Apple is a organization tracked across 50 threat clusters and 155 intelligence report mentions on ThreatCluster. First observed November 4, 2025; most recent activity July 15, 2026.
A new zero-day vulnerability in Apple's WebKit, identified as CVE-2025-14174, has been confirmed and is actively being exploited. This follows the recent disclosure of another critical zero-day vulnerability in…
Apple has issued a warning to all iPhone users regarding critical zero-day security vulnerabilities that may have been exploited in targeted attacks. Users are advised to update their devices to protect against these…
Apple has issued emergency security updates to address two zero-day vulnerabilities that were actively exploited in targeted attacks. These flaws affected users of Apple products, prompting immediate action to safeguard…
Russian cyber group APT28, also known as Fancy Bear, has been exploiting vulnerabilities in TP-Link and MikroTik routers to conduct large-scale DNS hijacking operations. This campaign, which has affected over 18,000…
Void Dokkaebi, a North Korean threat actor, has escalated its malware distribution tactics by using fake job interviews to compromise software developers. This campaign, known as the 'Contagious Interview,' targets…
WhatsApp has filed a federal court contempt order against NSO Group for allegedly violating a permanent injunction that prohibits the spyware firm from targeting its users. The Meta-owned messaging platform disrupted…
A recent report from UK intelligence reveals that over 100 governments now have access to commercial spyware tools, a significant increase from 80 in 2023. These tools, such as NSO Group's Pegasus and Paragon's…
Russian authorities used Cellebrite's forensic tools to access the iPhone of political activist Andrey Pivovarov in June 2021, despite Cellebrite's announcement in March 2021 that it would cease sales to Russia. The…
The FBI has issued a warning regarding the Kali365 phishing kit, which is actively stealing Microsoft OAuth tokens and bypassing multi-factor authentication (MFA) protocols. First identified in April 2026, Kali365 is…
A North Korean cybercrime group known as Sapphire Sleet has launched a social engineering campaign targeting macOS users, as reported by Microsoft's Threat Intelligence unit. The campaign involves tricking users into…