Related Threat Clusters
-
Critical Zero-Day Vulnerability CVE-2026-20182 Exploited in Cisco SD-WAN Systems
Cisco has disclosed a critical authentication bypass vulnerability, CVE-2026-20182, affecting its Catalyst SD-WAN Controller and Manager. This flaw allows unauthenticated remote attackers to bypass authentication and…
131 articles · Updated May 14, 2026 -
Jewelbug APT Group Engages in Espionage and Cryptocurrency Fraud
The Jewelbug APT group, based in China, has been conducting simultaneous cyber espionage and cryptocurrency fraud operations. Utilizing a single command-and-control platform named XG-Web, the group has compromised over…
15 articles · Updated August 13, 2026 -
Evolution of Chinese-Nexus Cyber Operations: Strategic Long-Term Threats
Recent research from Darktrace reveals the evolution of Chinese-nexus cyber operations over the past two decades, highlighting a shift from high-volume attacks to more strategic, identity-centric intrusions. This change…
281 articles · Updated April 2, 2026 -
Critical RCE Vulnerability in KnowledgeDeliver LMS Exploited by Hackers
In late 2025, a critical vulnerability (CVE-2026-5426) was discovered in the KnowledgeDeliver Learning Management System, allowing unauthenticated remote code execution via ViewState deserialization. This flaw, stemming…
16 articles · Updated May 25, 2026 -
Asian Cyber-Espionage Group Compromises 37 Countries' Critical Infrastructure
A state-aligned cyber-espionage group from Asia has compromised the critical infrastructure of 37 countries, targeting government organizations and ministries related to trade, natural resources, border control, and…
32 articles · Updated February 5, 2026
Recent Intelligence Reports
- Trend Micro's TrendAI — www.trendmicro.com · August 15, 2026
- 5435 — www.cybersecurity-help.cz · May 26, 2026
- Active Exploitation of CVE-2026-5426 in KnowledgeDeliver LMS Enables Godzilla ... — Rescana · May 26, 2026
- Exploitation of KnowledgeDeliver via ViewState Deserialization Vulnerability — Mandiant · May 25, 2026
- Frequently asked questions about the continued exploitation of Cisco Catalyst SD-WAN vulnerabilities (CVE-2026-20182) — Tenable · May 14, 2026
- Ongoing exploitation of Cisco Catalyst SD — Blog.Talosintelligence · May 14, 2026
- Chinese spy group caught lurking in Poland, Asia networks — Theregister · April 30, 2026
- What type of 'C2 on a sleep cycle' do they leave behind? Novel Chinese spy group found in critical networks in Poland, Asia — Theregister · April 30, 2026