Resource center

Notes From the Night Shift.

eBook

Threats

Identity

1H 2026 Threat Intelligence Report

1H 2026 findings reveal growing abuse of trusted identities, AI-assisted tooling, SaaS platforms, and business workflows as attackers achieve greater impact…

~30%

of monitored organizations experienced at least one Microsoft Teams IT-support impersonation attempt

6,188

delivery domains tied to just 158 payload hosts

Read the reporteBook
Read the reporteBook

Latest across every subject.

See all

Latest across every subject.

See all

Latest across every subject.

See all

Latest across every subject.

See all

Blog

Security Advisory: Critical PHP RCE Vulnerabilities Under Investigation

The PHP project has announced two critical vulnerabilities, but has not publicly associated the announced vulnerabilities with CVE identifiers.

Read

Blog

Security Advisory: Critical PHP RCE Vulnerabilities Under Investigation

The PHP project has announced two critical vulnerabilities, but has not publicly associated the announced vulnerabilities with CVE identifiers.

Read

Blog

Security Advisory: Critical PHP RCE Vulnerabilities Under Investigation

The PHP project has announced two critical vulnerabilities, but has not publicly associated the announced vulnerabilities with CVE identifiers.

Read

Blog

Cybersecurity Awareness Month: Why People Still Matter in the Age of AI

Cybersecurity Awareness Month is an opportunity for organizations to remind employees that cybersecurity is everyone's responsibility.

Read

Blog

Cybersecurity Awareness Month: Why People Still Matter in the Age of AI

Cybersecurity Awareness Month is an opportunity for organizations to remind employees that cybersecurity is everyone's responsibility.

Read

Blog

Cybersecurity Awareness Month: Why People Still Matter in the Age of AI

Cybersecurity Awareness Month is an opportunity for organizations to remind employees that cybersecurity is everyone's responsibility.

Read

Blog

The Biggest Cybersecurity Threats of 2026 Are Hiding in Plain Sight

New threat report shows attackers are finding ways to blend into legitimate platforms, workflows, and identities to hide from visibility.

Read

Blog

The Biggest Cybersecurity Threats of 2026 Are Hiding in Plain Sight

New threat report shows attackers are finding ways to blend into legitimate platforms, workflows, and identities to hide from visibility.

Read

Blog

The Biggest Cybersecurity Threats of 2026 Are Hiding in Plain Sight

New threat report shows attackers are finding ways to blend into legitimate platforms, workflows, and identities to hide from visibility.

Read

Beyond the Perimeter: What Security Teams Are Missing

Blog

Beyond the Perimeter: What Security Teams Are Missing

Exposed credentials from a 3rd party breach and brand impersonation are two ways threat actors are exploiting organizations.

5 min read

Read

Beyond the Perimeter: What Security Teams Are Missing

Blog

Beyond the Perimeter: What Security Teams Are Missing

Exposed credentials from a 3rd party breach and brand impersonation are two ways threat actors are exploiting organizations.

5 min read

Read

Beyond the Perimeter: What Security Teams Are Missing

Blog

Beyond the Perimeter: What Security Teams Are Missing

Exposed credentials from a 3rd party breach and brand impersonation are two ways threat actors are exploiting organizations.

5 min read

Read

Ontinue Offers new Dark Web Monitoring service for ION MXDR Customers

Webinar

Ontinue Offers new Dark Web Monitoring service for ION MXDR Customers

Exposed credentials and lookalike domains surface long before an attacker moves. See how ION for Dark Web Monitoring brings those findings into your MXDR…

23 min watch

Watch

Ontinue Offers new Dark Web Monitoring service for ION MXDR Customers

Webinar

Ontinue Offers new Dark Web Monitoring service for ION MXDR Customers

Exposed credentials and lookalike domains surface long before an attacker moves. See how ION for Dark Web Monitoring brings those findings into your MXDR…

23 min watch

Watch

Ontinue Offers new Dark Web Monitoring service for ION MXDR Customers

Webinar

Ontinue Offers new Dark Web Monitoring service for ION MXDR Customers

Exposed credentials and lookalike domains surface long before an attacker moves. See how ION for Dark Web Monitoring brings those findings into your MXDR…

23 min watch

Watch

Microsoft ISOC Signals a New Era for Security Operations

Blog

Microsoft ISOC Signals a New Era for Security Operations

Organizations need 24/7 detection, informed response, and stronger protection. Here's what to know about Microsoft's ISOC announcement.

4 min read

Read

Microsoft ISOC Signals a New Era for Security Operations

Blog

Microsoft ISOC Signals a New Era for Security Operations

Organizations need 24/7 detection, informed response, and stronger protection. Here's what to know about Microsoft's ISOC announcement.

4 min read

Read

Microsoft ISOC Signals a New Era for Security Operations

Blog

Microsoft ISOC Signals a New Era for Security Operations

Organizations need 24/7 detection, informed response, and stronger protection. Here's what to know about Microsoft's ISOC announcement.

4 min read

Read

Lunex Unmasked: A New Information Stealer Deployed Through BYOVD

Blog

Lunex Unmasked: A New Information Stealer Deployed Through BYOVD

Ontinue researchers uncover the Lunex malware platform, revealing a sophisticated attack chain, BYOVD techniques, and previously unreported capabilities.

19 min read

Read

Lunex Unmasked: A New Information Stealer Deployed Through BYOVD

Blog

Lunex Unmasked: A New Information Stealer Deployed Through BYOVD

Ontinue researchers uncover the Lunex malware platform, revealing a sophisticated attack chain, BYOVD techniques, and previously unreported capabilities.

19 min read

Read

Lunex Unmasked: A New Information Stealer Deployed Through BYOVD

Blog

Lunex Unmasked: A New Information Stealer Deployed Through BYOVD

Ontinue researchers uncover the Lunex malware platform, revealing a sophisticated attack chain, BYOVD techniques, and previously unreported capabilities.

