Threat Research

Stay secure. Expert analysis on emerging cyber threats, ransomware evolution, and actionable defense strategies.

Threat Research Blog
Mythos Is On The Horizon. AI Exploits Are Already At The Gates.
Mythos Is On The Horizon. AI Exploits Are Already At The Gates.
Discover how low-cost, commoditized AI tools—not just frontier models like Mythos—are already exploiting your known security vulnerabilities at machine speed.
Nihar Deshpande
May 26, 2026
Threat Research Blog
Identity as a Weapon: How Handala Used Global Admin Rights to Wipe Stryker
Iran-linked Handala group used identity hijack to launch a large-scale wiper attack on Stryker's Microsoft cloud, causing global disruption and data loss.
Vishal Dodke
April 02, 2026
Threat Research Blog
Weaponizing Trust: How BYOVD Tactics Silently Bypass EDR Defenses to Exfiltrate and Encrypt Data
Two active ransomware groups have refined a kernel-level evasion technique (BYOVD - Bring Your Own Vulnerable Driver) that systematically disables over 300 endp...
Nihar Deshpande
April 23, 2026
Threat Research Blog
Why Your Data Is Still at Risk — Even If You Have an XDR: The 2025 Ransomware Reality Check
Today’s ransomware groups are not only capable of bypassing primary security, they are built for it. Their entire operational playbook revolves around identifyi...
Nihar Deshpande
January 08, 2026
Threat Research Blog
Cyber Resilience in Healthcare: Going Beyond Primary Security Tools
Ransomware and sophisticated phishing attacks continue to cripple healthcare operations, jeopardizing patient safety and exposing vast amounts of Protected Heal...
Vishal Dodke
January 08, 2026
Explore ReconX Labs

Druva’s dedicated security research and threat intelligence unit to advance enterprise cyber resilience, specifically focusing on ransomware preparedness and post-breach recovery. 

Rather than focusing solely on perimeter defense, ReconX Labs tracks evolving attacker behaviors, builds adversary profiles, and creates actionable indicators of compromise (IOCs) — to help you automate response and recovery in the event of an attack.

Visit the Page

View All Blogs