John Wilson, Senior Fellow, Threat Research at Fortra, authored an article for The AI Journal examining the security implications of OpenAI’s Sora 2. The piece looks at how increasingly realistic AI-generated video changes the threat landscape, particularly around deepfakes, social engineering, and the misuse of personal likenesses. 

Ransomware-as-a-service (RaaS) groups continue to evolve, leveraging initial access brokers (IABs), affiliate programs, and dark web marketplaces to increase the scale and success of their attacks.

In an article for Cybersecurity Insiders, Nick Oram explores how doxing, credential leaks, and PII exposure put executives at risk.

Fortra’s Nick Oram spoke with The Register about the latest ransomware group, Ox Thief, and its aggressive new tactics.

In a recent Forbes article, Nick Oram shares how the evolution of executive security threats now includes dark web exploitation and overlooked mail-based vulnerabilities.

Microsoft's latest Patch Tuesday brings 57 fixes, including six actively exploited zero-days.

In an article for The Daily Upside, Mieng Lim discusses the biggest security gaps businesses face.

Josh Taylor explores Adversarial Cognitive Engineering (ACE) in his latest piece for The CTO Club.

​​Dark Reading highlights Microsoft’s largest security update to date, featuring 159 patches addressing vulnerabilities across various technologies.

​​In a recent article from Infosecurity Magazine, Microsoft’s first Patch Tuesday of 2025 addressed eight zero-day vulnerabilities, three of which were under active exploitation.

Microsoft has confirmed three zero-day vulnerabilities actively targeting Windows 10, 11, and Server 2025.

Microsoft’s final Patch Tuesday updates for 2024 address 72 security flaws, including CVE-2024-49138, an actively exploited privilege escalation vulnerability in the Windows Common Log File System (CLFS) Driver.

​​Tyler Reguly is quoted in TechRepublic discussing Microsoft's December Patch Tuesday.

​​Krebs on Security's latest article highlights Microsoft's December 2024 Patch Tuesday, which addresses over 70 security vulnerabilities, including an actively exploited zero-day flaw in the Windows Common Log File System (CLFS).

Microsoft’s latest Patch Tuesday update addresses several critical vulnerabilities, with experts urging immediate action to protect Windows systems from active cyberattacks.

​​Fortra has discovered a surge in phishing and other cyberattacks on Cloudflare’s trusted platforms.

​​In Forbes' recent coverage of Microsoft’s November 2024 Patch Tuesday updates, Fortra’s Associate Director of Security Research, Tyler Reguly, offered expert insights into the severity of two new vulnerabilities impacting Windows OS users.

​​Fortra’s Suspicious Email Analysis team has observed nearly 200% more phishing and malicious activity on Cloudflare Pages and a 104% increase on Cloudflare Workers this year.

Fortra’s Tyler Reguly shares his insights in Dark Reading on Microsoft’s adoption of the Common Security Advisory Framework (CSAF).

​​Fortra's security research team has identified a novel exploit chain, tracked as CVE-2024-6769, which allows attackers to bypass Windows User Access Control (UAC) and escalate privileges to gain full system control.