Related Threat Clusters
-
China-linked Cyber Group Expands Targeting to Southeastern Europe
A sophisticated threat actor known as UAT-7290, tracked by Cisco Talos, has expanded its operations to target telecommunications providers in Southeastern Europe. This group, which has been active since at least 2022,…
1 article · Updated January 8, 2026 -
China-Nexus APT UAT-7290 Targets South Asia Telecoms in Cyber Espionage Campaign
A new threat actor, UAT-7290, has been identified conducting cyberattacks on telecommunications infrastructure in South Asia. This operation is linked to a China-Nexus state-sponsored advanced persistent threat (APT)…
1 article · Updated January 9, 2026 -
UAT-7290 Cyber Espionage Targets South Asian Telecoms
UAT-7290, a China-linked advanced persistent threat group, has been active since at least 2022, focusing on espionage against telecommunications providers in South Asia. The group employs a range of Linux and Windows…
2 articles · Updated January 12, 2026 -
Critical Zero-Day Vulnerability CVE-2026-20182 Exploited in Cisco SD-WAN Systems
Cisco has disclosed a critical authentication bypass vulnerability, CVE-2026-20182, affecting its Catalyst SD-WAN Controller and Manager. This flaw allows unauthenticated remote attackers to bypass authentication and…
131 articles · Updated May 14, 2026 -
Akira Ransomware Group Targets Critical Infrastructure, Extracts $42 Million
The Akira ransomware group has been identified as a significant threat to critical infrastructure, with the U.S. Cybersecurity and Infrastructure Security Agency (CISA) and the FBI warning of its active ransomware…
9 articles · Updated November 14, 2025 -
Russian Hackers Exploit Zimbra Zero-Day for Espionage Campaign
Since July 2025, Russian state-backed hackers, known as Laundry Bear, have exploited a zero-click vulnerability (CVE-2025-66376) in the Zimbra Collaboration Suite to infiltrate Western government and commercial…
82 articles · Updated July 23, 2026 -
Operation Escaneo Targets Latin American Critical Infrastructure
Operation Escaneo is a coordinated cyberattack attributed to the MexicanMafia group, targeting critical infrastructure across Latin America, primarily Mexico. The campaign, which spanned from 2025 to 2026, utilized…
4 articles · Updated June 18, 2026 -
Russian FSB Exploits Vulnerable Routers to Target Critical Infrastructure
A joint advisory from 21 global cybersecurity agencies warns that Russian state hackers from the FSB's Center 16 are exploiting poorly configured routers to infiltrate critical infrastructure networks worldwide. The…
76 articles · Updated July 13, 2026 -
Operation Endgame Disrupts Evil Corp's SocGholish Malware Network
On June 18, 2026, international law enforcement agencies launched Operation Endgame, disrupting the SocGholish malware infrastructure linked to the Russian cybercrime group Evil Corp. The operation resulted in the…
67 articles · Updated June 18, 2026 -
Russian Hackers Breach UK Government Email Accounts in Major Cyber Attack
A significant cyber attack attributed to Russian hackers has compromised the email accounts of UK government officials and Foreign Office staff, exposing sensitive systems and critical infrastructure. Named…
2 articles · Updated July 6, 2026
Recent Intelligence Reports
- Attackers Steal METR API Key and Consume AI Credits Worth About $600,000 — Thehackernews · September 1, 2026
- Hackers Launch Password Spraying Attacks Against AWS Root Accounts at 150+ Organizations — Gbhackers · September 1, 2026
- Hackers Target AWS Root Accounts at 150+ Organizations in Password — Cybersecuritynews · September 1, 2026
- 85% of Education Ransomware Starts with Stolen Identities — Cxotoday · August 31, 2026
- Identity-based attacks account for 85% of ransomware incidents in education, Sophos finds — Expresscomputer.In · August 31, 2026
- Cloudflare Introduces Adaptive Intelligence; Reverses the Economics of Automated Cyber Attacks — Cloudflare · August 31, 2026
- Identity-Based Attacks Are Responsible for 85% of Ransomware in Education, Sophos Report Finds — Itvoice.In · August 31, 2026
- July 30 blog post — www.anthropic.com · August 31, 2026