19 min read

Read

Solution brief

ION for Dark Web Monitoring

ION for Dark Web Monitoring extends your existing ION MXDR service to identify compromised credentials, typosquatting domains, and other external risks.

2 min read

Read

Solution brief

ION for Dark Web Monitoring

ION for Dark Web Monitoring extends your existing ION MXDR service to identify compromised credentials, typosquatting domains, and other external risks.

2 min read

Read

Solution brief

ION for Dark Web Monitoring

ION for Dark Web Monitoring extends your existing ION MXDR service to identify compromised credentials, typosquatting domains, and other external risks.

2 min read

Read

Webinars

All webinars

Webinars

All webinars

Webinars

All webinars

Webinars

All webinars
Ontinue Offers new Dark Web Monitoring service for ION MXDR Customers

Webinar

Ontinue Offers new Dark Web Monitoring service for ION MXDR Customers

Exposed credentials and lookalike domains surface long before an attacker moves. See how ION for Dark Web Monitoring brings those findings into your MXDR…

23 min watch

Watch

Ontinue Offers new Dark Web Monitoring service for ION MXDR Customers

Webinar

Ontinue Offers new Dark Web Monitoring service for ION MXDR Customers

Exposed credentials and lookalike domains surface long before an attacker moves. See how ION for Dark Web Monitoring brings those findings into your MXDR…

23 min watch

Watch

Ontinue Offers new Dark Web Monitoring service for ION MXDR Customers

Webinar

Ontinue Offers new Dark Web Monitoring service for ION MXDR Customers

Exposed credentials and lookalike domains surface long before an attacker moves. See how ION for Dark Web Monitoring brings those findings into your MXDR…

23 min watch

Watch

Webinar: Demystifying the Use of AI Agents in Security Operations

Webinar

Webinar: Demystifying the Use of AI Agents in Security Operations

AI’s capabilities in the realm of SecOps can be fully realized by applying a structured approach that combines deterministic automation, AI assistance, and…

30 min watch

Watch

Webinar: Demystifying the Use of AI Agents in Security Operations

Webinar

Webinar: Demystifying the Use of AI Agents in Security Operations

AI’s capabilities in the realm of SecOps can be fully realized by applying a structured approach that combines deterministic automation, AI assistance, and…

30 min watch

Watch

Webinar: Demystifying the Use of AI Agents in Security Operations

Webinar

Webinar: Demystifying the Use of AI Agents in Security Operations

AI’s capabilities in the realm of SecOps can be fully realized by applying a structured approach that combines deterministic automation, AI assistance, and…

30 min watch

Watch

Cybersecurity Is a CFO-Level Priority: Key Takeaways from the CFO Cybersecurity Bootcamp

Webinar

Cybersecurity Is a CFO-Level Priority: Key Takeaways from the CFO Cybersecurity Bootcamp

Key takeaways from the CFO Cybersecurity Bootcamp - how to drive better cybersecurity outcomes and stronger enterprise performance.

54 min watch

Watch

Cybersecurity Is a CFO-Level Priority: Key Takeaways from the CFO Cybersecurity Bootcamp

Webinar

Cybersecurity Is a CFO-Level Priority: Key Takeaways from the CFO Cybersecurity Bootcamp

Key takeaways from the CFO Cybersecurity Bootcamp - how to drive better cybersecurity outcomes and stronger enterprise performance.

54 min watch

Watch

Cybersecurity Is a CFO-Level Priority: Key Takeaways from the CFO Cybersecurity Bootcamp

Webinar

Cybersecurity Is a CFO-Level Priority: Key Takeaways from the CFO Cybersecurity Bootcamp

Key takeaways from the CFO Cybersecurity Bootcamp - how to drive better cybersecurity outcomes and stronger enterprise performance.

54 min watch

Watch

Navigating Microsoft’s Latest Pricing Updates and Sentinel Data Lake

Webinar

Navigating Microsoft’s Latest Pricing Updates and Sentinel Data Lake

Learn how Microsoft’s latest pricing updates and Sentinel Data Lake changes impact licensing, data ingestion, and security costs. Watch the full webinar replay.

29 min watch

Watch

Navigating Microsoft’s Latest Pricing Updates and Sentinel Data Lake

Webinar

Navigating Microsoft’s Latest Pricing Updates and Sentinel Data Lake

Learn how Microsoft’s latest pricing updates and Sentinel Data Lake changes impact licensing, data ingestion, and security costs. Watch the full webinar replay.

29 min watch

Watch

Navigating Microsoft’s Latest Pricing Updates and Sentinel Data Lake

Webinar

Navigating Microsoft’s Latest Pricing Updates and Sentinel Data Lake

Learn how Microsoft’s latest pricing updates and Sentinel Data Lake changes impact licensing, data ingestion, and security costs. Watch the full webinar replay.

29 min watch

Watch

The Latest Ransomware Threats and How to Defend Against Them with Microsoft Defender and MXDR

Webinar

The Latest Ransomware Threats and How to Defend Against Them with Microsoft Defender and MXDR

Join our webinar to explore the latest ransomware threats and learn how Microsoft Defender and MXDR strengthen defenses to protect your organization.

22 min watch

Watch

The Latest Ransomware Threats and How to Defend Against Them with Microsoft Defender and MXDR

Webinar

The Latest Ransomware Threats and How to Defend Against Them with Microsoft Defender and MXDR

Join our webinar to explore the latest ransomware threats and learn how Microsoft Defender and MXDR strengthen defenses to protect your organization.

22 min watch

Watch

The Latest Ransomware Threats and How to Defend Against Them with Microsoft Defender and MXDR

Webinar

The Latest Ransomware Threats and How to Defend Against Them with Microsoft Defender and MXDR

Join our webinar to explore the latest ransomware threats and learn how Microsoft Defender and MXDR strengthen defenses to protect your organization.

