Industry Leading
Threat Intelligence
Agentic Defense for Every Industry
Podcast
ShadowTalk: Powered by ReliaQuest
Weekly breakdowns of the latest threats and top cybersecurity stories from our threat research experts.
Explore All ReliaQuest Threat Research
233 resources
Ransomware and Cyber Extortion in Q3 2026
Ransomware and Cyber Extortion in Q3 2026. Newly observed ransomware groups drove 93% of Q3 2026's leak-site growth — a shift that leaves defenders tracking last quarter's leaders exposed.
Now and Next: Cyber Threats to Hospitality and Recreation
Now and Next: Cyber Threats to Hospitality and Recreation
Threat Landscape Report: Finance & Insurance Sector
Threat Landscape Report: Finance & Insurance Sector
Threat Landscape Report: Health Care and Social Assistance
Threat Landscape Report: Health Care and Social Assistance
Threat Landscape Report: Professional, Scientific, and Technical Services
Threat Landscape Report: Professional, Scientific, and Technical Services
Threat Landscape Report: Uncovering Critical Cyber Threats to Retail Trade
Threat Landscape Report: Uncovering Critical Cyber Threats to Retail Trade
Residential Proxies Mask Social-Engineering Attacks
Residential Proxies Mask Social-Engineering Attacks. Residential proxies let malicious sign-ins blend in and look routine, instead of raising red flags like impossible travel or unexpected locations.
PHP2Shell: Responding to Critical PHP Vulnerabilities
PHP2Shell: Responding to Critical PHP Vulnerabilities. PHP2Shell (CVE-2026-109618 and CVE-2026-109619) lets unauthenticated attackers run code on PHP web servers. PHP released fixes on October 21, 2026.
ReliaQuest Recognized as a Strong Performer in The Forrester Wave™: External Threat Intelligence Service Providers, Q3 2026
ReliaQuest Recognized as a Strong Performer in The Forrester Wave™: External Threat Intelligence Service Providers, Q3 2026. See Why ReliaQuest was named a Strong Performer.
One Blank Field Bypasses Direct Send Control
One Blank Field Bypasses Direct Send Control. ReliaQuest observed that an empty Simple Mail Transfer Protocol (SMTP) envelope sender can bypass RejectDirectSend, a Microsoft 365 control in Exchange Online intended to block unauthenticated Direct Send emails from an organization’s domain.
Gryxa: The AI-Built Toolkit That Watches How You Remove It
Gryxa: The AI-Built Toolkit That Watches How You Remove It. ReliaQuest identified a new toolkit, "Gryxa," highly likely used by a financially motivated threat actor to run an initial-access operation.
A Social Engineering Attempt Against ReliaQuest: What We Found
A Social Engineering Attempt Against ReliaQuest: What We Found. On August 22, 2026, ReliaQuest was the target of a social engineering attempt. Here's the full playbook of what happened and how we shut it down.
Learn How GreyMatter Agentic AI Scales Your Security Operations
GreyMatter is an agentic AI security operations platform with 6 agentic Teammates that use hundreds of agent skills and AI tools to work toward an objective, not just tasks.
