Related Threat Clusters
-
Russian UAT-11795 Targets Users with Trojans in Legitimate Software
A Russian threat actor known as UAT-11795 has been deploying the Starland RAT and WLDR agent since June 2025, primarily targeting users in the U.S., Germany, Romania, and Venezuela. The group uses trojanized installers…
6 articles · Updated July 17, 2026 -
Cisco Unity Connection Vulnerabilities Enable Code Execution and SSRF Attacks
Cisco has released security advisories addressing multiple high-severity vulnerabilities in its Unity Connection product. The most critical flaws allow authenticated attackers to inject and execute malicious code…
7 articles · Updated May 7, 2026 -
Microsoft Disrupts Fox Tempest Malware-Signing Service for Ransomware Gangs
On May 19, 2026, Microsoft disrupted Fox Tempest, a malware-signing-as-a-service (MSaaS) operation that provided over 1,000 fraudulent code-signing certificates to cybercriminals, enabling them to disguise malware as…
33 articles · Updated May 19, 2026 -
Deepfake Attacks Surge in 2025, Targeting Businesses via Audio and Video Manipulation
In 2025, 62% of cybersecurity leaders reported AI-driven attacks, with deepfake audio calls affecting 44% of businesses. The attacks resulted in business interruptions and financial losses, with 6% of incidents causing…
39 articles · Updated July 28, 2026 -
Critical RCE Vulnerability in BeyondTrust Software Requires Immediate Patching
BeyondTrust has issued a warning regarding a critical remote code execution (RCE) vulnerability in its Remote Support and Privileged Remote Access software. The flaw, tracked as CVE-2026-1731, allows unauthenticated…
1495 articles · Updated February 9, 2026
Recent Intelligence Reports
- Deepfake Detection Platforms for Zoom and Video Meetings — Resemble.Ai · July 27, 2026
- New Russian Campaign Uses Fake Webex and Zoom Installers to Deploy Starland RAT — Securityaffairs.Co · July 17, 2026
- Russian hackers trojanize WebEx, Zoom apps to push Starland malware — Bleepingcomputer · July 16, 2026
- Cybercrime service disrupted for abusing Microsoft platform to sign malware — Bleepingcomputer · May 19, 2026
- Cisco: Code injection vulnerability in Unity Connection and other flaws — Heise.De · May 7, 2026
- Cisco Systems issues three advisories for critical vulnerabilities in Webex, ISE — Csoonline · April 16, 2026
- Cisco patches critical bugs in Webex, ISE | news — Scmagazine · April 16, 2026
- Cisco patches critical bugs in Webex, ISE | news — Scworld · April 16, 2026