Cyber Threat Report: W/C March 23, 2026
472
Threat Clusters
3554
Articles Analyzed
52.2
Avg Threat Score
129
Rising Entities
Top threats
Critical Vulnerabilities in Firefox and Thunderbird Require Immediate Patching
79.5
Critical Exploitation of Quest KACE SMA Vulnerability Underway
78.2
TeamPCP's CanisterWorm Targets Iranian Systems with Destructive Kubernetes Wiper
78.0
Red Menshen APT Uses BPFdoor for Long-Term Espionage in Telecom Networks
77.9
Rapid7 Reports State-Sponsored Espionage in Global Telecoms
77.9
UK Warned of Complacency in Disinformation Warfare Amid Rising Threats
77.0
UK Sanctions Chinese Crypto Marketplace Xinbi Linked to Southeast Asia Scam Centers
77.0
UK Bans Crypto Donations Amid Foreign Interference Concerns
77.0
Critical Telegram Zero-Day Vulnerability Exposes User Accounts to Remote Hijacking
76.5
Active Exploitation of RCE Vulnerability in F5 BIG-IP APM Systems
76.0
Tallinn Mechanism Reaffirms Cyber Support for Ukraine Amid Ongoing Russian Aggression
76.0
Critical Buffer Overflow Vulnerability in pyOpenSSL Requires Immediate Action
75.8
Ransomware leak sites this week
231 victim listings across 31 groups, from ThreatCluster's own collection of ransomware leak sites. Listings are claims by the groups, not confirmed breaches.Most-listed sectors: Not Found (90), Technology (30), Manufacturing (22), Healthcare (14), Education (12).
| Group | Listings |
|---|---|
| lockbit5 | 46 |
| qilin | 30 |
| akira | 19 |
| play | 18 |
| incransom | 15 |
| nightspire | 15 |
| coinbasecartel | 14 |
| handala | 12 |
| alp-001 | 9 |
| dragonforce | 9 |
Ransomware tracker · Dark web API
Rising entities
Apt Group
- Salt Typhoon+367%
- Flax Typhoon+200%
- YanluowangNEW
- Silver FoxNEW
- Red MenshenNEW
Attack Type
- Ransomware+32%
- Data Breach+16%
- Supply Chain Attack+44%
- Botnet+20%
- Privilege Escalation+50%
Campaign
- VoltNEW
- FlaxNEW
- Operation MagnusNEW
- Mario KartNEW
- Operation TriangulationNEW
Company
- Education+167%
- Cloudflare+600%
- Amazon Web Services+250%
- Ubuntu+27%
- Anthropic+67%
Country
- Iran+91%
- Russia+165%
- Ukraine+187%
- China+165%
- United States+46%
Cve
Industry
- Energy+43%
- Telecommunications+113%
- Retail+75%
- Healthcare+24%
- Government+6%
Malware
- CanisterWorm+133%
- ClickFix+100%
- Lumma Stealer+100%
- BPFDoorNEW
- RedLineNEW
Mitre Attack
Platform
- PyPI+467%
- Kubernetes+143%
- TikTok+167%
- Firefox+400%
- IPhone+50%
Tool
- Trivy+267%
- GitHub Actions+500%
- Python+67%
- Npm+40%
- Docker+100%
Vulnerability
Entity type distribution
| Entity type | Count |
|---|---|
| Platform | 272 |
| Company | 228 |
| Cve | 145 |
| Country | 121 |
| Tool | 115 |
| Malware | 72 |
| Mitre Attack | 59 |
| Apt Group | 41 |
| Industry | 41 |
| Campaign | 40 |
| Attack Type | 22 |
| Ransomware Group | 17 |
| Vulnerability | 14 |