Skip to main content
Mallory
Back to intelligence

Trending Products

The software products the security industry is discussing right now. Ranked by mention velocity across vulnerability disclosures, vendor advisories, and threat intelligence — refreshed continuously.

Ranked by Mallory's mention-velocity model across sources.

Mention map — Last week

Sized by mentions
Tile size: mentions · Color: mention volume·HighestHighMediumLowLowest

Top 24 products — Last week

#1Android
Operating System

Android is Google’s mobile operating system used on smartphones, tablets, and related device classes. In the provided content it is referenced as the platform affected by multiple 2026 vulnerabilities, the target environment for Android banking malware such as Rokarolla, and the recipient of June 2026 Google system updates delivered through Google Play services, the Play Store, and Google Play system updates. The content also indicates Android’s integration with Google services and highlights platform security mechanisms and controls such as Google Play Protect, device settings, NFC, package management, telephony components, Accessibility Services, and support for system-level feature rollouts outside full OS upgrades.

Mentions61VendorGoogle
#2Windows
Operating System

Microsoft Windows is a family of operating systems developed by Microsoft for personal computers, servers, and other endpoint platforms. In the provided content, Windows is referenced as the host operating system targeted or supported by numerous tools, malware families, exploits, detections, and applications, including Windows services, scheduled tasks, Sysmon telemetry, Microsoft Defender components, and executable program support. The references indicate modern Windows environments used for desktop execution, privilege escalation research, malware persistence, endpoint detection, and system administration contexts.

Mentions56VendorMicrosoft Corporation
#3Telegram
Messaging Platform

Telegram is a cloud-based instant messaging and social communication platform used for one-to-one chats, group messaging, channels, bots, voice and video communication, and large-scale content distribution. It is widely used on mobile and desktop platforms and supports public and private groups, broadcast channels, file sharing, and automated interactions through bot accounts and APIs. In the provided content, Telegram is referenced both as a mainstream messaging service and as infrastructure abused by threat actors for fraud coordination, phishing follow-up, credential and data exfiltration via bots, and distribution of illicit content. The content also notes platform features such as message editing and self-destructing or ephemeral messaging behavior in competitive comparisons.

Mentions43VendorTelegram
#4Wordpress
Content Management System (CMS)

WordPress is a widely used open-source content management system (CMS) for building and managing websites. The provided content identifies it as the underlying platform for a large ecosystem of plugins and themes, and references core WordPress functionality such as wp-config.php, XML-RPC, the REST API, user roles and capabilities, themes, plugins, and administrative interfaces. It is used to power websites ranging from blogs to more complex web applications, and its extensibility through plugins and themes is a central characteristic reflected throughout the source material.

Mentions41VendorWordpress
#5Github
Code Hosting Platform

GitHub is a cloud-based software development and source code hosting platform used to store, manage, review, and collaborate on code repositories. It is widely used for version-controlled development workflows, open-source collaboration, issue tracking, pull requests, and integration with broader developer tooling and CI/CD ecosystems. The provided content also references GitHub as the operator of npm and as a platform used by developers, organizations, and attackers alike for hosting repositories, distributing code, and integrating with services such as IDEs, terminals, Slack, and cloud workflows.

Mentions39VendorGitHub
#6Claude
Large Language Model / AI Assistant

Claude is Anthropic’s family of large language models and AI assistant products. The provided content describes Claude as a frontier generative AI platform used for conversational assistance, coding, software engineering, and enterprise workflows. It is referenced in multiple model variants and plans, including consumer tiers such as Claude Free, Pro, and Max, as well as higher-capability models such as Opus, Sonnet, Fable, and Mythos. The content also references Claude Code, Anthropic’s coding-agent offering, available through terminal, IDE extension, desktop, mobile, Slack, and cloud interfaces. Claude is used both as a general-purpose chatbot and as a more agentic system for tasks such as code review, vulnerability discovery, and integration with third-party services.

Mentions36VendorAnthropic
#7Chatgpt
AI chatbot / generative AI assistant

ChatGPT is OpenAI’s generative AI chatbot and assistant platform. It provides conversational access to large language models for question answering, content generation, coding assistance, summarization, and other interactive AI tasks. Based on the provided content, ChatGPT is available as a consumer and enterprise product, can be accessed via subscription tiers and API-connected tooling, and is being extended with more proactive and agentic capabilities such as Scheduled Tasks. The content also indicates ChatGPT is used across consumer, enterprise, and government contexts, including planned deployment through the U.S. Department of Defense’s GenAI.mil platform.

Mentions34VendorOpenai
#8Firefox
Web Browser

Mozilla Firefox is Mozilla’s cross-platform web browser for desktop and mobile platforms. The provided content describes Firefox as a privacy-focused browser with built-in tracking protections and Enhanced Tracking Protection, regular stable and ESR release channels, and support across desktop, Android, and iOS. Recent referenced capabilities include tab groups on desktop and Android, a redesigned settings interface, PDF editing improvements, customizable keyboard shortcuts, optional AI-assisted features such as Quick Answers and Smart Window, experimental JPEG XL support, HDR video support on Windows and Linux, and ongoing work on web standards and browser safety protections. The content also references Firefox’s use of the Rust-based zlib-rs library for Gzip compression/decompression beginning with Firefox 151 to improve memory safety and performance.

