AI Vulnerability Surge in 2026

Key Takeaways Discovery has been commoditized. Frontier AI models like Mythos and GPT 5.5 are making vulnerability discovery cheap, fast, and broadly...

April 2026 CVE Landscape

In April 2026, Insikt Group® identified 37 high-impact vulnerabilities that should be prioritized for remediation, 35 of which had a Very Critical Recorded...

NIST NVD Enrichment Policy Change: Prioritizing Vulnerabilities with Attacker Behavior Signals

As of April 15, 2026, NIST enriches only CVEs that appear in the CISA Known Exploited Vulnerabilities catalog, federal government software, or software...

Beyond Acceleration and Automation: How AI + Intelligence Changes Cyber Defense

Executive Summary Artificial intelligence is often discussed as a tool for automating and accelerating existing cybersecurity workflows. While that framing is accurate, it...

Working in London at the World’s Largest Intelligence Company

Intro There’s a certain energy you can only find at Recorded Future. Take that energy and bring it to London’s “Silicon Roundabout” and...

Latest article

Yarbo Android/iOS Mobile Application and Cloud Infrastructure

View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to obtain hard-coded credentials, gain access to telemetry data, and potentially send operational commands...

Check Point VPN Authentication Bypass Vulnerability

What is the Vulnerability? A critical authentication bypass vulnerability, CVE-2026-50751 (CVSS...

CISA tells agencies to patch smarter, not harder — foreshadowing broader industry practice

Security teams’ patching practices have come under intense pressure over the past year, as active exploitation is up, time-to-exploit windows...