[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"vendor:elastic":3},{"vendor":4,"products":15,"links":31,"research":49,"news":102,"iocs":105,"iocs_total":103,"activity":106},{"slug":5,"name":6,"domain":7,"website_url":8,"hq_country":9,"description":10,"logo_path":11,"brand_color":12,"pitch":13,"pitch_source_url":8,"updated_at":14},"elastic","Elastic","elastic.co","https:\u002F\u002Fwww.elastic.co\u002F",null,"Search and analytics company behind Elasticsearch. Elastic Security Labs publishes threat research.","\u002Fvendor-logos\u002Felastic.png","#02bcb7","Elasticsearch: The search database for AI","2026-10-16T13:44:11.824851+00:00",[16],{"slug":17,"name":18,"url":19,"description":20,"pitch":21,"pitch_source_url":19,"controls":22},"elastic-security","Elastic Security","https:\u002F\u002Fwww.elastic.co\u002Fsecurity","SIEM and endpoint security built on Elasticsearch, with open detection rules.","The open agentic security operations platform. SIEM, endpoint security, and native automation included, with AI that shows its work.",[23,27],{"slug":24,"name":25,"problem":26},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",{"slug":28,"name":29,"problem":30},"security-monitoring-siem","Security monitoring (SIEM)","Logs from everywhere end up in one place, with alerts that someone actually sees.",[32,36,40,43,46],{"kind":33,"label":34,"url":35},"research","Elastic Security Labs","https:\u002F\u002Fwww.elastic.co\u002Fsecurity-labs",{"kind":37,"label":38,"url":39},"review","AV-Comparatives EPR test 2026: Elastic","https:\u002F\u002Fwww.av-comparatives.org\u002Fwp-content\u002Fuploads\u002F2026\u002F09\u002FEPR_Elastic_2026.pdf",{"kind":37,"label":41,"url":42},"AV-Comparatives: Business Security Test H1 2026 (March to June)","https:\u002F\u002Fav-comparatives.org\u002Ftests\u002Fbusiness-security-test-2026-march-june\u002F",{"kind":37,"label":44,"url":45},"PeerSpot: Elastic Security user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Felastic-security-reviews",{"kind":37,"label":47,"url":48},"Gartner Peer Insights: Elastic Security user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Felastic-security",{"total":50,"stories":51},25,[52,57,62,67,72,77,82,87,92,97],{"slug":53,"title":54,"published_at":55,"brief":56},"edr-evasion-stack-helps-process-injection-slip-past-defenses-ce08fe","EDR Evasion Stack Helps Process Injection Slip Past Defenses","2026-09-23T21:03:01+00:00","New EDR evasion technique uses process parameter poisoning for code injection.",{"slug":58,"title":59,"published_at":60,"brief":61},"malware-bypasses-browser-checks-to-force-install-chrome-edge-extensions-7eb18c","Malware bypasses browser checks to force install Chrome, Edge extensions","2026-09-16T18:50:53+00:00","KREMLIN malware uses a toolkit to force install malicious Chrome\u002FEdge extensions.",{"slug":63,"title":64,"published_at":65,"brief":66},"kremlin-banking-malware-hijacks-chrome-and-edge-to-steal-credentials-and-session-e6910d","KREMLIN Banking Malware Hijacks Chrome and Edge to Steal Credentials and Session Tokens","2026-09-15T18:54:14+00:00","KREMLIN banking malware targets Brazilian users, stealing credentials via malicious browser extensions.",{"slug":68,"title":69,"published_at":70,"brief":71},"four-revstealer-linked-modules-disable-windows-update-and-defender-to-run-a-cryp-1a8ef3","Four REVSTEALER-Linked Modules Disable Windows Update and Defender to Run a Crypto Miner","2026-09-06T08:34:20+00:00","Four REVSTEALER modules disable Windows Update and Defender to run a crypto miner.",{"slug":73,"title":74,"published_at":75,"brief":76},"fake-coding-tests-deliver-ottercookie-aligned-malware-hidden-in-svg-flag-images-7dc987","Fake Coding Tests Deliver OtterCookie-Aligned Malware Hidden in SVG Flag Images","2026-07-17T13:48:56+00:00","North Korean actors use steganography in SVG images within fake coding tests to deliver OtterCookie malware.",{"slug":78,"title":79,"published_at":80,"brief":81},"new-telepuz-malware-spreads-via-clickfix-to-steal-data-and-run-commands-9a6678","New TELEPUZ Malware Spreads via ClickFix to Steal Data and Run Commands","2026-07-16T12:50:13+00:00","TELEPUZ modular malware spreads via ClickFix social engineering since April 2026.",{"slug":83,"title":84,"published_at":85,"brief":86},"scmbanker-malware-uses-clickfix-lures-to-target-mexican-banking-users-a8c2ea","SCMBANKER Malware Uses ClickFix Lures to Target Mexican Banking Users","2026-07-08T12:52:15+00:00","SCMBANKER malware targets Mexican banks with fake CAPTCHA lures and LLM-generated tools.",{"slug":88,"title":89,"published_at":90,"brief":91},"new-oxloader-loader-uses-malicious-google-ads-to-deliver-castlestealer-dd93fd","New OXLOADER Loader Uses Malicious Google Ads to Deliver CastleStealer","2026-06-22T13:20:12+00:00","New OXLOADER malware loader uses malicious Google Ads to distribute CastleStealer.",{"slug":93,"title":94,"published_at":95,"brief":96},"tclbanker-banking-trojan-targets-financial-platforms-via-whatsapp-and-outlook-wo-71e1d3","TCLBANKER Banking Trojan Targets Financial Platforms via WhatsApp and Outlook Worms","2026-05-08T18:12:00+00:00","TCLBANKER banking trojan targets 59 financial platforms via WhatsApp and Outlook worms.",{"slug":98,"title":99,"published_at":100,"brief":101},"new-tclbanker-malware-self-spreads-over-whatsapp-and-outlook-6dd857","New TCLBanker malware self-spreads over WhatsApp and Outlook","2026-05-07T22:06:52+00:00","TCLBanker banking trojan self-spreads via WhatsApp and Outlook using trojanized Logitech installer.",{"total":103,"stories":104},0,[],[],[107,110,113,116,118,121],{"month":108,"reported":109,"affected":103},"2026-05-01",2,{"month":111,"reported":112,"affected":103},"2026-06-01",1,{"month":114,"reported":115,"affected":103},"2026-07-01",3,{"month":117,"reported":103,"affected":103},"2026-08-01",{"month":119,"reported":120,"affected":103},"2026-09-01",4,{"month":122,"reported":103,"affected":103},"2026-10-01"]