Mentions31VendorMozilla
#9Windows 11
Operating System

Windows 11 is Microsoft's desktop client operating system for personal computers. In the provided context it appears as an affected platform for multiple security issues, update-installation problems, and compatibility scenarios, including local privilege escalation vulnerabilities, Microsoft Defender issues, and host-platform compatibility with virtualization software. The context also references feature-update branches such as Windows 11 24H2 and 25H2, ARM-based hosts, and Windows 11 Pro systems, indicating broad deployment across consumer and professional environments.

Mentions31VendorMicrosoft Corporation
#10Whatsapp
Messaging Application

WhatsApp is a cross-platform messaging and communications application operated by Meta. Based on the provided content, it is used for private and group messaging and supports communications features including chats, calls, contacts, backups, and privacy-oriented message handling. The content specifically references WhatsApp as a messaging service used for personal, business, and government communications; support for WhatsApp backups managed through Android device settings; existing 'View Once' functionality for photos, videos, and voice notes; and testing of a 'View Once' capability for text messages on iPhone and Android beta versions. The content also shows WhatsApp being used as a communication channel in fraud and social-engineering workflows and being targeted by Android malware for theft of contact and message-related data.

Mentions28VendorMeta Platforms
#11Microsoft 365
Cloud productivity and collaboration suite

Microsoft 365 is Microsoft’s cloud-based productivity and collaboration suite for organizations and individuals. Based on the provided content, it encompasses services such as Outlook, Teams, OneDrive, SharePoint, Microsoft Graph-connected identity and SaaS workflows, unified audit logging, and Microsoft 365 Copilot/Copilot Enterprise Search. It is used for email, messaging, meetings, file storage and sharing, document collaboration, enterprise search across tenant data, and broader workplace and security-integrated workflows. The content also indicates that Microsoft 365 integrates with Entra ID, Defender, OAuth-connected third-party applications, and device-code/OAuth authentication flows, making it a central SaaS platform in many enterprise environments.

Mentions26VendorMicrosoft Corporation
#12Claude Code
AI coding agent / developer tool

Claude Code is Anthropic’s AI coding agent and developer assistant, centered on a command-line interface and broader developer tooling ecosystem. The provided content describes it as a programming-focused agent that can generate and review code, read local files, execute system commands, initiate network requests within a controlled environment, and interact with external tools and MCP servers. It is used both interactively by developers and as an automation component in workflows such as CI/CD analysis, reverse engineering support, and vulnerability research. The content also indicates Claude Code is available in terminal form and has related integrations or clients across IDE, desktop, mobile, Slack, and cloud environments. It can be run locally on a workstation, can be configured to use Anthropic API credentials, and in some setups can be used with local LLM backends via tools such as Ollama or Unsloth. The material also shows Claude Code being used for agentic, multi-step coding and analysis tasks, including code generation, source analysis, call-graph generation, SQLite export of analysis results, CI/CD workflow review, and kernel/security research.

Mentions25VendorAnthropic
#13Windows 10
Operating System

Windows 10 is a Microsoft client operating system for desktop and laptop computers. In the provided content it is referenced as an affected platform for multiple security issues and proof-of-concept exploits, including local privilege escalation vulnerabilities in core Windows components and Microsoft Defender, as well as a supported operating system for various kernel-driver abuse and BYOVD scenarios. The content also notes its use as a guest operating system in Oracle VM VirtualBox.

Mentions24VendorMicrosoft Corporation
#14Splunk Enterprise
Security analytics and log management platform

Splunk Enterprise is Splunk’s on-premises log management, search, and analytics platform used to ingest, index, search, monitor, and analyze machine data from diverse sources. In the provided content, it appears as the core Splunk instance on which apps and add-ons such as Splunk AI Toolkit run, and as the platform used to ingest datasets, configure sourcetypes, and execute security analytics and detections. The content also reflects its use as the underlying data and analytics platform for security monitoring workflows, including log onboarding, replay of test datasets, and execution of detection content.

Mentions23VendorSplunk
#15Microsoft Defender
Endpoint Protection Platform / Antivirus

Microsoft Defender is Microsoft’s built-in endpoint security product for Windows that provides antivirus and malware protection through the Microsoft Malware Protection Engine. In the provided context, it is referenced as the affected product for multiple local privilege escalation and abuse scenarios, including the RoguePlanet zero-day (CVE-2026-50656), and as a defensive control that supports exclusions, detections, incident investigation, and integration with Microsoft Security Copilot. The content also references Defender components and artifacts such as the MsMpEng.exe service process, signature update packages like mpam-fe*.exe, support logs (MPLog), real-time protection behavior, passive mode, and Defender offline scan workflows.

