Frequency
3
occurrences
First Seen
November 5, 2025
Last Seen
July 24, 2026
Related Threat Clusters
-
Russian Hackers Exploit Zimbra Zero-Day for Espionage Campaign
Since July 2025, Russian state-backed hackers, known as Laundry Bear, have exploited a zero-click vulnerability (CVE-2025-66376) in the Zimbra Collaboration Suite to infiltrate Western government and commercial…
82 articles · Updated July 23, 2026 -
APT28 Exploits Roundcube Vulnerabilities in Targeted Cyber Espionage Campaign
APT28 (Fancy Bear) has been linked to Operation Roundish, utilizing a comprehensive Roundcube exploitation toolkit against Ukrainian government targets. The toolkit, discovered in January 2026, includes XSS payloads, a…
3 articles · Updated July 23, 2026 -
Google GTIG Reports Shift in AI Misuse by Cyber Adversaries
The Google Threat Intelligence Group (GTIG) has identified a new operational phase of AI abuse, where adversaries are deploying AI-enabled malware in live operations. This shift indicates that threat actors are moving…
3 articles · Updated November 5, 2025
Recent Intelligence Reports
- Operation Roundish — hunt.io · July 24, 2026
- Google warns of AI misuse in new GTIG threat report — Securitybrief.Au · November 5, 2025
- GTIG AI Threat Tracker: Advances in Threat Actor Usage of AI Tools — Mandiant · November 5, 2025