Trenchant — Cyber Attacks, Breaches & Threat Activity

Threat entity extracted from intelligence sources

Frequency
7
occurrences
First Seen
October 29, 2025
Last Seen
May 21, 2026

Trenchant is a organization tracked across 5 threat clusters and 7 intelligence report mentions on ThreatCluster. First observed October 29, 2025; most recent activity May 21, 2026.

Overview

Trenchant is a cybersecurity/exploit broker unit linked to L3Harris Technologies. It was implicated in the development and sale of zero-day exploits to clients, including a Russian broker, with its former executives facing guilty pleas—highlighting the legal and geopolitical risks surrounding private-sector handling of offensive cyber capabilities.

Related Threat Clusters

Recent Intelligence Reports

  • Compromised art-template npm Package Delivers Coruna-Like iOS Exploit — Technadu · May 21, 2026
  • Australian sentenced to jail for selling US security secrets — Ia.Acs.Au · February 25, 2026
  • DOJ says Trenchant boss sold exploits to Russian broker capable of accessing ‘millions of computers and devices’ — Techcrunch · February 11, 2026
  • Former Trenchant CEO Admits Selling Zero-Day Exploits to Russia | Ukraine news - Межа — Mezha · November 3, 2025
  • How an ex — Techcrunch · November 3, 2025
  • Ex-L3Harris exec pleads guilty to selling zero-day exploits to Russian broker — Cyberscoop · October 29, 2025
  • Former L3Harris Trenchant boss pleads guilty to selling zero — Techcrunch · October 29, 2025

CVSS v3.1 Breakdown