Related Threat Clusters
-
Microsoft SharePoint Attacks: Over 400 Victims Including US Agencies
A series of attacks exploiting zero-day vulnerabilities in Microsoft SharePoint has compromised over 400 organizations, including multiple US government agencies. The attacks, attributed to Chinese threat groups such as…
2 articles · Updated August 12, 2026 -
FortiWeb WAF Vulnerability Enables Full Admin Control Exploitation
A critical vulnerability in FortiWeb Web Application Firewall (WAF) has been actively exploited, allowing attackers to gain full administrative access to affected systems. Organizations using FortiWeb are at risk of…
100 articles · Updated November 15, 2025 -
Warlock Ransomware Group Enhances Attack Techniques with BYOVD and Remote Access Tools
The Warlock ransomware group, also known as Water Manaul, has escalated its attack methods by exploiting unpatched Microsoft SharePoint servers and employing new tactics for persistence and lateral movement. Recent…
5 articles · Updated March 16, 2026 -
Critical RCE Vulnerability in BeyondTrust Software Requires Immediate Patching
BeyondTrust has issued a warning regarding a critical remote code execution (RCE) vulnerability in its Remote Support and Privileged Remote Access software. The flaw, tracked as CVE-2026-1731, allows unauthenticated…
1495 articles · Updated February 9, 2026 -
Rise of AI-Driven Scams Targeting UK SMEs
UK small and medium-sized enterprises (SMEs) are increasingly vulnerable to sophisticated AI-driven scams, as highlighted by recent reports. The emergence of 'AI scams 2.0' combines traditional social engineering…
860 articles · Updated March 12, 2026 -
Old Vulnerabilities Persist Amid AI Advancements
Organizations face heightened risks from old vulnerabilities as the AI era progresses. A recent study by TrendAI™ Research highlights that cybercriminals continue to exploit long-disclosed vulnerabilities, with the…
2 articles · Updated March 25, 2026 -
North Korean Lazarus Group Targets US Healthcare with Medusa Ransomware
Cybersecurity researchers have identified attacks utilizing Medusa ransomware, attributed to the Lazarus group, a North Korean state-backed hacking operation. These attacks are primarily targeting U.S. healthcare…
20 articles · Updated February 24, 2026 -
Shift in Ransomware Tactics Targeting Cloud Assets
Ransomware actors are increasingly focusing on cloud-based assets, particularly in AWS environments. This shift involves utilizing various tactics to compromise critical business data, moving away from traditional…
56 articles · Updated November 19, 2025 -
Rapid7 Q3 2025 Report Details Rise in Ransomware Groups and AI Weaponization
Rapid7's Q3 2025 Threat Landscape Report, released on November 12, 2025, reveals an increase in active ransomware groups from 65 to 88. The report highlights the growing use of generative AI by attackers and a 21%…
2 articles · Updated November 12, 2025 -
Rapid7 Q3 2025 Report Highlights Ransomware Growth and AI Weaponization
Rapid7's Q3 2025 Threat Landscape Report, released on November 12, 2025, reveals a significant increase in active ransomware groups, rising from 65 to 88. The report notes that attackers are increasingly exploiting…
3 articles · Updated November 13, 2025
Recent Intelligence Reports
- CyberScoop: Microsoft SharePoint attacks ensnare 400 victims, including US agencies — cyberscoop.com · August 13, 2026
- Old Vulnerabilities, New AI Era, Amplified Risk — Trendmicro · March 25, 2026
- Old Vulnerabilities, New AI Era, Amplified Risk — Trendmicro · March 25, 2026
- The phone call is the new phishing email — Cyberscoop · March 23, 2026
- Warlock Ransomware Group Augments Post — Darkreading · March 17, 2026
- Lazarus hackers adopt Medusa ransomware for extortion campaigns, targeting healthcare ... — Industrialcyber.Co · February 24, 2026
- Patch Tuesday 2025 roundup: The biggest Microsoft vulnerabilities of the year — Csoonline · December 30, 2025
- Q3 ransomware activity dominated by three groups, stolen VPN credential use — Scworld · November 20, 2025