22 min watch

Watch

Demo Walkthrough

Webinar

Demo Walkthrough

Explore a live walkthrough of the Ontinue ION SecOps platform—see how AI, automation and Teams-based collaboration drive faster threat resolution.

2 min watch

Watch

Demo Walkthrough

Webinar

Demo Walkthrough

Explore a live walkthrough of the Ontinue ION SecOps platform—see how AI, automation and Teams-based collaboration drive faster threat resolution.

2 min watch

Watch

Demo Walkthrough

Webinar

Demo Walkthrough

Explore a live walkthrough of the Ontinue ION SecOps platform—see how AI, automation and Teams-based collaboration drive faster threat resolution.

2 min watch

Watch

Unlock the Full Power of Your Microsoft E5 Security Licensing

Webinar

Unlock the Full Power of Your Microsoft E5 Security Licensing

Make the most of your Microsoft E5 investment: identify unused licences, eliminate redundancy, and strengthen your security posture.

31 min watch

Watch

Unlock the Full Power of Your Microsoft E5 Security Licensing

Webinar

Unlock the Full Power of Your Microsoft E5 Security Licensing

Make the most of your Microsoft E5 investment: identify unused licences, eliminate redundancy, and strengthen your security posture.

31 min watch

Watch

Unlock the Full Power of Your Microsoft E5 Security Licensing

Webinar

Unlock the Full Power of Your Microsoft E5 Security Licensing

Make the most of your Microsoft E5 investment: identify unused licences, eliminate redundancy, and strengthen your security posture.

31 min watch

Watch

Your Guide to Microsoft Security Licensing

Webinar

Your Guide to Microsoft Security Licensing

Get a comprehensive guide to Microsoft security licensing—identify wasted licences, maximise security coverage and reduce costs.

18 min watch

Watch

Your Guide to Microsoft Security Licensing

Webinar

Your Guide to Microsoft Security Licensing

Get a comprehensive guide to Microsoft security licensing—identify wasted licences, maximise security coverage and reduce costs.

18 min watch

Watch

Your Guide to Microsoft Security Licensing

Webinar

Your Guide to Microsoft Security Licensing

Get a comprehensive guide to Microsoft security licensing—identify wasted licences, maximise security coverage and reduce costs.

18 min watch

Watch

Podcasts

All podcasts

Podcasts

All podcasts

Podcasts

All podcasts

Podcasts

All podcasts
The 3 Keys to Modern Crisis Management and Incident Response

Podcast

The 3 Keys to Modern Crisis Management and Incident Response

CISO roundtable with Fellsway Group & Ontinue explores the 3 keys to modern crisis management and incident response for stronger business resilience.

46 min listen

Listen

The 3 Keys to Modern Crisis Management and Incident Response

Podcast

The 3 Keys to Modern Crisis Management and Incident Response

CISO roundtable with Fellsway Group & Ontinue explores the 3 keys to modern crisis management and incident response for stronger business resilience.

46 min listen

Listen

The 3 Keys to Modern Crisis Management and Incident Response

Podcast

The 3 Keys to Modern Crisis Management and Incident Response

CISO roundtable with Fellsway Group & Ontinue explores the 3 keys to modern crisis management and incident response for stronger business resilience.

46 min listen

Listen

Defend Your Time: How CISOs can Bridge the Technical and Leadership Gap

Podcast

Defend Your Time: How CISOs can Bridge the Technical and Leadership Gap

Discover how CISOs evolve from technical experts to business leaders. Learn strategies for influence, mentorship, and time management in this podcast episode.

25 min listen

Listen

Defend Your Time: How CISOs can Bridge the Technical and Leadership Gap

Podcast

Defend Your Time: How CISOs can Bridge the Technical and Leadership Gap

Discover how CISOs evolve from technical experts to business leaders. Learn strategies for influence, mentorship, and time management in this podcast episode.

25 min listen

Listen

Defend Your Time: How CISOs can Bridge the Technical and Leadership Gap

Podcast

Defend Your Time: How CISOs can Bridge the Technical and Leadership Gap

Discover how CISOs evolve from technical experts to business leaders. Learn strategies for influence, mentorship, and time management in this podcast episode.

25 min listen

Listen

Defend Your Time: Applying Agentic AI to SecOps (Part 3 of 3)

Podcast

Defend Your Time: Applying Agentic AI to SecOps (Part 3 of 3)

CISO Gareth Lindahl-Wise discusses combining AI and domain expertise to avoid “automating mediocrity” and boost speed and accuracy in SecOps.

18 min listen

Listen

Defend Your Time: Applying Agentic AI to SecOps (Part 3 of 3)

Podcast

Defend Your Time: Applying Agentic AI to SecOps (Part 3 of 3)

CISO Gareth Lindahl-Wise discusses combining AI and domain expertise to avoid “automating mediocrity” and boost speed and accuracy in SecOps.

18 min listen

Listen

Defend Your Time: Applying Agentic AI to SecOps (Part 3 of 3)

Podcast

Defend Your Time: Applying Agentic AI to SecOps (Part 3 of 3)

CISO Gareth Lindahl-Wise discusses combining AI and domain expertise to avoid “automating mediocrity” and boost speed and accuracy in SecOps.

18 min listen

Listen

Defend Your Time: Return on Risk Mitigation with Dan Holland

Podcast

Defend Your Time: Return on Risk Mitigation with Dan Holland

Dan Holland discusses how to maximize return on risk mitigation: aligning security spend with measurable business impact.

31 min listen

Listen

Defend Your Time: Return on Risk Mitigation with Dan Holland

Podcast

Defend Your Time: Return on Risk Mitigation with Dan Holland

Dan Holland discusses how to maximize return on risk mitigation: aligning security spend with measurable business impact.

