Related Threat Clusters
-
Google Chrome Zero-Day Vulnerability CVE-2025-13223 Exploited in the Wild
Google has issued an emergency update to address a high-severity zero-day vulnerability, CVE-2025-13223, in its Chrome browser. This flaw, linked to the V8 JavaScript engine, allows attackers to execute arbitrary code…
54 articles · Updated November 24, 2025 -
Exploitation of WinRAR CVE-2025-8088 Threatens Ukrainian Organizations
Two Russia-aligned cyber campaigns are exploiting the WinRAR vulnerability CVE-2025-8088 against Ukrainian targets nearly a year after it was patched. The flaw, a path traversal vulnerability, allows attackers to write…
19 articles · Updated June 8, 2026 -
Critical Vulnerability in N-able Passportal Extensions Exposed
A critical vulnerability in N-able Passportal’s browser extensions for Chrome and Microsoft Edge has been identified, allowing malicious websites or iframes to access an organization's password vault, including live…
2 articles · Updated August 21, 2026 -
Jewelbug APT Group Engages in Espionage and Cryptocurrency Fraud
The Jewelbug APT group, based in China, has been conducting simultaneous cyber espionage and cryptocurrency fraud operations. Utilizing a single command-and-control platform named XG-Web, the group has compromised over…
15 articles · Updated August 13, 2026 -
MuddyWater Targets U.S. Entities Amid Geopolitical Tensions
In early 2026, the Iranian APT group MuddyWater launched cyberattacks against U.S. banking, a major airport, and Israeli operations of a U.S.-based software company. The attacks intensified in March, coinciding with…
16 articles · Updated July 22, 2026 -
Russia-Linked DRILLAPP Backdoor Targets Ukrainian Entities via Microsoft Edge
A new cyberespionage campaign has been identified, targeting Ukrainian organizations with a backdoor named DRILLAPP, attributed to Russian threat actors, specifically the Laundry Bear group. The campaign employs…
3 articles · Updated March 18, 2026 -
LongNosedGoblin and UAT-8302: New China-Aligned APT Threats Targeting Governments
In 2024, ESET identified a new China-aligned APT group named LongNosedGoblin, which targets governmental entities in Southeast Asia and Japan. The group employs a custom toolset, primarily using C#/.NET applications, to…
8 articles · Updated May 5, 2026 -
Microsoft Edge Vulnerabilities Enable Remote Code Execution
Multiple vulnerabilities have been identified in Microsoft Edge, with CVE-2026-3910 and CVE-2026-3909 both being exploited in the wild. These vulnerabilities allow remote attackers to execute arbitrary code, bypass…
2 articles · Updated March 17, 2026 -
Google Releases Emergency Patch for Actively Exploited Chrome Zero-Day Vulnerability
Google has issued an emergency update to address a zero-day vulnerability in Chrome that is actively being exploited. This patch affects approximately 2 billion Chrome users, highlighting the ongoing challenges faced by…
35 articles · Updated November 18, 2025 -
July 2026 Security Update: Record CVEs and Critical Vulnerabilities
In July 2026, Adobe and Microsoft released significant security updates addressing numerous vulnerabilities. Adobe issued 12 bulletins for 88 unique CVEs, with a focus on ColdFusion and Commerce patches, including a…
3 articles · Updated July 14, 2026
Recent Intelligence Reports
- RevStealer malware spread through fake Claude Opus 5 download | news — Scworld · September 1, 2026
- Spring Ring: An Inside Look at Voice Phishing Campaigns in Microsoft Teams — Unit42.Paloaltonetworks · August 31, 2026
- Russian APT BlueDelta Uses HOOKEDGE to Target Defense and Diplomatic Organizations — Securityaffairs.Co · August 28, 2026
- BlueDelta Targets Defense and Diplomacy with HOOKEDGE — Recordedfuture · August 27, 2026
- Critical N — Cybersecuritynews · August 21, 2026
- Silent 'TwinLoot' Cyber Threat Operates Entirely From Microsoft's Cloud — Darkreading · August 18, 2026
- New Malware turns Microsoft cloud into its control center — Csoonline · August 18, 2026
- New CDP attack hijacks live Chrome and Edge sessions after Windows compromise — Feeds.4Sysops · August 17, 2026