Related Threat Clusters
-
Critical SonicWall SMA1000 Vulnerabilities Under Active Exploitation
SonicWall has reported two critical vulnerabilities, CVE-2026-15409 and CVE-2026-15410, affecting its SMA1000 Series appliances, which are currently being actively exploited. The first vulnerability, CVE-2026-15409, is…
50 articles · Updated July 15, 2026 -
APT28 Exploits Zimbra Vulnerability in Ongoing Attacks Against Ukraine
Russian state-backed hackers from APT28 are actively exploiting a high-severity stored cross-site scripting vulnerability (CVE-2025-66376) in the Zimbra Collaboration Suite (ZCS) to target Ukrainian government entities.…
8 articles · Updated March 19, 2026 -
Storm-1175 Deploys New StormEncryptor Ransomware Targeting N-central Systems
A financially motivated threat actor, Storm-1175, previously linked to Medusa ransomware, has begun deploying a new ransomware strain named StormEncryptor. This campaign was initiated after exploiting an…
11 articles · Updated August 10, 2026 -
Ransomware Attack Disrupts University of Mississippi Medical Center Operations
The University of Mississippi Medical Center (UMMC) experienced a ransomware attack that compromised its IT systems, leading to the closure of clinics statewide. UMMC officials confirmed the incident occurred on…
76 articles · Updated February 19, 2026 -
CISA Alerts on Critical Flaws in SimpleHelp, Samsung MagicINFO, and D-Link Devices
On April 24, 2026, CISA added four actively exploited vulnerabilities to its Known Exploited Vulnerabilities catalog. The affected products include SimpleHelp remote management software, Samsung MagicINFO 9 Server, and…
3 articles · Updated April 26, 2026 -
EU Sanctions Russia Over Ongoing Cyber Espionage Campaign
The European Union has condemned and sanctioned Russia for a prolonged cyber espionage campaign targeting its member states. The campaign, orchestrated by the 16th Centre of the FSB, has involved infiltrating government…
172 articles · Updated July 13, 2026 -
Coordinated Cyberattack Disrupts Water Utilities in Minnesota
A coordinated cyberattack affected water utilities in over 30 Minnesota communities on July 26 and 27, 2026. Key cities impacted include Plymouth, South St. Paul, Braham, and Maple Plain. The attack targeted…
324 articles · Updated July 27, 2026 -
US Indicts Russian Nationals for $62M Cybercrime Scheme Targeting Critical Infrastructure
On July 14, 2026, the US Justice Department unsealed an indictment against three Russian nationals—Alexander Volosovik, Kirill Zatolokin, and Yulia Pankova—accused of operating bulletproof hosting services that…
29 articles · Updated July 14, 2026 -
Iranian Hackers Disable UK Power Plant for Four Days
Hackers linked to Iran successfully shut down a small British power plant for four days, marking the first known cyberattack of its kind against UK energy infrastructure. The incident occurred last month and coincided…
82 articles · Updated August 22, 2026 -
Operation Saffron: First VPN Dismantled in Major Cybercrime Takedown
On May 19-20, 2026, an international law enforcement operation, dubbed Operation Saffron, successfully dismantled First VPN, a virtual private network service heavily utilized by cybercriminals for ransomware, fraud,…
32 articles · Updated May 21, 2026
Recent Intelligence Reports
- 85% of Education Ransomware Starts with Stolen Identities — Cxotoday · August 31, 2026
- Winona County paid $128K after ransomware crippled network | News — Kimt · August 31, 2026
- Aurora ransomware actors leverage AI tool for exploitation campaigns | brief — Scworld · August 28, 2026
- Hackers from the Russian — Mezha.Ua · August 28, 2026
- KELA research leads to alleged TeamPCP Members Arrested — Markets.Businessinsider · August 27, 2026
- ADS cyberattack tests whether supply chain policies actually respond — Insurancebusinessonline.Au · August 27, 2026
- ADS cyberattack tests whether supply chain policies actually respond — Insurancebusinessmag · August 27, 2026
- Warning: Two particularly dangerous malware strains. — Vietnam.Vn · August 27, 2026