31 min listen

Listen

Defend Your Time: Return on Risk Mitigation with Dan Holland

Podcast

Defend Your Time: Return on Risk Mitigation with Dan Holland

Dan Holland discusses how to maximize return on risk mitigation: aligning security spend with measurable business impact.

31 min listen

Listen

Defend Your Time: Applying Agentic AI to SecOps (Part 2 of 3)

Podcast

Defend Your Time: Applying Agentic AI to SecOps (Part 2 of 3)

In part 2, CISO Gareth Lindahl-Wise discusses how to set up your environment, maintain feedback loops, and align AI with your security operations.

23 min listen

Listen

Defend Your Time: Applying Agentic AI to SecOps (Part 2 of 3)

Podcast

Defend Your Time: Applying Agentic AI to SecOps (Part 2 of 3)

In part 2, CISO Gareth Lindahl-Wise discusses how to set up your environment, maintain feedback loops, and align AI with your security operations.

23 min listen

Listen

Defend Your Time: Applying Agentic AI to SecOps (Part 2 of 3)

Podcast

Defend Your Time: Applying Agentic AI to SecOps (Part 2 of 3)

In part 2, CISO Gareth Lindahl-Wise discusses how to set up your environment, maintain feedback loops, and align AI with your security operations.

23 min listen

Listen

Defend Your Time: Applying Agentic AI to SecOps (Part 1 of 3)

Podcast

Defend Your Time: Applying Agentic AI to SecOps (Part 1 of 3)

Theus Hossman (CTO of Ontinue) kicks off a 3-part series. Learn how Agentic AI is redefining automation in security operations.

22 min listen

Listen

Defend Your Time: Applying Agentic AI to SecOps (Part 1 of 3)

Podcast

Defend Your Time: Applying Agentic AI to SecOps (Part 1 of 3)

Theus Hossman (CTO of Ontinue) kicks off a 3-part series. Learn how Agentic AI is redefining automation in security operations.

22 min listen

Listen

Defend Your Time: Applying Agentic AI to SecOps (Part 1 of 3)

Podcast

Defend Your Time: Applying Agentic AI to SecOps (Part 1 of 3)

Theus Hossman (CTO of Ontinue) kicks off a 3-part series. Learn how Agentic AI is redefining automation in security operations.

22 min listen

Listen

Defend Your Time: 10 Steps to Improve Your Security Posture in 60 Days

Podcast

Defend Your Time: 10 Steps to Improve Your Security Posture in 60 Days

IT security leader Asael Baez shares 10 practical steps—from alerts and phishing defense to patching and 24/7 monitoring—to enhance your organization’s…

28 min listen

Listen

Defend Your Time: 10 Steps to Improve Your Security Posture in 60 Days

Podcast

Defend Your Time: 10 Steps to Improve Your Security Posture in 60 Days

IT security leader Asael Baez shares 10 practical steps—from alerts and phishing defense to patching and 24/7 monitoring—to enhance your organization’s…

28 min listen

Listen

Defend Your Time: 10 Steps to Improve Your Security Posture in 60 Days

Podcast

Defend Your Time: 10 Steps to Improve Your Security Posture in 60 Days

IT security leader Asael Baez shares 10 practical steps—from alerts and phishing defense to patching and 24/7 monitoring—to enhance your organization’s…

28 min listen

Listen

Defend Your Time: Insights on OT Security with Dean Ellerby

Podcast

Defend Your Time: Insights on OT Security with Dean Ellerby

Join Dean Ellerby and the Ontinue team as they explore OT security challenges, control systems risk and how to protect industrial environments.

19 min listen

Listen

Defend Your Time: Insights on OT Security with Dean Ellerby

Podcast

Defend Your Time: Insights on OT Security with Dean Ellerby

Join Dean Ellerby and the Ontinue team as they explore OT security challenges, control systems risk and how to protect industrial environments.

19 min listen

Listen

Defend Your Time: Insights on OT Security with Dean Ellerby

Podcast

Defend Your Time: Insights on OT Security with Dean Ellerby

Join Dean Ellerby and the Ontinue team as they explore OT security challenges, control systems risk and how to protect industrial environments.

19 min listen

Listen

Customer success stories.

All customer stories

Customer success stories.

All customer stories

Customer success stories.

All customer stories

Customer success stories.

All customer stories

Customer story

Software

The seven hires Bizbrains never had to make.

How a Danish integration platform got 24/7 SecOps and full NIS2 audit compliance without growing its security team.

Bizbrains logo

Read

Customer story

Software

The seven hires Bizbrains never had to make.

How a Danish integration platform got 24/7 SecOps and full NIS2 audit compliance without growing its security team.

Bizbrains logo

Read

Customer story

Software

The seven hires Bizbrains never had to make.

How a Danish integration platform got 24/7 SecOps and full NIS2 audit compliance without growing its security team.

Bizbrains logo

Read

Customer story

Fintech

The fintech that went enterprise-grade in two weeks.

How Glow Financial met FCA demands and scaled 24/7 coverage on its existing Microsoft stack.

Glow Financial Services logo

Read

Customer story

Fintech

The fintech that went enterprise-grade in two weeks.

How Glow Financial met FCA demands and scaled 24/7 coverage on its existing Microsoft stack.

Glow Financial Services logo

Read

Customer story

Fintech

The fintech that went enterprise-grade in two weeks.

How Glow Financial met FCA demands and scaled 24/7 coverage on its existing Microsoft stack.

Glow Financial Services logo

Read

Customer story

Manufacturing

The pen cosmetics maker that freed up time for strategic security.

How a STABILO Group cosmetics maker with nearly 1,500 users got a 24/7 managed SOC, with the infrastructure set up within weeks.

