Silent Push

As adoption of preemptive threat intelligence grows from individual analysts to entire security organizations, it’s essential to monitor who gets access, how much they use, and what areas they can see. With the release of Silent Push 6.2, admins now get a single page to monitor and decide who can use which modules and how many API calls each person can make.

Industry: Financial Services Role: Security Engineer Use case: Data consolidation, API ingestion, infrastructure data quality A Security Engineer at a global fintech was building an internal graph solution to map risk dynamically across their infrastructure. To do that, they needed external data they could pull directly into their own environment via API and combine with internal signals.

Danglegeddon is a Silent Push research simulation that measured how quickly dangling DNS records could be found and taken over at scale. A dangling DNS record is a record that still points to a service that has been deleted, such as a forgotten CNAME to a decommissioned cloud resource. Anyone who claims that service can take control of the subdomain.

The Silent Push Threat Research Roundup for September 2026 collects six public investigations into adversary infrastructure, published by the Silent Push Preemptive Cyber Defense team between June and September. Each investigation includes exclusive recommendations defenders can act on. This edition covers early infrastructure tied to The Gentlemen ransomware group, and attacker infrastructure targeting Amgen that the team spotted seven months before the company’s SEC filing.

Welcome to our 6.1 walkthrough. Take a closer look at what’s new in Silent Push 6.1. This walkthrough covers the latest features and updates built to help defenders get ahead of adversary infrastructure faster. Watch to see the new capabilities in action and learn how they fit into your existing threat hunting workflow. Book your demo today.

In this walkthrough, we connect the Silent Push MCP Server to a Tines workbench and show how a single phishing domain becomes the starting point for a much bigger investigation. We enrich the domain, pivot on registration patterns and shared name servers, and let AI agents do the matching work that used to mean writing rigid regex and if/else logic by hand.

The fast-flux technique has evolved, making it easier for threat actors to use in phishing campaigns and harder for defenders to detect and apprehend cybercriminals. Silent Push became a fast-flux customer to watch how the infrastructure behaves from the inside, and then turned what we learned into detection analytics.

Silent Push identified a North Korean fake job recruitment scam channel hosted on a Discord server by a defender colleague, and we engaged the recruitment representative to ask about their offering and determine whether the individual was actually a North Korean IT worker.

Latest enhancements include a next-gen Brand and Infrastructure Impersonation engine, an updated platform that speeds investigations, and intelligence that meets defenders where they already work. Version 6.1 of the Silent Push platform focuses on protecting what matters most to organizations and accelerating what analysts do next.

Latest enhancements include an updated brand and infrastructure impersonation engine, a platform that makes investigations even faster, new integrations, and expanded global support. Reston, VA – Sept.