Phoenix is a organization tracked across 6 threat clusters and 8 intelligence report mentions on ThreatCluster. First observed January 19, 2026; most recent activity July 24, 2026.
Iran-affiliated hackers have expanded their attacks on U.S. critical infrastructure, targeting programmable logic controllers (PLCs) from Siemens and Schneider Electric, in addition to Rockwell Automation systems. The…
A new Android malware named Perseus has been identified, actively targeting user notes to extract sensitive information such as passwords and financial data. Distributed via unofficial app stores disguised as IPTV…
Nozomi Networks Labs identified a privilege escalation vulnerability chain in the Phoenix PLCnext AXC F 3152 industrial controller, allowing low-privileged users to gain root access. The vulnerabilities stem from…
In Q1 2026, Kaspersky reported over 2.67 million mobile attacks, with a significant rise in banking Trojans. The number of unique users targeted remained stable despite a drop in total attacks. Banking Trojan packages…
TP-Link has patched a critical vulnerability, CVE-2026-0629, affecting over 60 models of its VIGI C and VIGI InSight cameras. The flaw allowed local attackers to bypass authentication in the password recovery feature,…
At the Pwn2Own Automotive 2026 competition in Tokyo, security researchers successfully hacked Tesla's infotainment system, exploiting 37 zero-day vulnerabilities and earning $516,500 on the first day. The event, which…