Schwan Cosmetics logo

Read

Customer story

Manufacturing

The pen cosmetics maker that freed up time for strategic security.

How a STABILO Group cosmetics maker with nearly 1,500 users got a 24/7 managed SOC, with the infrastructure set up within weeks.

Schwan Cosmetics logo

Read

Customer story

Manufacturing

The pen cosmetics maker that freed up time for strategic security.

How a STABILO Group cosmetics maker with nearly 1,500 users got a 24/7 managed SOC, with the infrastructure set up within weeks.

Schwan Cosmetics logo

Read

Customer story

Manufacturing

The small team managing IT security for 3,500 Burckhardt employees.

How a 180-year-old Swiss compressor maker swapped fragmented, multi-vendor tools for a unified Microsoft E5 stack and 24/7 Ontinue MXDR.

Burckhardt Compression logo

Read

Customer story

Manufacturing

The small team managing IT security for 3,500 Burckhardt employees.

How a 180-year-old Swiss compressor maker swapped fragmented, multi-vendor tools for a unified Microsoft E5 stack and 24/7 Ontinue MXDR.

Burckhardt Compression logo

Read

Customer story

Manufacturing

The small team managing IT security for 3,500 Burckhardt employees.

How a 180-year-old Swiss compressor maker swapped fragmented, multi-vendor tools for a unified Microsoft E5 stack and 24/7 Ontinue MXDR.

Burckhardt Compression logo

Read

Customer story

Food service

The food service supplier that integrates acquisitions in two months.

How a U.S. food service supplier growing through acquisition got a 24/7 managed SOC and saved 30 hours of analyst time in just 90 days.

ACR logo

Read

Customer story

Food service

The food service supplier that integrates acquisitions in two months.

How a U.S. food service supplier growing through acquisition got a 24/7 managed SOC and saved 30 hours of analyst time in just 90 days.

ACR logo

Read

Customer story

Food service

The food service supplier that integrates acquisitions in two months.

How a U.S. food service supplier growing through acquisition got a 24/7 managed SOC and saved 30 hours of analyst time in just 90 days.

ACR logo

Read

Customer story

Legal

The healthcare law firm that closed its out-of-hours monitoring gap.

How a UK law firm handling patient records moved to E5 licences and 24/7 MXDR, with real-time alerting through Microsoft Teams.

Hempsons logo

Read

Customer story

Legal

The healthcare law firm that closed its out-of-hours monitoring gap.

How a UK law firm handling patient records moved to E5 licences and 24/7 MXDR, with real-time alerting through Microsoft Teams.

Hempsons logo

Read

Customer story

Legal

The healthcare law firm that closed its out-of-hours monitoring gap.

How a UK law firm handling patient records moved to E5 licences and 24/7 MXDR, with real-time alerting through Microsoft Teams.

Hempsons logo

Read

Customer story

Facility services

The weak spot that now gets CWS top marks.

How a hygiene and workwear rental company in 15 European countries, hit by a cyberattack mid-consolidation, got 24/7 monitoring of its Microsoft tools.

CWS logo

Read

Customer story

Facility services

The weak spot that now gets CWS top marks.

How a hygiene and workwear rental company in 15 European countries, hit by a cyberattack mid-consolidation, got 24/7 monitoring of its Microsoft tools.

CWS logo

Read

Customer story

Facility services

The weak spot that now gets CWS top marks.

How a hygiene and workwear rental company in 15 European countries, hit by a cyberattack mid-consolidation, got 24/7 monitoring of its Microsoft tools.

CWS logo

Read

Customer story

Healthcare

The prosthetics maker with complete transparency across its IT.

How a global prosthetics maker with more than 9,000 employees added a 24/7 SOC to its lean security team on Microsoft Defender and Sentinel.

Ottobock logo

Read

Customer story

Healthcare

The prosthetics maker with complete transparency across its IT.

How a global prosthetics maker with more than 9,000 employees added a 24/7 SOC to its lean security team on Microsoft Defender and Sentinel.

Ottobock logo

Read

Customer story

Healthcare

The prosthetics maker with complete transparency across its IT.

How a global prosthetics maker with more than 9,000 employees added a 24/7 SOC to its lean security team on Microsoft Defender and Sentinel.

Ottobock logo

Read

Solution briefs

All solution briefs

Solution briefs

All solution briefs

Solution briefs

All solution briefs

Solution briefs

All solution briefs

Solution brief

ION for Dark Web Monitoring

ION for Dark Web Monitoring extends your existing ION MXDR service to identify compromised credentials, typosquatting domains, and other external risks.

2 min read

Read

Solution brief

ION for Dark Web Monitoring

ION for Dark Web Monitoring extends your existing ION MXDR service to identify compromised credentials, typosquatting domains, and other external risks.

2 min read

Read

Solution brief

ION for Dark Web Monitoring

ION for Dark Web Monitoring extends your existing ION MXDR service to identify compromised credentials, typosquatting domains, and other external risks.

2 min read

Read

Solution brief

ION for Enhanced Phishing Protection

ION for Enhanced Phishing Protection is an add-on to Ontinue ION MXDR that extends 24/7 triage, enrichment, investigation and response to user-reported…

2 min read

Read

Solution brief

ION for Enhanced Phishing Protection

ION for Enhanced Phishing Protection is an add-on to Ontinue ION MXDR that extends 24/7 triage, enrichment, investigation and response to user-reported…

2 min read

Read

Solution brief

ION for Enhanced Phishing Protection

ION for Enhanced Phishing Protection is an add-on to Ontinue ION MXDR that extends 24/7 triage, enrichment, investigation and response to user-reported…

2 min read

Read

Solution brief

ION for IoT Security

ION for IoT Security is an add-on service to Ontinue ION MXDR that extends 24x7 monitoring and investigation to your OT and IoT environments.

