Related Threat Clusters
-
Active Exploitation of GitLab CVE-2026-19478 and Microsoft Entra ID Flaw
GitLab's CVE-2026-19478, a critical code injection vulnerability with a CVSS score of 9.4, is currently under active exploitation just days after its public disclosure on August 17, 2026. Attackers are leveraging this…
2 articles · Updated August 22, 2026 -
Head Mare Hackers Exploit TrueConf Vulnerabilities to Deploy Backdoors
The Head Mare hacktivist group has breached TrueConf video conferencing servers, exploiting vulnerabilities to replace legitimate client installers with malicious versions containing backdoors. The attackers executed…
23 articles · Updated August 8, 2026 -
MuddyWater Targets U.S. Entities Amid Geopolitical Tensions
In early 2026, the Iranian APT group MuddyWater launched cyberattacks against U.S. banking, a major airport, and Israeli operations of a U.S.-based software company. The attacks intensified in March, coinciding with…
16 articles · Updated July 22, 2026 -
Rapid7 Reports Surge in Vulnerability Exploitation Outpacing Patching Efforts
Rapid7's Q2 2026 Threat Landscape Report reveals a significant increase in vulnerability disclosures, with high and critical vulnerabilities doubling to 8,539. Newly exploited vulnerabilities surged by 40%, with 62%…
5 articles · Updated August 18, 2026 -
Iranian APT MuddyWater Uses Chaos Ransomware as a False Flag for Espionage
In early 2026, the Iranian APT group MuddyWater, affiliated with the Ministry of Intelligence and Security, executed a sophisticated cyber operation disguised as a Chaos ransomware attack. Utilizing social engineering…
17 articles · Updated May 7, 2026 -
Iran-Linked Handala Group Launches Cyberattack on Stryker Medical Technology
On March 11, 2026, the Iranian-linked hacking group Handala executed a significant cyberattack on Stryker, a major U.S. medical technology company, causing a global disruption across its Microsoft environment. The…
276 articles · Updated March 11, 2026 -
Palo Alto Cortex XSOAR Vulnerability in Microsoft Teams Integration Exposed
Palo Alto Networks has issued a high-priority security update for a critical vulnerability tracked as CVE-2026-0234. This flaw affects the Microsoft Teams integration within the Cortex XSOAR and Cortex XSIAM platforms.…
2 articles · Updated April 9, 2026 -
US Charges Russian Hacker for Facilitating Void Blizzard Cyber Espionage Campaign
Denis Obrezko, a 36-year-old Russian national, was arrested in Thailand and extradited to the US, where he faces charges for facilitating a cyber espionage campaign linked to the group Void Blizzard. This group has…
8 articles · Updated June 10, 2026 -
Microsoft Issues Critical Security Patches for August 2026
On August 12, 2026, Microsoft released security patches addressing multiple critical vulnerabilities across its software products. The vulnerabilities include elevation of privilege flaws in Microsoft Teams, Azure SQL…
2 articles · Updated August 12, 2026 -
North Korea's UNC1069 Targets Cryptocurrency Professionals with Fake Meetings
A North Korea-linked threat actor, UNC1069, is executing a targeted campaign aimed at cryptocurrency and Web3 professionals. The attackers lure victims into fake Zoom, Google Meet, and Microsoft Teams meetings, where…
2 articles · Updated April 20, 2026
Recent Intelligence Reports
- Communication Channel Identity Risks — unit42.paloaltonetworks.com · August 31, 2026
- Spring Ring: An Inside Look at Voice Phishing Campaigns in Microsoft Teams — Unit42.Paloaltonetworks · August 31, 2026
- Microsoft Teams now lets admins block external bots from meetings — Bleepingcomputer · August 24, 2026
- [SecurityIntel] 22 Aug | GitLab CVE-2026-19478 Under Active Exploitation — Buttondown · August 22, 2026
- SynkLoader turns Microsoft Teams chats into a fake Windows lock — Feeds.4Sysops · August 21, 2026
- New SynkLoader malware pushed in Microsoft Teams phishing campaign — Bleepingcomputer · August 21, 2026
- Homeland security cybercops say patch TrueConf (Russia's Zoom) if you're using it — Theregister · August 21, 2026
- New malware turns Microsoft cloud into its control center — Ground.News · August 18, 2026