Operation Zero — Campaign Analysis & Threat Activity

Threat entity extracted from intelligence sources

Frequency
17
occurrences
First Seen
October 29, 2025
Last Seen
August 13, 2026

Related Threat Clusters

  • DarkSword iOS Exploit Chain Targets Mobile Devices Globally

    The Google Threat Intelligence Group has identified DarkSword, a full-chain iOS exploit affecting versions 18.4 to 18.7. This exploit leverages multiple zero-day vulnerabilities, including CVE-2025-31277 and…

    2 articles · Updated July 11, 2026
  • Coruna and DarkSword iOS Exploit Kits Targeting Users Globally

    The Coruna and DarkSword iOS exploit kits, initially limited to nation-state actors, are now being widely adopted by organized cybercriminals. iVerify has tracked around 17,000 domains associated with second-generation…

    3 articles · Updated August 10, 2026
  • Former L3Harris Executive Pleads Guilty to Selling Cyber Exploits to Russia

    Peter Williams, a 39-year-old former general manager at L3Harris Trenchant, pleaded guilty to stealing and selling sensitive cybersecurity tools to a Russian broker. The U.S. Department of Justice reported that Williams…

    2 articles · Updated November 3, 2025
  • Trenchant CEO Sold Hacking Tools to Russian Broker, DOJ Reports

    Peter Williams, the former CEO of Trenchant, a U.S. defense contractor, pleaded guilty to selling eight hacking tools capable of compromising millions of computers globally. The tools were stolen from Trenchant, which…

    35 articles · Updated February 11, 2026
  • Coruna iOS Exploit Kit Targets Multiple Threat Actors

    The Coruna iOS exploit kit has emerged, targeting Apple iPhone models running iOS 13.0 to 17.2.1. It includes five exploit chains and 23 exploits, with advanced techniques that are non-public. Various threat actors,…

    372 articles · Updated March 3, 2026
  • U.S. Sanctions Target Russian Zero-Day Exploit Brokers

    The U.S. Treasury announced sanctions against two companies and their founders involved in acquiring and reselling zero-day exploits, which are vulnerabilities in software that can be exploited by hackers. An Australian…

    25 articles · Updated February 24, 2026
  • India Launches New Cyber Security Guidelines for Space Sector

    India has introduced new cyber security guidelines aimed at enhancing the protection of its space sector, particularly focusing on satellite and ground infrastructure. The framework was developed collaboratively by the…

    7 articles · Updated February 27, 2026
  • Former L3Harris Executive Pleads Guilty to Selling Cyber Exploits to Russia

    Peter Williams, a 39-year-old Australian national and former general manager at L3Harris Trenchant, pleaded guilty to stealing and selling sensitive cyber exploit components to a Russian broker. The stolen materials…

    12 articles · Updated November 4, 2025
  • Former L3Harris Executive Pleads Guilty to Selling Trade Secrets to Russian Broker

    Peter Williams, a 39-year-old Australian national and former general manager at L3Harris's Trenchant division, pleaded guilty to two counts of theft of trade secrets. He sold sensitive cyber exploit components, intended…

    8 articles · Updated October 31, 2025

Recent Intelligence Reports

  • Darksword — www.lookout.com · August 13, 2026
  • Potential US-built hacking tools obtained by foreign spies and cybercriminals, research says — Nextgov · March 3, 2026
  • The Cyber Express Weekly Roundup: Space Security, Malware & Regulatory Alerts — Thecyberexpress · February 27, 2026
  • Australian sentenced to jail for selling US security secrets — Ia.Acs.Au · February 25, 2026
  • US Sanctions Russian Exploit Broker Over Stolen US Cyber Tools — Hackread · February 25, 2026
  • Cyber Espionage for Crypto? U.S. Sanctions Russian Firm — Crypto-Economy · February 25, 2026
  • U.S. Sanctions Russian Broker Over Zero — Thecyberexpress · February 25, 2026
  • US Sanctions Network of Exploit Brokers That Stole US Government Cyber Tools — Cybersecuritynews · February 25, 2026

CVSS v3.1 Breakdown