Mentions22VendorMicrosoft Corporation
#16Gmail
Email service / Webmail platform

Gmail is Google’s email service and client application, offered as a consumer webmail platform and as part of Google Workspace / Google Mobile Services. In the provided content, Gmail appears both as an end-user email platform targeted in phishing campaigns and as a Google application included in Google Mobile Services. The content also references attacker use of Gmail accounts for exfiltration and phishing operations, indicating Gmail’s role as a hosted email service with account-based access and integration into Google’s broader ecosystem.

Mentions22VendorGoogle
#17Fortigate
Network Firewall / Secure Access Gateway

Fortinet FortiGate is a family of network security appliances from Fortinet that function primarily as firewalls and secure access gateways. In the provided content, FortiGate devices are described as exposing administrative interfaces and SSL VPN services, storing configuration data that can include administrator accounts, VPN credentials, and other integrated authentication material, and running the FortiOS operating system. The product is used as perimeter network infrastructure and remote-access infrastructure, with management interfaces and SSL VPN endpoints commonly deployed on internet-facing systems.

Mentions20VendorFortinet
#18Active Directory
Directory Service / Identity and Access Management

Microsoft Active Directory is a directory service and identity management platform used in Windows domain environments to provide centralized authentication, authorization, and administration of users, computers, groups, policies, and other network resources. In the provided content it is referenced as the internal domain environment that attackers pivot into after obtaining credentials, as a source of enterprise asset and account data, and as an authoritative identity source integrated with other platforms. The content also references core Active Directory and Kerberos concepts such as domains/realms, principals, Service Principal Names (SPNs), domain controllers, LDAP, password policies, service accounts, and centralized authentication.

Mentions20VendorMicrosoft Corporation
#19Discord
Communication Platform

Discord is a proprietary real-time communication and social platform centered on text, voice, and video conversations. It is commonly used through servers, channels, direct messages, and community spaces, and is widely adopted by gaming communities as well as broader online groups. In the provided content, Discord appears both as a legitimate collaboration/social platform and as infrastructure or a target in multiple security contexts, including credential theft, session-token theft, malicious JavaScript injection into the desktop client, abuse of Discord servers and the Discord content delivery network for malware distribution, and social-engineering campaigns conducted through direct messages and community servers.

Mentions20VendorDiscord
#20Tiktok
Social Media Platform

TikTok is a social media platform centered on user-generated short-form video creation, sharing, and discovery. In the provided content, it is referenced as a widely recognized consumer application and social platform, including as a lure impersonated by Android malware distributors and as a major platform discussed in policy and influence-operation contexts. The content also notes that TikTok is owned by ByteDance and is one of ByteDance’s international products.

Mentions20VendorTikTok
#21Docker
Containerization Platform

Docker is a containerization platform used to build, package, distribute, and run applications in isolated containers. It provides a standard workflow for creating container images, launching containers from those images, exposing ports, mounting volumes, and supplying runtime configuration such as environment variables. In the provided content, Docker appears in contexts including running PostgreSQL and Debian containers with `docker run`, supporting Dockerized application deployments, handling Docker credentials, using Docker for development isolation, and operating container-based infrastructure alongside related technologies such as Kubernetes and Podman.

Mentions20VendorDocker
#22Openclaw
AI agent platform

OpenClaw is an open source, self-hosted AI agent and personal assistant platform that connects large language models to messaging platforms, local systems, and third-party services. The product is described as supporting integrations with platforms such as WhatsApp, Telegram, Discord, iMessage, Slack, Matrix, Microsoft Teams, QQBot, and Zalo, and can interact with local file systems, execute shell commands, manage email and calendars, browse the web, call external APIs, and automate multi-step workflows. It also integrates with external tools and applications through the Model Context Protocol (MCP) and a skills marketplace referred to as ClawHub. The available content further indicates that OpenClaw includes features such as hook-triggered automated agent runs, WebSocket-based control and node pairing, approval workflows, allowlist-based command controls, and support for native commands and shell execution.

Mentions19VendorOpenclaw
#23Ios
Operating System

iOS is Apple’s mobile operating system for iPhone. The provided content references multiple iOS releases and features, including iOS 17.3, iOS 17.4, iOS 26.5.1, iOS 26.5.2, iOS 26.6, and iOS 27 beta, and describes platform behaviors and security controls such as app distribution restrictions, browser engine requirements, privacy settings, tracking controls, and Stolen Device Protection. The content indicates that iOS provides system settings for privacy and security management, supports biometric authentication via Face ID or Touch ID, integrates Apple services such as Find My iPhone and Keychain, and enforces platform-level controls over browsers and app installation. It is also referenced as a target platform for both legitimate applications and mobile malware/spyware, reflecting its role as a mainstream smartphone operating system.

Mentions18VendorApple
#24Iphone
Smartphone

Apple iPhone is a line of smartphones developed by Apple. In the provided content, it is referenced as a core Apple end-user device platform alongside iPad and Mac, used for mobile applications, Bluetooth accessory pairing and firmware delivery, security features, and Apple ecosystem services. The content specifically associates iPhone with iOS, App Store app distribution, Bluetooth peripheral management, Apple Intelligence features, device security controls such as Stolen Device Protection, and support for location and proximity capabilities such as Bluetooth Channel Sounding on newer hardware.

Mentions17VendorApple