Recorded Future Insikt Group
recordedfuture-insikt · B · active
https://www.recordedfuture.com/research/insikt-group
Recorded Future research arm. URL CORRECTED 2026-05-08: /research is a marketing landing — sub-agents got no article list. The Insikt Group blog listing is at /research/insikt-group; the threat-research feed is at /threat-research/feed. 2026-05-08 audit: still STUB-prone (page rendered without article cards). Treat as low-frequency rotation source. | 2026-06-20 full audit (v2.62): live=Y, drill=Y. FETCH → rss: python3 tools/fetch_source.py feed https://www.recordedfuture.com/feed 5 (then WebFetch the /blog/<slug> URL for the body). The /feed works; the documented /threat-research/feed and /research/insikt-group landing do NOT.. AVOID: Don't WebFetch /research/insikt-group — it's a marketing stub with no article cards. The documented /threat-research/feed 404s. Use /feed instead.. | 2026-07-05 admiralty audit: B — original vendor threat-research lab (Insikt), first-hand actor/campaign analysis. Live via /feed; active retained. | 2026-08-04 run: RECIPE GAP — https://www.recordedfuture.com/research/insikt-group is a landing/mission page with no dated article listing reachable via WebFetch. Needs a replacement discovery path.
Cited in 2 entries
Citation cadence
Citation days per ISO week (9 weeks of coverage span, total 2).
- The week's AI-and-attackers reporting converged on a calibrated read — AI is accelerating existing tradecraft, not creating a new attack class — and handed defenders a concrete hunt signal: emoji and Unicode artefacts in compiled-malware debug strings2026-07-19
- Netherlands FIOD arrests two over EU sanctions evasion for Stark Industries front; 800 servers seized; NoName057(16) DDoS plumbing dismantled2026-05-23