[ EN ] Times Are Changing: Why Patch Management Alone Will Not Save You

The shifting threat landscape The vulnerability landscape has shifted in ways that most security programs have not caught up with.

[ EN ] Inside a live StealC campaign

During routine threat monitoring, we identified an active StealC loader. At first glance, it appeared to be a typical dropper - a binary responsible for fetching and launching the final stealer payload.

[ EN ] OSINT

Our OSINT investigations over the past year have uncovered an alarming reality: login credentials from your employees are being traded, shared, and weaponized across the dark web and public breach databases.

[ EN ] Phishing Simulation

Our Offensive Security team conducted phishing simulation campaigns across multiple client organizations throughout the year. The results reveal uncomfortable truths about human vulnerability to social engineering—and why technical controls alone aren’t enough.

[ EN ] European Security Assessment Report 2025

Our offensive security department has completed comprehensive penetration testing and vulnerability assessments across numerous European enterprises over the past year.

[ EN ] The Attacker's Active Directory Playbook: How to read it & How to defeat it

This playbook dives deep into critical attack vectors, ranging from Kerberoasting and DCSync to complex ADCS privilege escalation techniques.

LummaStealer: Neviditeľný zlodej vo vašej sieti

IstroSec Managed Defense tím v rámci svojich služieb ponúka službu threat-hunting, vďaka ktorej sme odhalili a včas mitigovali aktívnu kampaň útočníkov.

Umelá inteligencia - AI

Keby som mal jednou vetou opísať AI, tak je to program, ktorý sa snaží simulovať (napodobniť) fungovanie mozgu.

[ EN ] EDR vs XDR

Cybersecurity tools like Endpoint Detection and Response (EDR) and Extended Detection and Response (XDR) are made to assist organizations in detecting and preventing cyber threats.