Related Threat Clusters
-
Lazarus Group Exploits Windows Zero-Day to Target Defense Sector
The North Korean hacking group Lazarus exploited a zero-day vulnerability (CVE-2026-68820) in the Windows Ancillary Function Driver for WinSock (afd.sys) to gain SYSTEM-level access to defense sector systems. This…
33 articles · Updated August 12, 2026 -
Russian Hackers Exploit Zimbra Zero-Day for Espionage Campaign
Since July 2025, Russian state-backed hackers, known as Laundry Bear, have exploited a zero-click vulnerability (CVE-2025-66376) in the Zimbra Collaboration Suite to infiltrate Western government and commercial…
82 articles · Updated July 23, 2026 -
China-Linked QTFY Group Targets Critical Infrastructure with Advanced Exploits
The Joint Cybersecurity Advisory JCSA-20260826-01, released on August 26, 2026, details ongoing activities by the China-linked hacking group QTFY, attributed to Nanjing Xinjiuwei Network Technology Co. Active since…
7 articles · Updated September 2, 2026 -
Head Mare Hackers Exploit TrueConf Vulnerabilities to Deploy Backdoors
The Head Mare hacktivist group has breached TrueConf video conferencing servers, exploiting vulnerabilities to replace legitimate client installers with malicious versions containing backdoors. The attackers executed…
23 articles · Updated August 8, 2026 -
Cl0p Ransomware Group Claims Data Theft from Nearly 50 Companies
The Cl0p hacking group has claimed to have stolen significant data from nearly 50 companies, including Shell, Philips, General Electric (GE), and Fiserv. The group reported stealing approximately 89GB from Shell and…
30 articles · Updated August 14, 2026 -
Critical RCE Vulnerability in PTC Windchill and FlexPLM Under Active Exploitation
Hackers are exploiting a critical vulnerability in PTC Windchill and FlexPLM, tracked as CVE-2026-12569, which allows remote code execution due to an unsafe deserialization flaw. This vulnerability affects product…
2 articles · Updated June 29, 2026 -
Critical PHP Object Injection Vulnerability in WS Form LITE Plugin
A critical PHP Object Injection vulnerability, CVE-2026-4703, has been identified in the WS Form LITE – Drag & Drop Form Builder plugin for WordPress, affecting all versions up to 1.10.80. Unauthenticated attackers can…
2 articles · Updated August 24, 2026 -
Critical RCE Vulnerability in Oracle PeopleSoft Exploited by SHADOW-AETHER-015
A pre-authentication remote code execution (RCE) vulnerability, CVE-2026-35273, was discovered in Oracle PeopleSoft PeopleTools, affecting versions 8.61 and 8.62. The vulnerability allows unauthenticated attackers to…
5 articles · Updated June 18, 2026 -
Chinese Threat Group Exploits Roundcube Vulnerabilities in University Networks
A suspected China-aligned threat group, tracked as UNK_MassTraction, has been exploiting vulnerabilities in Roundcube mail servers at U.S. and Canadian universities since May 2026. The campaign targets physics and…
14 articles · Updated July 7, 2026 -
Sandworm Targets Critical Infrastructure with Aggressive OT Attacks
The Russian state-sponsored group Sandworm has intensified its cyber operations against industrial and critical infrastructure, utilizing pre-compromised operational technology (OT) environments instead of zero-day…
5 articles · Updated May 14, 2026
Recent Intelligence Reports
- Etr Cve 2026 63077 Critical Unauthenticated Remote Code Execution In Jetbrains Teamcity — www.rapid7.com · September 6, 2026
- Attackers Breached JetBrains Cadence via Unpatched TeamCity, Extracting AWS Credentials — Thehackernews · September 5, 2026
- CVE-2026-76658: Critical HPE Fabric Composer Flaw — Socprime · September 2, 2026
- Qtfy Jcsa 20260826 01 Safebreach Coverage — www.safebreach.com · September 1, 2026
- Attackers Exploit Critical Langflow and Rails Flaws in Credential — Thehackernews · September 1, 2026
- 2026 08 07 — docs.vulncheck.com · August 31, 2026
- Critical Ruby on Rails Vulnerability in Attackers' Crosshairs — Securityweek · August 31, 2026
- Critical vulnerability in GiveWP plugin allows remote code execution | brief — Scmagazine · August 28, 2026