Trusted Threat Intelligence

Continuous Malware Research delivering Early Warning, Actionable Intelligence, and Preemptive Protection against emerging cyber threats Worldwide.

Bugra Gonca LinkedIn
Head of ThreatLabs - Xcitium | Building Xcitium’s Patented Security Engines

My Mission: Ending the "Detection" Gamble For years, the cybersecurity industry sold you a lie called "Detection." Our philosophy is simple yet absolute:

Latest Blogs
Passkey Attacks Bypass MFA Without Breaking Cryptography
  • August 12, 2026
Passkey Attacks Bypass MFA Without Breaking Cryptography

Passkeys were supposed to end this category of attack. The cryptography behind them still works...

Metabase Zero-Day Exploited Before Any Patch Existed
  • August 11, 2026
Metabase Zero-Day Exploited Before Any Patch Existed

This order of operations is all there is to it. There were no patches to slip through the cracks,...

Swiss Federal IT Agency Breach Linked to SharePoint Flaws
  • August 10, 2026
Swiss Federal IT Agency Breach Linked to SharePoint Flaws

What BIT Confirmed Switzerland’s Federal Office for Information Technology and...

Fake Zoom Updates Install ScreenConnect as a Backdoor
  • August 07, 2026
Fake Zoom Updates Install ScreenConnect as a Backdoor

Your antivirus has nothing to flag. The file that just landed on the endpoint is real software,...

Greatness PhaaS Spoofs RingCentral to Hit Microsoft 365
  • August 06, 2026
Greatness PhaaS Spoofs RingCentral to Hit Microsoft 365

A phishing kit called Greatness costs $289 a month. Anyone with a Telegram account and that much...

Flawed N-able Patch Leaves N-central Open to Takeover
  • August 05, 2026
Flawed N-able Patch Leaves N-central Open to Takeover

An incomplete security fix has left thousands of managed service provider servers vulnerable to...

Amgen Cloud Breach Exposes PHI and Corporate Secrets
  • August 04, 2026
Amgen Cloud Breach Exposes PHI and Corporate Secrets

Biology and pharmaceutical technology conglomerate Amgen announced that there had been a security...

Cisco FMC Hardcoded Password Now on CISA’s Urgent List
  • August 01, 2026
Cisco FMC Hardcoded Password Now on CISA’s Urgent List

Cisco built a password into its own firewall management software. Not a default password an admin...

Iran-Linked Hackers Suspected in Minnesota Water Attack
  • July 31, 2026
Iran-Linked Hackers Suspected in Minnesota Water Attack

More than 30 water utilities across Minnesota got hit at once. That’s not a metaphor. A...

Certighost Flaw Lets Low-Privilege Users Fake Your DC
  • July 29, 2026
Certighost Flaw Lets Low-Privilege Users Fake Your DC

Active Directory has one job, decide who gets to act as a domain controller. A flaw patched this...

MedusaHVNC Hides On A Desktop You’ll Never See
  • July 29, 2026
MedusaHVNC Hides On A Desktop You’ll Never See

Picture someone browsing through your own accounts right now. They’re using your saved...

Fastjson Zero-Day Has No Patch, Attackers Already In
  • July 27, 2026
Fastjson Zero-Day Has No Patch, Attackers Already In

A critical flaw in Fastjson, the Java library Alibaba built for parsing JSON, is being actively...

Why Choose Xcitium

Xcitium exists to ensure that people can embrace technology fully, without the shadow of insecurity hanging over them. We’re here to give users the freedom to explore, create, and connect without fear. Whether it’s preventing unknown files from compromising systems or offering innovative approaches to endpoint protection solution, Xcitium’s technology is designed to foster confidence. We believe that by keeping the digital ecosystem secure, we’re directly contributing to human evolution—by enabling people to take full advantage of the tools that define our era.

Book a Demo
Awards & Recognition

Industry-leading certifications and compliance standards