Related Threat Clusters
-
Exploitation of Remote Services in Cyber Attacks
Adversaries are increasingly leveraging external remote services like VPNs and Citrix to gain unauthorized access to networks. These attacks often involve using valid accounts obtained through credential harvesting or…
2 articles · Updated June 3, 2026 -
Microsoft June 2026 Patch Tuesday: Record 206 Vulnerabilities Addressed
On June 9, 2026, Microsoft released its largest Patch Tuesday update, addressing 206 vulnerabilities, including three zero-day flaws. Among the critical vulnerabilities, 32 were rated as critical, with 28 classified as…
57 articles · Updated June 9, 2026 -
TwinLoot Malware Exploits Microsoft Cloud for Command-and-Control Operations
A new Python-based malware framework named TwinLoot has been discovered, utilizing Microsoft Azure and 365 services for its command-and-control (C2) operations. Researchers from Ontinue Cyber Defense Center identified…
8 articles · Updated August 18, 2026 -
Gootloader Malware Resurgence Leads to Domain Controller Compromise
Recent Gootloader attacks have resulted in a Domain Controller compromise within 17 hours, as reported by Huntress. The Gootloader malware, which has been active since 2020, was previously inactive but saw a resurgence…
2 articles · Updated November 6, 2025 -
Gootloader Malware Resurfaces, Compromises Domain Controllers
Gootloader malware has re-emerged after a period of reduced activity, with Huntress reporting three infections since October 27, 2025. Two of these incidents resulted in hands-on-keyboard intrusions, leading to domain…
4 articles · Updated November 7, 2025 -
Routine Internal Access Drives Major Cyber Risks, Research Reveals
Research by Zero Networks published on February 4, 2026, indicates that the primary cybersecurity risks for businesses stem from legitimate internal access rather than zero-day exploits or specialized malware. The…
5 articles · Updated February 4, 2026 -
Bitdefender Achieves 100% Telemetry in EDR Test
Bitdefender GravityZone Business Security Enterprise achieved 100% relevant telemetry in AV-Comparatives’ inaugural EDR Detection Validation Certification Test published in May 2026. This certification tested the…
2 articles · Updated May 15, 2026
Recent Intelligence Reports
- New Malware turns Microsoft cloud into its control center — Csoonline · August 18, 2026
- June Patch Tuesday marks a ‘new normal’ with over 200 CVEs, 32 rated ‘critical’ — Csoonline · June 10, 2026
- External Remote Services — attack.mitre.org · June 3, 2026
- Bitdefender GravityZone: 100% Telemetry in AV — Bitdefender · May 15, 2026
- Bitdefender GravityZone: 100% Telemetry in AV — Bitdefender · May 14, 2026
- Zero Networks warns lateral movement eclipses zero-days — Securitybrief · February 4, 2026
- New Gootloader attacks drop Supper SOCKS5 backdoor — Scmagazine · November 6, 2025