CloudSEK

France-linked underground cyber activity has surged more than 4X in two years. What is driving the rise, and which sectors face the greatest risk?Explore CloudSEK’s latest threat report: cloudsek.com/blog/france-da…

CloudSEK has partnered with Tech Mahindra to deliver AI-driven threat intelligence, attack surface monitoring, and digital risk protection — helping enterprises spot risks earlier, respond faster, and stay regulation-ready. cloudsek.com/ancmt/cloudsek…

Business phone systems are under attack. CloudSEK recorded 1.86M credential attempts and nearly 90,000 suspected toll-fraud calls in 18 days, exposing 277,632 attacker-used passwords. cloudsek.com/blog/the-5060-…

FortiBleed: Hype vs Reality Claims say 21k+ domains breached, but CloudSEK found the truth: ❌ Not a zero-day, just brute-forcing 📉 Only 148 actually compromised 🛡️ Secure your admin interfaces Full analysis & IoCs: cloudsek.com/blog/inside-th…

Phishing is moving beyond stolen passwords. CloudSEK uncovered BlueKit, a PhaaS platform with 87 phishing kits, session theft, automated account takeover and P2P infrastructure built to evade detection. Read the report: cloudsek.com/blog/bluekit-p…

An exposed attacker server revealed the machinery behind Operation Escaneo—a cyber campaign targeting government, financial and critical infrastructure across Mexico and LATAM. CloudSEK maps the tools, exploits and data theft. cloudsek.com/blog/operation…

Fake tickets. Stolen cards. OTP bypass. CloudSEK uncovered a Chinese-origin FIFA World Cup 2026 fraud network using cloned ticket sites, live victim tracking and payment interception. Could you spot the fake? cloudsek.com/blog/chinese-o…

IPL betting scams are going high-tech. CloudSEK found 1,200+ illegal betting domains, AI deepfake promos, mule accounts, compromised govt sites, fake loan apps and ₹4.65 crore in rejected withdrawals from one backend alone. Read: cloudsek.com/blog/illegal-i…

IPL fever is turning into scam season. CloudSEK found 600+ fake IPL ticketing domains and 400+ fake streaming sites targeting fans with fake QR tickets, payment traps and malware built to steal passwords, browser data and crypto wallets. Read: cloudsek.com/blog/hit-wicke…

New supply chain threat uncovered CloudSEK TRIAD found an npm campaign using crypto-javascri, a typosquatted package impersonating crypto-js. It steals npm/GitHub credentials, hijacks maintainer accounts, and uses Tor-based C2 to stay harder to disrupt. cloudsek.com/blog/inside-a-…

What if the cyber reconnaissance came before the missiles? CloudSEK’s latest report explores alleged APT35 activity across GCC targets, from aviation to energy, and why defenders should pay close attention to the region’s cyber risk now. cloudsek.com/blog/kitten-ha…

What developers thought was harmless is now access to AI. CloudSEK found 32 hardcoded Google API keys across 22 Android apps — used by 500M+ users — now exposing access to Gemini AI. No warning. Just risk. cloudsek.com/blog/hardcoded…

That “free gift” link isn’t random. It’s engineered. CloudSEK exposes a global network abusing 300+ brands to profile users and funnel them into scams. Phishing is now targeted, scalable, and industrial. Read: cloudsek.com/blog/large-sca…

CloudSEK Triad has published a detailed investigation into the RAMP cybercrime forum, covering its operations and working from 2021 through its seizure by the FBI in January 2026. Read the full report: cloudsek.com/blog/the-rise-…

Attackers don’t need to build AI anymore. They just need to break it. This report shows how AI pipelines, not models, are becoming the weakest link in modern cyber conflict. Dive in: cloudsek.com/blog/ai-infras…

Iran–US escalation is pushing cyber risk into critical infrastructure. CloudSEK’s new report maps ICS/OT threat actors and shows why disruption may not need advanced exploits. In many cases, internet exposure + weak/default access is enough. cloudsek.com/blog/a-threat-…

CloudSEK x Commvault New integration to tackle exposed credentials on the dark web—bringing real-time credential intelligence into Active Directory security workflows. cloudsek.com/ancmt/commvaul…

Cyber war escalates in the Middle East ⚠️ After Israel–U.S. strikes on Iran, the region faces the largest cyberattack in history: 🔹 150+ hacktivist incidents 🔹 AI‑driven campaigns on Gulf states 🔹 Global risks to energy, finance & IT Read: cloudsek.com/blog/middle-ea…

Denied a US visa in 2012 at 23. Funded with 10 million dollars by a US state at 37. In 2012, Rahul Sasi from Mavelikkara, Kerala, was invited to present his cybersecurity research at the globally respected Black Hat Briefings in the United States. But at the visa interview, authorities questioned his low salary, his lack of a completed degree, and how a BTech dropout could qualify for such a conference. Despite an official invitation, his visa was denied. The rejection hurt. But it sparked a resolve. He would not return to the US until he could create jobs there. Diagnosed with ADHD as a child, Rahul often struggled in structured classrooms. In 2010, he dropped out of engineering to pursue an internship with iSIGHT Partners, later acquired by Google Cloud. He moved to Pune, lived frugally, and poured every spare hour into cybersecurity research. In 2015, he founded CloudSEK. In early 2026, CloudSEK raised 10 million dollars from Connecticut Innovations, marking its return to America, this time as a founder building opportunity. Sometimes rejection is not the end of the story. It is where it begins. @cloudsek #RahulSasi #CloudSEK #StartupIndia #CyberSecurity [Rahul Sasi, CloudSEK, cybersecurity startup]

🇨🇦 Canada targeted by evolving e-crime tactics! From Paytool to smishing, fraud, and malware—CloudSEK tracks rising digital threats coordinated via Telegram and underground forums. 🔍 Stay ahead with our latest threat intel report: cloudsek.com/blog/pivoting-…