Related Threat Clusters
-
Google Chrome Zero-Day Vulnerability CVE-2025-13223 Exploited in the Wild
Google has issued an emergency update to address a high-severity zero-day vulnerability, CVE-2025-13223, in its Chrome browser. This flaw, linked to the V8 JavaScript engine, allows attackers to execute arbitrary code…
54 articles · Updated November 24, 2025 -
Lazarus Group Exploits Windows Zero-Day to Target Defense Sector
The North Korean hacking group Lazarus exploited a zero-day vulnerability (CVE-2026-68820) in the Windows Ancillary Function Driver for WinSock (afd.sys) to gain SYSTEM-level access to defense sector systems. This…
33 articles · Updated August 12, 2026 -
Massive Ransomware Attack Targets Critical Infrastructure in March 2026
In March 2026, a sophisticated ransomware attack impacted multiple sectors, primarily targeting critical infrastructure organizations across the United States. The attack exploited vulnerabilities in several widely-used…
2 articles · Updated March 14, 2026 -
Russian Hackers Exploit Zimbra Zero-Day for Espionage Campaign
Since July 2025, Russian state-backed hackers, known as Laundry Bear, have exploited a zero-click vulnerability (CVE-2025-66376) in the Zimbra Collaboration Suite to infiltrate Western government and commercial…
82 articles · Updated July 23, 2026 -
Widespread DNS Poisoning Campaign Targets Hotel Wi-Fi to Steal Credentials
A DNS poisoning campaign has compromised hotel and conference center Wi-Fi gateways to steal Microsoft 365 login credentials from corporate travelers. The campaign has been active since at least June 2026, affecting…
73 articles · Updated July 24, 2026 -
Apple Alerts Users of Targeted Mercenary Spyware Attacks in 110 Countries
On August 13, 2026, Apple issued threat notifications to users in 110 countries, warning them of potential mercenary spyware attacks targeting their iPhones, iPads, or Macs. This marks a significant update in Apple's…
102 articles · Updated August 13, 2026 -
Russian FSB Exploits Vulnerable Routers to Target Critical Infrastructure
A joint advisory from 21 global cybersecurity agencies warns that Russian state hackers from the FSB's Center 16 are exploiting poorly configured routers to infiltrate critical infrastructure networks worldwide. The…
76 articles · Updated July 13, 2026 -
Operation Endgame Disrupts Evil Corp's SocGholish Malware Network
On June 18, 2026, international law enforcement agencies launched Operation Endgame, disrupting the SocGholish malware infrastructure linked to the Russian cybercrime group Evil Corp. The operation resulted in the…
67 articles · Updated June 18, 2026 -
Ghost CMS SQL Injection Exploits 700+ Sites in Ongoing ClickFix Campaign
A critical SQL injection vulnerability (CVE-2026-26980) in Ghost CMS is being actively exploited in a large-scale cyberattack affecting over 700 websites, including those of Harvard University, Oxford University, Auburn…
17 articles · Updated May 25, 2026 -
Jewelbug APT Group Engages in Espionage and Cryptocurrency Fraud
The Jewelbug APT group, based in China, has been conducting simultaneous cyber espionage and cryptocurrency fraud operations. Utilizing a single command-and-control platform named XG-Web, the group has compromised over…
15 articles · Updated August 13, 2026
Recent Intelligence Reports
- Meta removes fraud app ads in India, after being asked twice — Thenextweb · September 1, 2026
- Attackers Exploit Critical Langflow and Rails Flaws in Credential — Thehackernews · September 1, 2026
- Meta pulls ads after India raises cyberfraud concerns | The Arkansas Democrat — Arkansasonline · September 1, 2026
- Meta removes scam ads after India flags explicit — Livemint · September 1, 2026
- Meta Removes Malware-Laced Porn Ads After India Flags $2.4 Billion Fraud Threat — Finance.Biggo · September 1, 2026
- Meta removes ads for fraud apps posing as porn - Honolulu Star — Staradvertiser · September 1, 2026
- ValleyRAT: When Legitimate Software Becomes a Malware Delivery Tool — Securityaffairs.Co · August 31, 2026
- Hackers Hide ValleyRAT Backdoor Inside Adware Targeting Users in China and India — Cybersecuritynews · August 31, 2026