Trusted Threat Intelligence

Continuous Malware Research delivering Early Warning, Actionable Intelligence, and Preemptive Protection against emerging cyber threats Worldwide.

Bugra Gonca LinkedIn
Head of ThreatLabs - Xcitium | Building Xcitium’s Patented Security Engines

My Mission: Ending the "Detection" Gamble For years, the cybersecurity industry sold you a lie called "Detection." Our philosophy is simple yet absolute:

Latest Blogs
Custom GPT ClickFix Attacks Hide Behind Real ChatGPT
  • September 30, 2026
Custom GPT ClickFix Attacks Hide Behind Real ChatGPT

Attackers employed custom GPTs through the legitimate ChatGPT website to lure visitors into a...

Lunex Stealer Uses an AMD Driver to Leave EDR Running Blind
  • September 30, 2026
Lunex Stealer Uses an AMD Driver to Leave EDR Running Blind

Attackers altered legitimate Ukrainian business websites so that visitors saw a fake Cloudflare...

A Fake Movie File Installs MovieReaper on Windows PCs
  • September 28, 2026
A Fake Movie File Installs MovieReaper on Windows PCs

A publicly available archive containing torrent files was altered to make magnet links provide some...

AI Agents Stole 600,000 Cards for $25 a Company
  • September 25, 2026
AI Agents Stole 600,000 Cards for $25 a Company

The attacker compromised over 600,000 unused credit card records from two organizations and...

DarkMe RAT Swapped Its Zero-Days For A Fake PNG
  • September 24, 2026
DarkMe RAT Swapped Its Zero-Days For A Fake PNG

In early 2024, DarkMe reached its victims through a zero-day in Microsoft Defender SmartScreen....

SharePoint’s Spoofing Bug Is Really Code Execution
  • September 23, 2026
SharePoint’s Spoofing Bug Is Really Code Execution

Two CVE listings cover CVE-2026-65660. According to the security advisory from Microsoft, the...

Gyazo: Command Execution Exposed 490M Records
  • September 22, 2026
Gyazo: Command Execution Exposed 490M Records

A hacker managed to exploit the vulnerability within Gyazo’s picture uploading server on...

npm Supply Chain Malware Hides in Runtime Code
  • September 21, 2026
npm Supply Chain Malware Hides in Runtime Code

The npm ecosystem spent years treating the install script as the danger. In July 2026 that...

China-Linked Hackers Backdoored PCs via Sogou Keyboard App
  • September 18, 2026
China-Linked Hackers Backdoored PCs via Sogou Keyboard App

A China-linked group called UNC3569 exploited the Windows operating system via Sogou Input...

$782M Ransom After Revolut Answered a Fake Email
  • September 16, 2026
$782M Ransom After Revolut Answered a Fake Email

Criminals sent Revolut a request for customer information from a real government agency’s...

Russian Hackers Used AI to Rebuild Malware After Detection
  • September 15, 2026
Russian Hackers Used AI to Rebuild Malware After Detection

An AI agent detected the infection, modified the malware, and deployed it. The iteration process...

Snickers Turned Prompt Injection Into a Marketing Campaign
  • September 14, 2026
Snickers Turned Prompt Injection Into a Marketing Campaign

Lately, Mars distributed a set of text and instructed people to paste it in ChatGPT. In other...

Why Choose Xcitium

Xcitium exists to ensure that people can embrace technology fully, without the shadow of insecurity hanging over them. We’re here to give users the freedom to explore, create, and connect without fear. Whether it’s preventing unknown files from compromising systems or offering innovative approaches to endpoint protection solution, Xcitium’s technology is designed to foster confidence. We believe that by keeping the digital ecosystem secure, we’re directly contributing to human evolution—by enabling people to take full advantage of the tools that define our era.

Book a Demo
Awards & Recognition

Industry-leading certifications and compliance standards