Related Threat Clusters
-
Advanced Threat Actor Exploits Cisco and Citrix Zero-Day Vulnerabilities
An advanced persistent threat actor exploited zero-day vulnerabilities in Cisco Identity Service Engine and Citrix NetScaler products. The attacks utilized custom malware and were detected by Amazon's MadPot honeypot…
8 articles · Updated November 12, 2025 -
FortiWeb WAF Vulnerability Enables Full Admin Control Exploitation
A critical vulnerability in FortiWeb Web Application Firewall (WAF) has been actively exploited, allowing attackers to gain full administrative access to affected systems. Organizations using FortiWeb are at risk of…
100 articles · Updated November 15, 2025 -
North Korean Hackers Target Open Source Software Supply Chain via npm Packages
Amazon's threat intelligence has linked a series of compromises of popular npm packages—axios, debug, chalk, and typo-crypto—to a North Korean hacking group known as Sapphire Sleet. The group employed social engineering…
11 articles · Updated July 29, 2026 -
Amazon Q Developer Vulnerability Enables Cloud Credential Theft
A high-severity vulnerability (CVE-2026-12957) in Amazon Q Developer for Visual Studio Code allowed attackers to execute arbitrary code and steal AWS credentials by automatically loading malicious MCP server…
11 articles · Updated June 26, 2026 -
FBI Warns of Kali365 Phishing Kit Targeting Microsoft 365 Users
The FBI has issued a warning regarding the Kali365 phishing kit, which is actively stealing Microsoft OAuth tokens and bypassing multi-factor authentication (MFA) protocols. First identified in April 2026, Kali365 is…
135 articles · Updated May 22, 2026 -
Data Centers Targeted Amid Rising Cybersecurity Threats
Data centers have become high-value targets for cyber and physical attacks, highlighted by drone strikes on Amazon Web Services facilities in March 2026. These incidents, attributed to Iranian forces, resulted in…
7 articles · Updated April 30, 2026 -
Iran Targets Data Centers Amid Rising Cyber Warfare Tensions
Iran has begun targeting data centers in the Middle East, specifically in the UAE and Bahrain, in retaliation for US military actions. The attacks are part of a broader strategy, with Iran naming 18 tech firms,…
2 articles · Updated April 8, 2026 -
US Military Targets Iran's Nuclear Complex Amid Escalating Conflict
US President Donald Trump announced imminent military strikes on Iran's underground nuclear site, Pickaxe Mountain, amid ongoing hostilities. Iran has responded with attacks on US interests in the region, including…
3 articles · Updated July 22, 2026 -
Iran Threatens OpenAI's $30 Billion Stargate AI Data Center in UAE
Iran has publicly threatened to target OpenAI's Stargate AI data center in Abu Dhabi, a key facility in the region valued at $30 billion. The threats were issued by the Islamic Revolutionary Guard Corps (IRGC) in…
3 articles · Updated April 6, 2026 -
Global Takedown of Tycoon2FA Phishing Service Disrupts Major Cybercrime Operation
A coordinated international effort led by Microsoft and Europol has dismantled Tycoon2FA, a significant phishing-as-a-service platform responsible for bypassing multi-factor authentication and enabling large-scale…
59 articles · Updated March 5, 2026
Recent Intelligence Reports
- BengalSEO Poisons Bing Search Results to Deliver MayaBot and Tech Support Scams — Thehackernews · September 8, 2026
- LLMjacking Attack Abuses Leaked AWS Credentials to Hijack Amazon Bedrock AI Models — Gbhackers · September 4, 2026
- Gambling Goblin Turns Brazilian Government Sites Into SEO Weapons — Infosecurity-Magazine · September 2, 2026
- Malicious Apache Modules Hijack Brazilian Government Site Traffic to Push Betting Pages — Thehackernews · September 2, 2026
- CVE-2026-12957 in the Amazon Q Developer extension — www.wiz.io · August 25, 2026
- Agentic AI Security: Credentials and Permissions Define the Blast Radius — Blog.Gitguardian · August 25, 2026
- PavinLoader Malware Spreads via ClickFix and Fake Download Campaigns — Technadu · August 25, 2026
- Extended Rapid Response: Zimperium Identifies RecruitTrap Recruit Scams are Targeting ... — Zimperium · August 24, 2026