3 min read

Read

Solution brief

ION for IoT Security

ION for IoT Security is an add-on service to Ontinue ION MXDR that extends 24x7 monitoring and investigation to your OT and IoT environments.

3 min read

Read

Solution brief

ION for IoT Security

ION for IoT Security is an add-on service to Ontinue ION MXDR that extends 24x7 monitoring and investigation to your OT and IoT environments.

3 min read

Read

Solution brief

ION for Vulnerability Mitigation

ION for Vulnerability Mitigation is an add-on service to Ontinue ION that surfaces the small percentage of IT vulnerabilities that represent most of your…

3 min read

Read

Solution brief

ION for Vulnerability Mitigation

ION for Vulnerability Mitigation is an add-on service to Ontinue ION that surfaces the small percentage of IT vulnerabilities that represent most of your…

3 min read

Read

Solution brief

ION for Vulnerability Mitigation

ION for Vulnerability Mitigation is an add-on service to Ontinue ION that surfaces the small percentage of IT vulnerabilities that represent most of your…

3 min read

Read

Solution brief

The Ontinue ION MXDR Service

Ontinue ION is a managed extended detection and response (MXDR) service for Microsoft customers.

3 min read

Read

Solution brief

The Ontinue ION MXDR Service

Ontinue ION is a managed extended detection and response (MXDR) service for Microsoft customers.

3 min read

Read

Solution brief

The Ontinue ION MXDR Service

Ontinue ION is a managed extended detection and response (MXDR) service for Microsoft customers.

3 min read

Read

eBooks

All eBooks

eBooks

All eBooks

eBooks

All eBooks

eBooks

All eBooks

eBook

1H 2026 Threat Intelligence Report

1H 2026 findings reveal growing abuse of trusted identities, AI-assisted tooling, SaaS platforms, and business workflows as attackers achieve greater impact…

20 min read

Read

eBook

1H 2026 Threat Intelligence Report

1H 2026 findings reveal growing abuse of trusted identities, AI-assisted tooling, SaaS platforms, and business workflows as attackers achieve greater impact…

20 min read

Read

eBook

1H 2026 Threat Intelligence Report

1H 2026 findings reveal growing abuse of trusted identities, AI-assisted tooling, SaaS platforms, and business workflows as attackers achieve greater impact…

20 min read

Read

The Evolution of Ransomware cover

eBook

The Evolution of Ransomware

Attackers are no longer just breaking into environments; they are logging in. This brief traces how ransomware moved from exploit-driven malware to identity…

1 page

Download

The Evolution of Ransomware cover

eBook

The Evolution of Ransomware

Attackers are no longer just breaking into environments; they are logging in. This brief traces how ransomware moved from exploit-driven malware to identity…

1 page

Download

The Evolution of Ransomware cover

eBook

The Evolution of Ransomware

Attackers are no longer just breaking into environments; they are logging in. This brief traces how ransomware moved from exploit-driven malware to identity…

1 page

Download

eBook

2H 2025 Threat Intelligence Report

Ontinue’s Advanced Threat Operations team analyzes the second half of 2025, when identity compromise and cloud credential abuse defined the threat landscape.

33 min read

Read

eBook

2H 2025 Threat Intelligence Report

Ontinue’s Advanced Threat Operations team analyzes the second half of 2025, when identity compromise and cloud credential abuse defined the threat landscape.

33 min read

Read

eBook

2H 2025 Threat Intelligence Report

Ontinue’s Advanced Threat Operations team analyzes the second half of 2025, when identity compromise and cloud credential abuse defined the threat landscape.

33 min read

Read

eBook

Cutting Through the Hype: What Agentic AI Really Means and The Future of SecOps

Breaks down the spectrum of AI and its evolution, what makes agentic AI agentic, and how Ontinue uses the technology to improve security outcomes for customers.

10 min read

Read

eBook

Cutting Through the Hype: What Agentic AI Really Means and The Future of SecOps

Breaks down the spectrum of AI and its evolution, what makes agentic AI agentic, and how Ontinue uses the technology to improve security outcomes for customers.

10 min read

Read

eBook

Cutting Through the Hype: What Agentic AI Really Means and The Future of SecOps

Breaks down the spectrum of AI and its evolution, what makes agentic AI agentic, and how Ontinue uses the technology to improve security outcomes for customers.

10 min read

Read

eBook

1H 2025 Threat Intelligence Report

This report tracks how ransomware, phishing, and state-aligned activity evolved in the first half of 2025, and compares red team exercises with real attacker…

41 min read

Read

eBook

1H 2025 Threat Intelligence Report

This report tracks how ransomware, phishing, and state-aligned activity evolved in the first half of 2025, and compares red team exercises with real attacker…

41 min read

Read

eBook

1H 2025 Threat Intelligence Report

This report tracks how ransomware, phishing, and state-aligned activity evolved in the first half of 2025, and compares red team exercises with real attacker…

41 min read

Read

eBook

2H 2024 Threat Intelligence Report

Ontinue’s Advanced Threat Operations team analyzes the 2H 2024 threat landscape. Info stealers, PlugX RAT and suspicious PowerShell activity were among the…

20 min read

Read

eBook

2H 2024 Threat Intelligence Report

Ontinue’s Advanced Threat Operations team analyzes the 2H 2024 threat landscape. Info stealers, PlugX RAT and suspicious PowerShell activity were among the…

20 min read

Read

eBook

2H 2024 Threat Intelligence Report

Ontinue’s Advanced Threat Operations team analyzes the 2H 2024 threat landscape. Info stealers, PlugX RAT and suspicious PowerShell activity were among the…

20 min read

Read

eBook

1H 2024 Threat Intelligence Report

Ontinue’s Advanced Threat Operations team analyzes the 1H 2024 cyber threat landscape. Older vulnerabilities remain heavily exploited, and LockBit remains…

