Related Threat Clusters
-
RondoDox Botnet Targets React2Shell Flaw to Spread Malware
The RondoDox botnet is exploiting the React2Shell vulnerability (CVE-2025-55182) to infect vulnerable .js servers with malware and cryptominers. This ongoing campaign has been active for nine months, primarily targeting…
12 articles · Updated January 1, 2026 -
Lazarus Group Exploits Windows Zero-Day to Target Defense Sector
The North Korean hacking group Lazarus exploited a zero-day vulnerability (CVE-2026-68820) in the Windows Ancillary Function Driver for WinSock (afd.sys) to gain SYSTEM-level access to defense sector systems. This…
33 articles · Updated August 12, 2026 -
Russian FSB Exploits Vulnerable Routers to Target Critical Infrastructure
A joint advisory from 21 global cybersecurity agencies warns that Russian state hackers from the FSB's Center 16 are exploiting poorly configured routers to infiltrate critical infrastructure networks worldwide. The…
76 articles · Updated July 13, 2026 -
Operation Endgame Disrupts Evil Corp's SocGholish Malware Network
On June 18, 2026, international law enforcement agencies launched Operation Endgame, disrupting the SocGholish malware infrastructure linked to the Russian cybercrime group Evil Corp. The operation resulted in the…
67 articles · Updated June 18, 2026 -
CISA Alerts on Critical Flaws in SimpleHelp, Samsung MagicINFO, and D-Link Devices
On April 24, 2026, CISA added four actively exploited vulnerabilities to its Known Exploited Vulnerabilities catalog. The affected products include SimpleHelp remote management software, Samsung MagicINFO 9 Server, and…
3 articles · Updated April 26, 2026 -
GCHQ Warns of Escalating Russian Cyber Threats to UK Infrastructure
In a recent speech, Anne Keast-Butler, head of GCHQ, warned that Russia is engaging in daily hybrid warfare against the UK, targeting critical infrastructure, democratic processes, supply chains, and public trust. She…
75 articles · Updated May 26, 2026 -
Jewelbug APT Group Engages in Espionage and Cryptocurrency Fraud
The Jewelbug APT group, based in China, has been conducting simultaneous cyber espionage and cryptocurrency fraud operations. Utilizing a single command-and-control platform named XG-Web, the group has compromised over…
15 articles · Updated August 13, 2026 -
Cybercrime Surge of 245% Linked to Iran War Escalation
Since the onset of the Iran war, cybercrime has surged by 245%, as reported by Akamai. The banking and fintech sectors are the most affected, accounting for 40% of the malicious traffic, followed by e-commerce (25%) and…
2 articles · Updated March 16, 2026 -
CISA Releases Zero Trust Guidance for Securing OT Against Cyber Threats
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has published a new guide titled 'Adapting Zero Trust Principles to Operational Technology' to assist organizations in implementing zero trust…
9 articles · Updated April 30, 2026 -
Google and FBI Disrupt NetNut Proxy Network Linked to 2 Million Devices
On July 3, 2026, Google, in coordination with the FBI and other partners, disrupted the NetNut residential proxy network, also known as the Popa botnet. This operation targeted over 2 million compromised consumer…
54 articles · Updated July 2, 2026
Recent Intelligence Reports
- Looking Beyond The Numbers Understanding Malicious Domain Registration Data 10 08 2026 En — www.icann.org · August 31, 2026
- Cloudflare Introduces Adaptive Intelligence; Reverses the Economics of Automated Cyber Attacks — Cloudflare · August 31, 2026
- DNS Abuse and Criminal Infrastructure — News.Ycombinator · August 30, 2026
- online operatives used fake accounts and artificial intelligence tools to spread messages against U.S. data centers — www.foxbusiness.com · August 29, 2026
- X uncovers 200000 Chinese bot accounts | brief — Scworld · August 29, 2026
- Two TeamPCP members arrested in Australia — News.Risky.Biz · August 28, 2026
- China rejects US hacking claims — Channelnewsasia · August 27, 2026
- US shuts down China-linked hacking tools accused of targeting NASA, federal agencies — Fox5Ny · August 27, 2026