ExtraHop named a leader in the Gartner® Magic Quadrant™ for Network Detection and Response

Search
Get a Demo
Menu iconX icon
  • Platformchevron right
  • Solutionschevron right
  • Modern NDRchevron right
  • Resourceschevron right
  • Companychevron right
User iconSign In
Contact Us

Arrow pointing leftBlog

Angela Wilson

Senior Cyber Threat Intelligence Analyst

Angela Wilson is a Senior Cyber Threat Intelligence Analyst with over a decade of experience in the cybersecurity industry. She focuses on transforming complex threat data into strategic intelligence that enhances organizational resilience and informs proactive defense.

Posts by this author

Anatomy of an Attack

Iranian-Affiliated Actors Target U.S. Critical Infrastructure Through PLCs

August 10, 2026

Explore the anatomy of Iranian-linked cyberattacks targeting U.S. critical infrastructure. Learn how to detect and stop unauthorized PLC manipulation using ExtraHop RevealX network detection and response.

Anatomy of an AttackCyberAv3ngersNetwork Detection and Response
Read articleArrow pointing right

Anatomy of an Attack:

VECT 2.0 Ransomware

July 21, 2026

VECT 2.0 is a data wiper, not ransomware. Discover how this destructive malware irreversibly deletes files and learn critical network-based strategies to defend against it.

CybersecurityAnatomy of an AttackMalwareRansomwareThreat IntelligenceLateral MovementMITRE ATT&CKNetwork Detection and ResponseNDRRevealX
Read articleArrow pointing right

Anatomy of an Attack

UNC6692 and the SNOW Malware Ecosystem

July 7, 2026

UNC6692 uses Microsoft Teams and email-bombing to deploy the modular SNOW malware ecosystem, stealthily bypassing common defenses to compromise domain controllers and exfiltrate data.

Anatomy of an AttackMalwareThreat IntelligenceNetwork Detection and ResponseLateral MovementCloud SecurityMITRE ATT&CKUNC6692SNOW MalwareSocial Engineering
Read articleArrow pointing right

Anatomy of an Attack

The Copy Fail: Linux Kernel Local Privilege Escalation

May 4, 2026

Uncover the "Copy Fail" logic flaw (CVE-2026-31431) that enables instant root access on nearly all major Linux distributions. Learn how this vulnerability bypasses file integrity monitoring and why network-based behavioral analysis is critical for securing containerized and cloud environments.

Cloud SecurityCybersecurityNetwork Detection and ResponseNDRThreat IntelligenceAnatomy of an Attack
Read articleArrow pointing right

The 84% Blind Spot: Why Attackers Love Your 'Trusted' Admin Tools

April 28, 2026

The m odern enterprise security perimeter has morphed into a complex fabric of identity-centric access and administrative protocols. The most significant risk …

Network Detection and ResponseNetwork VisibilityThreat Hunting
Read articleArrow pointing right

The Digital Front of Iranian Cyber Offensive Response

March 9, 2026

Analyze how Iranian threat actors like APT42 and MuddyWater are integrating Generative AI and memory-safe languages into their 2026 cyber offensive. This guide examines the "triple-threat" model of espionage and destructive hacktivism, detailing how ExtraHop RevealX uses protocol fluency and decryption to detect sophisticated backdoors like TAMECAT and CHAR.

NDRSecurity ThreatsRevealX
Read articleArrow pointing right

Exploiting the OpenClaw Agentic Loop

February 16, 2026

Analyze the security risks of the OpenClaw agentic framework and the CVE-2026-25253 "1-click" RCE vulnerability. Discover how autonomous AI assistants create a 24/7 attack surface for credential theft and how network detection and response (NDR) identifies these emerging agentic threats in real time.

AIIdentityMalwareDetections
Read articleArrow pointing right

Experience RevealX NDR for Yourself

Schedule a demo
Contact us