16 min read

Read

eBook

1H 2024 Threat Intelligence Report

Ontinue’s Advanced Threat Operations team analyzes the 1H 2024 cyber threat landscape. Older vulnerabilities remain heavily exploited, and LockBit remains…

16 min read

Read

eBook

1H 2024 Threat Intelligence Report

Ontinue’s Advanced Threat Operations team analyzes the 1H 2024 cyber threat landscape. Older vulnerabilities remain heavily exploited, and LockBit remains…

16 min read

Read

eBook

Maximizing your Microsoft Licensing to Reduce Costs and Increase Security

Many organizations own Microsoft licenses that include products they never fully use. This guide details the security functionality included in the E5…

9 min read

Read

eBook

Maximizing your Microsoft Licensing to Reduce Costs and Increase Security

Many organizations own Microsoft licenses that include products they never fully use. This guide details the security functionality included in the E5…

9 min read

Read

eBook

Maximizing your Microsoft Licensing to Reduce Costs and Increase Security

Many organizations own Microsoft licenses that include products they never fully use. This guide details the security functionality included in the E5…

9 min read

Read

Blogs

All blogs

Blogs

All blogs

Blogs

All blogs

Blogs

All blogs

Blog

Security Advisory: Critical PHP RCE Vulnerabilities Under Investigation

The PHP project has announced two critical vulnerabilities, but has not publicly associated the announced vulnerabilities with CVE identifiers.

Read

Blog

Security Advisory: Critical PHP RCE Vulnerabilities Under Investigation

The PHP project has announced two critical vulnerabilities, but has not publicly associated the announced vulnerabilities with CVE identifiers.

Read

Blog

Security Advisory: Critical PHP RCE Vulnerabilities Under Investigation

The PHP project has announced two critical vulnerabilities, but has not publicly associated the announced vulnerabilities with CVE identifiers.

Read

Blog

Cybersecurity Awareness Month: Why People Still Matter in the Age of AI

Cybersecurity Awareness Month is an opportunity for organizations to remind employees that cybersecurity is everyone's responsibility.

Read

Blog

Cybersecurity Awareness Month: Why People Still Matter in the Age of AI

Cybersecurity Awareness Month is an opportunity for organizations to remind employees that cybersecurity is everyone's responsibility.

Read

Blog

Cybersecurity Awareness Month: Why People Still Matter in the Age of AI

Cybersecurity Awareness Month is an opportunity for organizations to remind employees that cybersecurity is everyone's responsibility.

Read

Blog

The Biggest Cybersecurity Threats of 2026 Are Hiding in Plain Sight

New threat report shows attackers are finding ways to blend into legitimate platforms, workflows, and identities to hide from visibility.

Read

Blog

The Biggest Cybersecurity Threats of 2026 Are Hiding in Plain Sight

New threat report shows attackers are finding ways to blend into legitimate platforms, workflows, and identities to hide from visibility.

Read

Blog

The Biggest Cybersecurity Threats of 2026 Are Hiding in Plain Sight

New threat report shows attackers are finding ways to blend into legitimate platforms, workflows, and identities to hide from visibility.

Read

Beyond the Perimeter: What Security Teams Are Missing

Blog

Beyond the Perimeter: What Security Teams Are Missing

Exposed credentials from a 3rd party breach and brand impersonation are two ways threat actors are exploiting organizations.

5 min read

Read

Beyond the Perimeter: What Security Teams Are Missing

Blog

Beyond the Perimeter: What Security Teams Are Missing

Exposed credentials from a 3rd party breach and brand impersonation are two ways threat actors are exploiting organizations.

5 min read

Read

Beyond the Perimeter: What Security Teams Are Missing

Blog

Beyond the Perimeter: What Security Teams Are Missing

Exposed credentials from a 3rd party breach and brand impersonation are two ways threat actors are exploiting organizations.

5 min read

Read

Microsoft ISOC Signals a New Era for Security Operations

Blog

Microsoft ISOC Signals a New Era for Security Operations

Organizations need 24/7 detection, informed response, and stronger protection. Here's what to know about Microsoft's ISOC announcement.

4 min read

Read

Microsoft ISOC Signals a New Era for Security Operations

Blog

Microsoft ISOC Signals a New Era for Security Operations

Organizations need 24/7 detection, informed response, and stronger protection. Here's what to know about Microsoft's ISOC announcement.

4 min read

Read

Microsoft ISOC Signals a New Era for Security Operations

Blog

Microsoft ISOC Signals a New Era for Security Operations

Organizations need 24/7 detection, informed response, and stronger protection. Here's what to know about Microsoft's ISOC announcement.

4 min read

Read

Lunex Unmasked: A New Information Stealer Deployed Through BYOVD

Blog

Lunex Unmasked: A New Information Stealer Deployed Through BYOVD

Ontinue researchers uncover the Lunex malware platform, revealing a sophisticated attack chain, BYOVD techniques, and previously unreported capabilities.

19 min read

Read

Lunex Unmasked: A New Information Stealer Deployed Through BYOVD

Blog

Lunex Unmasked: A New Information Stealer Deployed Through BYOVD

Ontinue researchers uncover the Lunex malware platform, revealing a sophisticated attack chain, BYOVD techniques, and previously unreported capabilities.

19 min read

Read

Lunex Unmasked: A New Information Stealer Deployed Through BYOVD

Blog

Lunex Unmasked: A New Information Stealer Deployed Through BYOVD

Ontinue researchers uncover the Lunex malware platform, revealing a sophisticated attack chain, BYOVD techniques, and previously unreported capabilities.

19 min read

Read

From Concept to Containment: What an Agentic SOC Looks Like in Practice

Blog

From Concept to Containment: What an Agentic SOC Looks Like in Practice

Three real incidents, two operating models. See how an Agentic SOC investigates, decides, and responds under human governance — while traditional MDR waits.

