Related Threat Clusters
-
Cisco SD-WAN Zero-Day Exploited by Threat Actor Since 2023
A cyber threat actor has been exploiting a zero-day vulnerability (CVE-2026-20127) in Cisco Catalyst SD-WAN Controller since 2023. This vulnerability allows unauthenticated remote attackers to bypass authentication and…
104 articles · Updated February 25, 2026 -
Russian Hackers Exploit Zimbra Zero-Day for Espionage Campaign
Since July 2025, Russian state-backed hackers, known as Laundry Bear, have exploited a zero-click vulnerability (CVE-2025-66376) in the Zimbra Collaboration Suite to infiltrate Western government and commercial…
82 articles · Updated July 23, 2026 -
SHADOW-EARTH-053 Exploits Microsoft Exchange Vulnerabilities in Asia
The China-aligned threat group SHADOW-EARTH-053 has been exploiting unpatched Microsoft Exchange and IIS server vulnerabilities, specifically the ProxyLogon vulnerability chain, to conduct cyberespionage. This group has…
2 articles · Updated May 5, 2026 -
Head Mare Hackers Exploit TrueConf Vulnerabilities to Deploy Backdoors
The Head Mare hacktivist group has breached TrueConf video conferencing servers, exploiting vulnerabilities to replace legitimate client installers with malicious versions containing backdoors. The attackers executed…
23 articles · Updated August 8, 2026 -
Iranian Hackers Breach Los Angeles Transit System, Steal 700GB of Data
In March 2026, Iranian hackers linked to the Ministry of Intelligence and Security (MOIS) breached the Los Angeles County Metropolitan Transportation Authority (LACMTA), stealing at least 700 gigabytes of sensitive…
25 articles · Updated May 26, 2026 -
Coordinated Cyberattack Disrupts Water Utilities in Minnesota
A coordinated cyberattack affected water utilities in over 30 Minnesota communities on July 26 and 27, 2026. Key cities impacted include Plymouth, South St. Paul, Braham, and Maple Plain. The attack targeted…
324 articles · Updated July 27, 2026 -
Russian Hackers Target US Nuclear Scientists and Defense Contractors
Russian hackers have been conducting a year-long cyber-espionage campaign targeting US nuclear scientists, defense contractors, and government employees. The hackers utilized a rare software exploit that allows them to…
15 articles · Updated July 24, 2026 -
CISA Launches CI Fortify to Enhance Critical Infrastructure Resilience Amid Cyber Threats
The Cybersecurity and Infrastructure Security Agency (CISA) has initiated the CI Fortify program to bolster the resilience of critical infrastructure operators against cyberattacks. This initiative encourages…
24 articles · Updated May 5, 2026 -
Iranian Hackers Disable UK Power Plant for Four Days
Hackers linked to Iran successfully shut down a small British power plant for four days, marking the first known cyberattack of its kind against UK energy infrastructure. The incident occurred last month and coincided…
82 articles · Updated August 22, 2026 -
Sandworm Targets Critical Infrastructure with Aggressive OT Attacks
The Russian state-sponsored group Sandworm has intensified its cyber operations against industrial and critical infrastructure, utilizing pre-compromised operational technology (OT) environments instead of zero-day…
5 articles · Updated May 14, 2026
Recent Intelligence Reports
- Russia-Aligned UAC — Thehackernews · September 1, 2026
- U.S. Says Chinese Hackers Targeted Senate, NASA, Hospitals, and More — Time · August 27, 2026
- The Evolution of Hacktivism in Hybrid Warfare: Modern Tactics and Real-World Impact — Flashpoint · August 26, 2026
- Putin decree lets Russia take control of infrastructure damaged in Ukrainian drone attacks — Abcnews · August 25, 2026
- Putin issues decree opening door to state control of key sites after drone strikes — Abcnews · August 25, 2026
- Putin signs decree allowing state takeover of Russian infrastructure whose owners fail to ... — Meduza · August 24, 2026
- Putin allows temporary control of critical infrastructure after drone attacks — English.Nv.Ua · August 24, 2026
- Putin Signs Order Allowing Government to Seize Critical Infrastructure Following Attacks — Themoscowtimes · August 24, 2026