[ FIELD NOTES ]

The Fraudox blog

Threat research, takedown playbooks, and field notes on phishing, impersonation, fake apps, and scam domains.

Your Attack Surface Is Bigger Than You Think: A Practical Guide to Attack Surface Management
Latest attack-surface

Your Attack Surface Is Bigger Than You Think: A Practical Guide to Attack Surface Management

Attack surface management finds the internet-facing assets you forgot you had, before attackers do. A practical guide to EASM, blind spots and discovery.

June 15, 2026 Read article
What Is CTEM? The Security Framework Gartner Says You Need in 2026
ASM attack-surface

What Is CTEM? The Security Framework Gartner Says You Need in 2026

Continuous threat exposure management (CTEM) is the Gartner framework that replaces point-in-time security. Learn the 5 phases and how to start in 2026.

June 8, 2026 Read
Why Executives Are High-Value Targets — And What to Do About It
Data-Breach Data-Protection

Why Executives Are High-Value Targets — And What to Do About It

Social engineering, credential theft, and AI deepfakes — your C-suite is the #1 attack surface. Here's why attackers target executives and how to protect them.

May 11, 2026 Read
Flawtrack: Malaysia's Top ASM & CTEM Platform
ASM

Flawtrack: Malaysia's Top ASM & CTEM Platform

Discover why Flawtrack, a Malaysian-based cybersecurity firm, surpasses global giants like UpGuard for ASM and CTEM in the Southeast Asian market.

January 14, 2026 Read
CVE-2025-12420: Critical Flaw in ServiceNow AI
CVE-2025-12420 ServiceNow

CVE-2025-12420: Critical Flaw in ServiceNow AI

A critical unauthenticated privilege escalation vulnerability (CVSS 9.3) in the ServiceNow AI Platform allows attackers to impersonate users. Patch now.

January 13, 2026 Read
RondoDox Botnet Weaponizes React2Shell Vulnerability

RondoDox Botnet Weaponizes React2Shell Vulnerability

A persistent 9-month campaign exploits the critical React2Shell flaw, creating the RondoDox IoT botnet for large-scale, AI-driven DDoS attacks.

January 5, 2026 Read
AI Agents Find $4.6M in Smart Contract Exploits
AI in Cybersecurity Blockchain Security

AI Agents Find $4.6M in Smart Contract Exploits

AI agents autonomously found $4.6M in smart contract exploits on our new SCONE-bench. They also discovered novel zero-days, proving profitable hacking is here.

December 26, 2025 Read
SoundCloud Breach Exposes Millions of User Accounts

SoundCloud Breach Exposes Millions of User Accounts

SoundCloud confirms a data breach via an ancillary dashboard, exposing emails and public data for potentially 28 million users. Learn the impact and how to respond.

December 17, 2025 Read
Modern Phishing & the Lookalike Domain Problem

Modern Phishing & the Lookalike Domain Problem

Phishing has evolved into sophisticated brand impersonation. Learn the red flags, incident steps, and how Flawtrack detects and removes phishing domains.

December 16, 2025 Read
Dark Web Monitoring Tools: A Guide for 2026

Dark Web Monitoring Tools: A Guide for 2026

Your 2026 guide to dark web monitoring tools. Discover how to track credentials and ransomware threats as Google's Dark Web Report sunsets.

December 16, 2025 Read