Related Threat Clusters
-
New WebKit Zero-Day CVE-2025-14174 Discovered and Exploited
A new zero-day vulnerability in Apple's WebKit, identified as CVE-2025-14174, has been confirmed and is actively being exploited. This follows the recent disclosure of another critical zero-day vulnerability in…
1 article · Updated December 16, 2025 -
Apple Alerts iPhone Users of Critical Zero-Day Vulnerabilities
Apple has issued a warning to all iPhone users regarding critical zero-day security vulnerabilities that may have been exploited in targeted attacks. Users are advised to update their devices to protect against these…
4 articles · Updated December 31, 2025 -
Apple Addresses Two Zero-Day Vulnerabilities in Security Update
Apple has issued emergency security updates to address two zero-day vulnerabilities that were actively exploited in targeted attacks. These flaws affected users of Apple products, prompting immediate action to safeguard…
1 article · Updated December 28, 2025 -
Apple Alerts Users of Targeted Mercenary Spyware Attacks in 110 Countries
On August 13, 2026, Apple issued threat notifications to users in 110 countries, warning them of potential mercenary spyware attacks targeting their iPhones, iPads, or Macs. This marks a significant update in Apple's…
102 articles · Updated August 13, 2026 -
APT28 Exploits Vulnerable Routers for Global DNS Hijacking Campaign
Russian cyber group APT28, also known as Fancy Bear, has been exploiting vulnerabilities in TP-Link and MikroTik routers to conduct large-scale DNS hijacking operations. This campaign, which has affected over 18,000…
100 articles · Updated April 7, 2026 -
Coruna and DarkSword iOS Exploit Kits Targeting Users Globally
The Coruna and DarkSword iOS exploit kits, initially limited to nation-state actors, are now being widely adopted by organized cybercriminals. iVerify has tracked around 17,000 domains associated with second-generation…
3 articles · Updated August 10, 2026 -
Void Dokkaebi's Malware Campaign Exploits Developer Repositories via Fake Job Interviews
Void Dokkaebi, a North Korean threat actor, has escalated its malware distribution tactics by using fake job interviews to compromise software developers. This campaign, known as the 'Contagious Interview,' targets…
22 articles · Updated April 22, 2026 -
WhatsApp Files Contempt Against NSO Group for New Spyware Attacks
WhatsApp has filed a federal court contempt order against NSO Group for allegedly violating a permanent injunction that prohibits the spyware firm from targeting its users. The Meta-owned messaging platform disrupted…
62 articles · Updated June 8, 2026 -
Global Surge in Government Access to Commercial Spyware Threatens Privacy
A recent report from UK intelligence reveals that over 100 governments now have access to commercial spyware tools, a significant increase from 80 in 2023. These tools, such as NSO Group's Pegasus and Paragon's…
48 articles · Updated April 22, 2026 -
Cellebrite Tools Used by Russia to Hack Political Activist's Phone Despite Contract Cancellation
Russian authorities used Cellebrite's forensic tools to access the iPhone of political activist Andrey Pivovarov in June 2021, despite Cellebrite's announcement in March 2021 that it would cease sales to Russia. The…
22 articles · Updated June 25, 2026
Recent Intelligence Reports
- Extended Rapid Response: Zimperium Identifies RecruitTrap Recruit Scams are Targeting ... — Zimperium · August 24, 2026
- Cl0p explota falla crítica en software PLM — más de 40 empresas industriales comprometidas — Ciberseguridadlatam · August 22, 2026
- Untitled report — Ciberseguridadlatam · August 22, 2026
- Investigators Say the Number of Apple Users Receiving Spyware Alerts Recently Is "unprecedented." — unsafe.sh · August 18, 2026
- DeFiLlama Founder 0xngmi Says Apple Removed Fake App After Wallet Was Drained — Newscord · August 17, 2026
- Hackers impersonate PayPal and Apple with new real-time phishing kit — Cybernews · August 16, 2026
- fG!'s pre-auth PoC blog post — reverse.put.as · August 16, 2026
- U.S. courts to show when government uses spyware — Al · August 15, 2026