MQTT is a technology platform tracked across 3 threat clusters and 3 intelligence report mentions on ThreatCluster. First observed January 14, 2026; most recent activity July 23, 2026.
MQTT is a lightweight, publish-subscribe messaging protocol designed for low-bandwidth, resource-constrained IoT devices. It relies on a broker-based architecture and is widely used in embedded and IoT deployments; cybersecurity considerations include weak authentication, misconfigurations, and potential use in botnets or device compromise if brokers and clients are not properly secured.
Iran-affiliated hackers have expanded their attacks on U.S. critical infrastructure, targeting programmable logic controllers (PLCs) from Siemens and Schneider Electric, in addition to Rockwell Automation systems. The…
In late December 2025, a cyber attack impacted 30 solar plants in Poland, primarily targeting substation equipment with wiper malware, while inverters remained unaffected. The attack highlighted vulnerabilities in the…
Between October and December 2025, Ukrainian Defense Forces were targeted by a cyberattack disguised as a charitable foundation. The attack, attributed to the Russian group Void Blizzard (Laundry Bear), installed…