Related Threat Clusters
-
Google Chrome Zero-Day Vulnerability CVE-2025-13223 Exploited in the Wild
Google has issued an emergency update to address a high-severity zero-day vulnerability, CVE-2025-13223, in its Chrome browser. This flaw, linked to the V8 JavaScript engine, allows attackers to execute arbitrary code…
54 articles · Updated November 24, 2025 -
Critical Chrome Zero-Day CVE-2026-85046 Exploited in the Wild
Google has released an emergency update for Chrome to address CVE-2026-85046, a high-severity zero-day vulnerability in the V8 JavaScript and WebAssembly engine, rated 8.8 on the CVSS scale. The flaw, identified as a…
27 articles · Updated September 4, 2026 -
DarkSword iOS Exploit Chain Targets Mobile Devices Globally
The Google Threat Intelligence Group has identified DarkSword, a full-chain iOS exploit affecting versions 18.4 to 18.7. This exploit leverages multiple zero-day vulnerabilities, including CVE-2025-31277 and…
2 articles · Updated July 11, 2026 -
Operation Endgame Disrupts Evil Corp's SocGholish Malware Network
On June 18, 2026, international law enforcement agencies launched Operation Endgame, disrupting the SocGholish malware infrastructure linked to the Russian cybercrime group Evil Corp. The operation resulted in the…
67 articles · Updated June 18, 2026 -
Critical Vulnerabilities in Paperclip AI Platform Enable Unauthenticated Command Execution
Oasis Security identified three critical vulnerabilities in the Paperclip AI agent platform, allowing unauthenticated attackers to execute arbitrary commands on servers and developer machines. The flaws stem from a…
11 articles · Updated August 5, 2026 -
Jewelbug APT Group Engages in Espionage and Cryptocurrency Fraud
The Jewelbug APT group, based in China, has been conducting simultaneous cyber espionage and cryptocurrency fraud operations. Utilizing a single command-and-control platform named XG-Web, the group has compromised over…
15 articles · Updated August 13, 2026 -
OceanLotus Shifts Focus to Domestic Espionage with SPECTRALVIPER Attacks
From mid-2024 to early 2026, the Vietnam-aligned APT group OceanLotus has intensified its focus on domestic espionage, utilizing the SPECTRALVIPER backdoor in two major campaigns. The first campaign targeted a…
17 articles · Updated June 11, 2026 -
Coruna and DarkSword iOS Exploit Kits Targeting Users Globally
The Coruna and DarkSword iOS exploit kits, initially limited to nation-state actors, are now being widely adopted by organized cybercriminals. iVerify has tracked around 17,000 domains associated with second-generation…
3 articles · Updated August 10, 2026 -
Operation Double Barrel: State-Sponsored Exploitation of Korean Financial Software
From 2025 to mid-2026, a state-sponsored threat group exploited vulnerabilities in Korean financial security software, utilizing watering hole attacks and spear phishing to deploy backdoors named Struggle and Brandoor.…
7 articles · Updated July 30, 2026 -
China-Nexus Hackers Target Hospitals and Governments with TriBack Loader Malware
A China-linked cyber espionage operation has compromised a Vietnamese public hospital's imaging systems, infiltrated Malaysia's Ministry of Foreign Affairs, and targeted Honduras's National Congress using a new malware…
2 articles · Updated July 23, 2026
Recent Intelligence Reports
- New Ted Backdoor Hides Inside Victims' Own HAProxy Builds to Intercept Web Traffic — Thehackernews · September 4, 2026
- Google Chrome V8 Type Confusion Remote Code Execution Vulnerability (CVE-2026-85046) — Itsc.Cuhk.Edu.Hk · September 4, 2026
- Cytrox — en.wikipedia.org · September 2, 2026
- Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution — Cisecurity · September 2, 2026
- Everyone using Chrome must restart their browser to fix critical issues — Mirror · September 2, 2026
- Microsoft identifies 'TerminalFix' campaign spreading Python reverse tunnel — Scworld · September 2, 2026
- Social Engineering %28security%29 — en.wikipedia.org · September 1, 2026
- Anthropic Warns Stolen Login Sessions Let Attackers Drain Claude Users' Usage Limits — Xenospectrum · August 31, 2026