6 min read

Read

From Concept to Containment: What an Agentic SOC Looks Like in Practice

Blog

From Concept to Containment: What an Agentic SOC Looks Like in Practice

Three real incidents, two operating models. See how an Agentic SOC investigates, decides, and responds under human governance — while traditional MDR waits.

6 min read

Read

From Concept to Containment: What an Agentic SOC Looks Like in Practice

Blog

From Concept to Containment: What an Agentic SOC Looks Like in Practice

Three real incidents, two operating models. See how an Agentic SOC investigates, decides, and responds under human governance — while traditional MDR waits.

6 min read

Read

Living Off the Cloud: A Python Implant Hiding Its Entire C2 Inside Microsoft 365 & Azure

Blog

Living Off the Cloud: A Python Implant Hiding Its Entire C2 Inside Microsoft 365 & Azure

A new malware framework is hiding its entire command-and-control operation inside Microsoft 365 and Azure.

19 min read

Read

Living Off the Cloud: A Python Implant Hiding Its Entire C2 Inside Microsoft 365 & Azure

Blog

Living Off the Cloud: A Python Implant Hiding Its Entire C2 Inside Microsoft 365 & Azure

A new malware framework is hiding its entire command-and-control operation inside Microsoft 365 and Azure.

19 min read

Read

Living Off the Cloud: A Python Implant Hiding Its Entire C2 Inside Microsoft 365 & Azure

Blog

Living Off the Cloud: A Python Implant Hiding Its Entire C2 Inside Microsoft 365 & Azure

A new malware framework is hiding its entire command-and-control operation inside Microsoft 365 and Azure.

19 min read

Read

This is Nonstop SecOps.

Ontinue

European HQ

Grubenstrasse 54
8045 Zürich

North America HQ

450 Maple Street
Redwood City, CA 94063

UK Office

9 Holborn
London, EC1N 2LL

APAC Office

World Trade Tower, Sector 16
Noida, Uttar Pradesh 201301

Düsseldorf Office

Speditionstraße 2
40221 Düsseldorf, Germany

Vienna Office

Kohlmarkt 8-10
1010 Wien, Austria

Toronto Office

6060-3080 Yonge St
Toronto, ON M4N 3N1

Ontinue

© 2026 Ontinue. All rights reserved.

Ontinue offers nonstop SecOps through an AI-powered managed extended detection and response (MXDR) service. Ontinue ION MXDR combines powerful proprietary AI with the industry’s first collaboration with Microsoft Teams to continuously build a deep understanding of our customers’ environments, informing how we prevent, detect, and respond to threats.

Continuous protection. AI-powered Nonstop SecOps. That’s Ontinue.

This is Nonstop SecOps.

Ontinue

European HQ

Grubenstrasse 54
8045 Zürich

North America HQ

450 Maple Street
Redwood City, CA 94063

UK Office

9 Holborn
London, EC1N 2LL

APAC Office

World Trade Tower, Sector 16
Noida, Uttar Pradesh 201301

Düsseldorf Office

Speditionstraße 2
40221 Düsseldorf, Germany

Vienna Office

Kohlmarkt 8-10
1010 Wien, Austria

Toronto Office

6060-3080 Yonge St
Toronto, ON M4N 3N1

Ontinue

© 2026 Ontinue. All rights reserved.

Ontinue offers nonstop SecOps through an AI-powered managed extended detection and response (MXDR) service. Ontinue ION MXDR combines powerful proprietary AI with the industry’s first collaboration with Microsoft Teams to continuously build a deep understanding of our customers’ environments, informing how we prevent, detect, and respond to threats.

Continuous protection. AI-powered Nonstop SecOps. That’s Ontinue.

This is Nonstop SecOps.

Ontinue

European HQ

Grubenstrasse 54
8045 Zürich

North America HQ

450 Maple Street
Redwood City, CA 94063

UK Office

9 Holborn
London, EC1N 2LL

APAC Office

World Trade Tower, Sector 16
Noida, Uttar Pradesh 201301

Düsseldorf Office

Speditionstraße 2
40221 Düsseldorf, Germany

Vienna Office

Kohlmarkt 8-10
1010 Wien, Austria

Toronto Office

6060-3080 Yonge St
Toronto, ON M4N 3N1

Ontinue

© 2026 Ontinue. All rights reserved.

Ontinue offers nonstop SecOps through an AI-powered managed extended detection and response (MXDR) service. Ontinue ION MXDR combines powerful proprietary AI with the industry’s first collaboration with Microsoft Teams to continuously build a deep understanding of our customers’ environments, informing how we prevent, detect, and respond to threats.

Continuous protection. AI-powered Nonstop SecOps. That’s Ontinue.

This is Nonstop SecOps.

Ontinue

European HQ

Grubenstrasse 54
8045 Zürich

North America HQ

450 Maple Street
Redwood City, CA 94063

UK Office

9 Holborn
London, EC1N 2LL

APAC Office

World Trade Tower, Sector 16
Noida, Uttar Pradesh 201301

Düsseldorf Office

Speditionstraße 2
40221 Düsseldorf, Germany

Vienna Office

Kohlmarkt 8-10
1010 Wien, Austria

Toronto Office

6060-3080 Yonge St
Toronto, ON M4N 3N1

Ontinue

© 2026 Ontinue. All rights reserved.

Ontinue offers nonstop SecOps through an AI-powered managed extended detection and response (MXDR) service. Ontinue ION MXDR combines powerful proprietary AI with the industry’s first collaboration with Microsoft Teams to continuously build a deep understanding of our customers’ environments, informing how we prevent, detect, and respond to threats.

Continuous protection. AI-powered Nonstop SecOps. That’s Ontinue.