Research & news

This advisory is published in the public interest to enable defenders to assess exposure and apply mitigations. Responsible disclosure practices apply.

In the middle of a war, trust is maybe the most fragile asset.

Anthropic's Claude Code Security announcement raised the question every frontier-lab move into security raises: is this the beginning of displacement?

Tens-of-millions-of-dollars investment to establish independent AI infrastructure for regulated and mission-critical environments

In January 2026 Dream uncovered a supply-chain attack in Southeast Asia delivering trojanized updates through eScan antivirus infrastructure.

Between December 2025 and January 2026, a covert espionage campaign targeted diplomatic, election and policy officials by exploiting trust, not exploits.

Dream's Identity Researcher uses an LLM to find hidden privilege escalation routes in Active Directory, surfacing tiering violations that reach Tier 0 assets.

How Dream's Posture Engine turns static visibility into attack-path intelligence, using the F5 BIG-IP breach to show where real risk accumulates.

Nine coordinated phishing campaigns from 2025 trace to the Iranian APT group MuddyWater through shared C2 behavior, VBS loaders and repeated staging logic.

An Iran-nexus spear-phishing campaign used a compromised Omani MFA mailbox to target governments worldwide, attributed to MOIS-aligned Homeland Justice.

Dream's AI Cyber Factory, built on the NVIDIA Enterprise AI Factory validated design, delivers autonomous cyber defense for national infrastructure.