Defense is a industry tracked across 50 threat clusters and 62 intelligence report mentions on ThreatCluster. First observed November 3, 2025; most recent activity July 16, 2026.
In December 2025, Poland's power grid was targeted by a sophisticated cyberattack attributed to Russia's Federal Security Service (FSB). The attack aimed to disrupt communication between renewable energy systems and…
A joint advisory from 21 global cybersecurity agencies warns that Russian state hackers from the FSB's Center 16 are exploiting poorly configured routers to infiltrate critical infrastructure networks worldwide. The…
Two Russia-aligned cyber campaigns are exploiting the WinRAR vulnerability CVE-2025-8088 against Ukrainian targets nearly a year after it was patched. The flaw, a path traversal vulnerability, allows attackers to write…
Iranian state-aligned hackers, known as Nimbus Manticore (UNC1549), have intensified cyberattacks against the US aviation sector amid the ongoing US-Iran military conflict. Utilizing career-themed phishing and a novel…
In 2026, Iranian APT groups, notably Cavern Manticore and OilRig, have intensified cyber operations against Israeli organizations, primarily in the IT and government sectors. Cavern Manticore employs a modular…
The Pentagon has elevated its counterintelligence threat assessment for Israel to 'critical', the highest level, due to concerns over intensified espionage activities targeting senior U.S. officials. This decision…
Russian intelligence agencies are intensifying efforts to steal Western technology and defense secrets as sanctions impact the economy. They are employing tactics such as creating fake companies and deploying cyber…
On May 1, 2026, President Donald Trump signed an executive order imposing extensive sanctions on the Cuban government, targeting individuals, entities, and foreign banks supporting the regime. The sanctions aim to…
Denis Obrezko, a 36-year-old Russian national, was arrested in Thailand and extradited to the US, where he faces charges for facilitating a cyber espionage campaign linked to the group Void Blizzard. This group has…
Recent research from Darktrace reveals the evolution of Chinese-nexus cyber operations over the past two decades, highlighting a shift from high-volume attacks to more strategic, identity-centric intrusions. This change…