Related Threat Clusters
-
Exploitation of Remote Services in Cyber Attacks
Adversaries are increasingly leveraging external remote services like VPNs and Citrix to gain unauthorized access to networks. These attacks often involve using valid accounts obtained through credential harvesting or…
2 articles · Updated June 3, 2026 -
Exploitation of Client Software Vulnerabilities and User Execution Techniques
Recent cybersecurity reports detail the exploitation of software vulnerabilities in client applications, particularly targeting web browsers and Microsoft Office. Adversaries utilize techniques such as Drive-by…
2 articles · Updated June 8, 2026 -
Oncology Institute Data Breach Exposes Patient Data via Third-Party Vendor
On May 20, 2026, The Oncology Institute, Inc. was notified of unauthorized access to its systems by Kroll, a third-party vendor. The incident, confirmed in an SEC filing on May 22, 2026, involved patient data…
6 articles · Updated May 26, 2026 -
Cyber Adversaries Exploit File Enumeration and Data Collection Techniques
Recent reports detail the tactics employed by various cyber adversaries to enumerate files and directories on compromised systems. Adversaries utilize command shell utilities and custom tools to gather sensitive…
2 articles · Updated April 22, 2026
Recent Intelligence Reports
- T1021 — attack.mitre.org · July 4, 2026
- T1203 · Exploitation for Client Execution — attack.mitre.org · June 8, 2026
- External Remote Services — attack.mitre.org · June 3, 2026
- MITRE ATT&CK T1195 — attack.mitre.org · May 26, 2026
- T1005 — attack.mitre.org · April 22, 2026