DarkInvader combines cutting edge automation with an expert human team that are constantly searching hidden areas of the internet to keep you safe.
Joined September 2021
- Tweets 438
- Following 4
- Followers 111
- Likes 3
363 Photos and videos
Pinned Tweet
10 Jul 2023
Our Co-Founder, Robin Hill tackled the brilliant @yorkshirepost ‘On the Spot’ Q&A and you can see the results here:
app.yorkshirepost.co.uk/t/st…
#TheYP #YorkshireBusiness #CyberSecurity
1
230
Jun 12
13,000 fake FIFA websites.
Attackers aren't just targeting systems. They're targeting trust.
Read what brands can learn from the World Cup scam wave: buff.ly/c74hZx8
14
Jun 11
No patch. No workaround. Already exploited.
The Cisco SD-WAN zero-day shows why visibility and monitoring matter when fixes don't exist.
Read the full blog: buff.ly/bAJ3gkw
5
The NCSC is warning organisations to prepare for a vulnerability patch wave.
But you can't patch what you can't see.
Read more: buff.ly/sWqdxq9
6
12 hours to patch.
India’s CERT-In blueprint shows where vulnerability management is heading: faster, stricter, and more exposure-led.
CVSS alone is no longer enough when attackers move in hours.
Read the full blog: buff.ly/8qgCmEW
12
The phishing email is not the only delivery route anymore.
With ChatGPhish, the page itself can become the payload.
AI summaries feel trusted, helpful and safe. That is exactly why attackers want to exploit them.
Read the full blog: buff.ly/OFl7NpZ
5
17 million routers.
One Dutch raid.
A quiet cybercrime economy built on disguising malicious activity as ordinary Wi-Fi traffic.
Your router may not be the target. It may be the mask.
Read the full blog: buff.ly/LClqhg0
7
An auth bypass on an internet-facing VPN is not just another CVE.
CVE-2026-0257 shows why exposure context matters more than the score alone.
Patch, yes. But first, know whether your configuration is actually exposed.
Read the full blog: buff.ly/huVM31Z
105
npm shut one door.
TrapDoor found another through AI assistants.
Our latest blog explores how AI assistants are becoming a new attack surface organisations cannot ignore.
Read the full blog here: buff.ly/YT9LRRD
7
May 29
X
18 minutes was enough.
The recent GitHub breach shows how quickly credential-based attacks can compromise trusted software platforms.
Our latest blog explores what happened and how organisations can strengthen security.
Read the full blog : buff.ly/zqaFkkS
26
May 28
X
5,561 GitHub repositories compromised in six hours.
The Megalodon attack shows how infostealer logs.
Our latest blog breaks down what happened and how organisations can reduce exposure.
Read the full blog here: buff.ly/gc9mTjP
35
May 27
Most organisations do not have complete visibility of their external attack surface.
DarkInvader provides free access and insights into your internet-facing footprint, helping organisations understand what attackers can already see.
Find out more: buff.ly/NMTYBA6
5
May 26
48 hours after the patch release, attackers were already exploiting CVE-2026-9082 targeting Drupal sites.
Once patches become public, threat actors can quickly reverse engineer vulnerabilities and automate attacks at scale.
full blog: buff.ly/2nLyisy
62
May 25
Attackers just used AI to build a zero-day 2FA bypass, then weaponised it at scale.
Not targeted. Mass exploitation.
When exploit development speeds up, your exposure window has to shrink.
Read the full blog here: buff.ly/cD2q5Qd
13
May 22
Ticket closed does not mean risk closed.
Most remediation programs never actually verify the fix is live, effective, and still holding.
The only real test is from the outside, looking in.
Read the full blog here: buff.ly/mTOe34I
4
May 20
Most organisations think they know their attack surface.
Then they watch it for 45 days.
Forgotten subdomains, shadow IT, exposed staging environments. The footprint is always bigger than the inventory.
Read the full blog here: buff.ly/opEUOyn
4
May 18
Phishing has evolved.
Smishing attacks through SMS and messaging apps are becoming increasingly effective as organisations move further into mobile-first environments.
Our latest blog explores how EASM helps organisations detect exposure.
Full blog : buff.ly/9rORDta
15
May 15
Cybersecurity is shifting from reactive to proactive.
By 2026, External Attack Surface Management (EASM) will play a major role in helping organisations detect threats before attackers exploit them.
Read the full blog here:
buff.ly/B4eHEd5
24
May 13
GlassWorm is back, hiding in malicious VS Code extensions.
Developer machines hold cloud creds, source code, and production access. EDR misses it. Scanners miss it.
Your attack surface just expanded.
Read more here: buff.ly/l4ojJg4
29
May 11
Most exposure management platforms look identical on paper.
The real differences only show up after you've signed.
5 red flags most buyers miss when evaluating an EASM vendor.
Read more here: buff.ly/ZB4FPxF
7
How long does it take your team to actually understand a new EASM finding?
For most teams the honest answer is: too long.
Nyx scales senior analyst thinking across every risk on every asset.
Read more here: buff.ly/ekVJD0C
5