Elastic Security
“The open agentic security operations platform. SIEM, endpoint security, and native automation included, with AI that shows its work.”
SIEM and endpoint security built on Elasticsearch, with open detection rules.
Product pageElastic
1 product listed
Elasticsearch: The search database for AI
Our summarySearch and analytics company behind Elasticsearch. Elastic Security Labs publishes threat research.
- Products listed
- 1
- Research stories
- 29
- Incidents and advisories
- 0
- Indicators
- 0
Elastic in our news, month by month
ResearchIncidents and advisories
1
Jun
3
Jul
Aug
4
Sept
Oct
4
Nov
Products and the controls they provide
External reviews
Independent tests, peer reviews and articles about Elastic. We link to them; we did not write or commission them, and nobody pays to appear here.
Research by Elastic
Stories in our coverage based on what researchers at Elastic found or reported: 29 in total.
- 13 Nov 2026Hackers Use SANSAR Linux Malware to Hide Crypto Mining by Faking 0% GPU Usage
Hackers use SANSAR Linux malware to hide crypto mining by faking 0% GPU usage.
- 11 Nov 2026eBPF Rootkits: Why Underground Actors Are Taking Notice
Linux eBPF rootkits are spreading via underground forums, sharing code and tutorials.
- 10 Nov 2026RevStealer Uses 100+ Domains and Hijacked YouTube Channels to Spread Credential-Stealing Malware
RevStealer malware spreads via 100+ domains and hijacked YouTube channels, targeting gamers and users seeking free
- 9 Nov 2026An average of 8 minutes is all hackers need to log in with stolen credentials
Hackers log in using stolen credentials in an average of 8 minutes, abusing AI tools and remote access software.
- 23 Sept 2026EDR Evasion Stack Helps Process Injection Slip Past Defenses
New EDR evasion technique uses process parameter poisoning for code injection.
- 16 Sept 2026Malware bypasses browser checks to force install Chrome, Edge extensions
KREMLIN malware uses a toolkit to force install malicious Chrome/Edge extensions.
- 15 Sept 2026KREMLIN Banking Malware Hijacks Chrome and Edge to Steal Credentials and Session Tokens
KREMLIN banking malware targets Brazilian users, stealing credentials via malicious browser extensions.
- 6 Sept 2026Four REVSTEALER-Linked Modules Disable Windows Update and Defender to Run a Crypto Miner
Four REVSTEALER modules disable Windows Update and Defender to run a crypto miner.
- 17 Jul 2026Fake Coding Tests Deliver OtterCookie-Aligned Malware Hidden in SVG Flag Images
North Korean actors use steganography in SVG images within fake coding tests to deliver OtterCookie malware.
- 16 Jul 2026New TELEPUZ Malware Spreads via ClickFix to Steal Data and Run Commands
TELEPUZ modular malware spreads via ClickFix social engineering since April 2026.
Incidents and advisories
Stories where a Elastic product had a vulnerability or was attacked, or Elastic itself was. Useful if you run its products.
None in our coverage yet.
Vendor Watch
Run Elastic?
Get an email when a new story names Elastic, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
From Elastic
Is this your company, or did we get something wrong?
Tell us what to fix on this page: a product, a description, a link or a review. We check every suggestion before changing anything, and listing stays free and editorial.
How we list vendors
- A product is listed because it provides the control. Nobody pays to be listed, and on story pages the examples rotate, so no vendor is always first.
- Vendor pages show both the vendor's own research and the incidents involving its products, from our own coverage. We do not leave either out.
- Our summaries are written by us, based on the vendors' own pages. Text in quotation marks or marked "in their own words" is the vendor's own, quoted from its website.
- Logos, product names and quoted text belong to the vendors and are shown to identify them.
- Something wrong? Use "Suggest a correction" on the vendor's page. A product we should look at? Email support@threatnoir.com.