Intelligence analysis. No filler.
Research, methodology, and threat analysis from the ClairSec team. Written for security practitioners and the executives who rely on them.
Recent analysis
The ASOS Incident: How Social Engineering Turned a Stolen Login Into a Business Risk
An employee login obtained by impersonation opened third-party platforms. What is confirmed, what is claimed, and five measures to prioritize.
Ransomware and Data-Theft Claims in the Maghreb: Q1–Q3 2026
20 claims from 11 groups, 13 of them in Morocco. The larger story sits on forums and Telegram: 129 posts across the five countries, mostly government and consumer data.
Ransomware and Data-Theft Claims in Türkiye: Q1–Q3 2026
79 claims from 23 groups. Qilin made 19%, manufacturing is 39% of the list, and one new brand posted eight well-known names in a day.
Ransomware and Data-Theft Claims in France: Q1–Q3 2026
185 claims from 42 groups. Qilin and The Gentlemen made 41%, small firms and 12 local authorities fill the list, and 19 of the groups also work the Gulf.
Ransomware and Data-Theft Claims in Saudi Arabia: Q1–Q3 2026
Seventeen claims, ten groups, no dominant operator. The threat runs through the energy supply chain and the family groups around the Kingdom's largest programs.
Ransomware and Data-Theft Claims in the UAE: Q1–Q3 2026
Forty-five claims from twenty-one groups. Construction, industry, and family groups lead, with an aviation cluster and a war-driven stream alongside.
Ransomware and Data-Theft Claims in Qatar: Q1–Q3 2026
Five claims from four groups, four in one burst. A quiet leak-site record, and forum listings that offer access to major banks.
Ransomware and Data-Theft Claims in Kuwait: Q1–Q3 2026
Six claims from four groups, half of them one LockBit 5.0 cluster in Q1. Silence on leak sites after May, while forums offer ministries, banks, and citizen records.
Ransomware and Data-Theft Claims in Oman: Q1–Q3 2026
Seven claims from five groups, three of them LockBit 5.0 in 21 days. The energy skew has faded, and a national logistics group and an insurer have appeared.
Ransomware and Data-Theft Claims in Bahrain: Q1–Q3 2026
Three claims, each from a different group, and none after June. The smallest record of the six Gulf markets, set against a war-driven DDoS wave and recycled forum claims.