Related Threat Clusters
-
Critical Remote Code Execution Vulnerability Exploited by China-Nexus Actor
On April 3, 2025, Ivanti disclosed CVE-2025-22457, a critical buffer overflow vulnerability affecting Ivanti Connect Secure and other products. The vulnerability allows unauthenticated remote code execution, and…
2 articles · Updated June 17, 2026 -
Operation Escaneo Targets Latin American Critical Infrastructure
Operation Escaneo is a coordinated cyberattack attributed to the MexicanMafia group, targeting critical infrastructure across Latin America, primarily Mexico. The campaign, which spanned from 2025 to 2026, utilized…
4 articles · Updated June 18, 2026 -
Ransomware Fuels Surge in Global Cyberattacks
As of February 12, 2026, organizations worldwide are experiencing an average of 2,090 cyber-attacks per week, largely driven by ransomware incidents. This increase highlights the ongoing challenges faced by businesses…
1917 articles · Updated February 12, 2026 -
WARP PANDA Cyber-Espionage Targets US Legal and Tech Sectors
CrowdStrike has reported on WARP PANDA, a China-linked cyber-espionage group targeting North American legal, technology, and manufacturing firms throughout 2025. The group specializes in covert operations within…
3 articles · Updated December 5, 2025
Recent Intelligence Reports
- Mandiant and Google's Threat Intelligence Group documented — cloud.google.com · July 29, 2026
- Operation Escaneo Signals Shift in LatAm Threat Landscape — Darkreading · June 18, 2026
- LATAM Infrastructure Hit by Fortinet and Ivanti Exploits — Infosecurity-Magazine · June 18, 2026
- Operation Escaneo: Infrastructure Exposure, TTP Analysis, and Attribution Assessment of an ... — Cloudsek · June 17, 2026
- Microsoft links Medusa ransomware affiliate to zero — Bleepingcomputer · April 6, 2026
- WARP PANDA cyberespionage group targets US cloud networks — Securitybrief.Au · December 5, 2025