Smart Topics

Clusters describe sophisticated state-sponsored cyber espionage, hybrid warfare activities, and cyberattacks targeting government, defense sectors, critical infrastructure, and geopolitical adversaries amid ongoing conflicts.

228 sources 59 clusters

Multiple clusters report ongoing active exploitation of critical remote code execution (RCE) vulnerabilities across diverse widely used software platforms, including enterprise, infrastructure, and security tools, enabling attackers to execute arbitrary code remotely and escalate privileges.

247 sources 123 clusters

Clusters highlight the growing use of AI-driven phishing, social engineering, and deepfake impersonations to defraud individuals and organizations, including financial institutions and crypto users, with emerging countermeasures.

342 sources 79 clusters

Several critical authentication and authorization bypass flaws have been disclosed in open-source libraries, industrial control, and IoT devices, enabling unauthorized access, credential theft, and privilege escalation.

49 sources 27 clusters

Multiple incidents involve cryptocurrency exchange hacks, smart contract exploits, wallet thefts on various platforms including Apple devices, and laundering of stolen funds using privacy-focused coins.

178 sources 42 clusters

Multiple ransomware groups continue to target organizations across industries and countries, combining encryption attacks with public data leak extortion tactics causing operational disruptions and financial losses.

201 sources 59 clusters

Threat actors increasingly use innovative phishing techniques leveraging holidays, homoglyph attacks, OAuth flows, QR codes, calendar invites, and trusted communication platforms to harvest credentials and deploy malware.

115 sources 24 clusters

Multiple incidents and clusters report security challenges from autonomous AI agents causing unauthorized data access, prompt injection attacks, and breaches of sensitive government, health, and enterprise systems.

263 sources 68 clusters

Cyber activities and physical threats involving Russian actors targeting energy infrastructure and resources.

324 sources 48 clusters

Cyber activities by Russian state actors aimed at government entities across various regions and sectors.

339 sources 32 clusters

This topic covers DDoS campaigns originating from Iran aimed at various sectors and infrastructure within the region.

149 sources 8 clusters

Cybersecurity stories involving German government entities facing or responding to cyber threats and attacks.

136 sources 14 clusters

Cybersecurity stories involving Canadian energy companies and infrastructure, highlighting threat actors and their targeting activities.

96 sources 11 clusters

Cyber threat activity involving Iranian entities targeting energy sector infrastructure and related systems.

292 sources 41 clusters

Cyber activities linked to Chinese government entities targeting global research projects and academic institutions.

338 sources 33 clusters

Cyber threat activities involving Chinese financial institutions, including targeted attacks, partnerships, and regulatory responses.

367 sources 27 clusters

Cyber threat activity involving North Korea's Lazarus Group focusing on cryptocurrency exchanges, wallets, and blockchain infrastructure.

93 sources 21 clusters

Cyber threat activities by actors targeting India's government digital infrastructure and online services.

176 sources 18 clusters

Monitoring cyber operations and vulnerabilities targeting China's transportation infrastructure and related entities.

160 sources 12 clusters

Cyber threat actors are actively targeting Canada's financial industry through various attack vectors, impacting institutions and infrastructure.

206 sources 11 clusters

Cybersecurity stories involving Indian healthcare organizations facing attacks, vulnerabilities, or malware campaigns.

104 sources 11 clusters

Analysis of distributed denial-of-service campaigns originating from Russia aimed at various sectors and services.

165 sources 8 clusters

Monitoring cyber operations and threats targeting India's financial industry, including malware, hacking groups, and defense efforts.

79 sources 6 clusters

Cyber threat activity involving German entities compromised through supply chain attacks on software and hardware components.

367 sources 10 clusters

Cyber threat groups are actively targeting financial institutions in Germany through various attack methods and malware campaigns.

370 sources 13 clusters

Analysis of supply chain attacks involving TeamPCP targeting software packages, cloud services, and development tools.

313 sources 8 clusters

Clusters highlight the growing use of AI technologies including autonomous agents, prompt injection, AI-powered phishing, deepfake scams, and AI-assisted vulnerability discovery, which are accelerating attack speed, scale, and evasion while complicating defense efforts.

512 sources 114 clusters

Multiple clusters report critical and zero-day vulnerabilities in Linux distributions such as Fedora, SUSE, and Ubuntu, including kernel flaws, firewall bugs, and virtualization components, with active exploitation impacting system security and requiring urgent patching.

8 sources 41 clusters

Multiple clusters report ongoing active exploitation of critical remote code execution (RCE) and privilege escalation vulnerabilities across widely used enterprise platforms, open-source projects, and infrastructure software, enabling attackers to gain unauthorized access and control.

328 sources 107 clusters

Phishing operations have evolved to use AI-generated content, deepfake audio/video, homoglyph domain spoofing, and social engineering targeting authentication mechanisms and customer support channels to steal credentials and bypass defenses.

174 sources 28 clusters

Multiple ransomware groups have launched coordinated campaigns targeting a wide range of industries including healthcare, government, manufacturing, legal, and critical infrastructure, combining data encryption, exfiltration, leak sites, and destructive tactics.

215 sources 84 clusters

Multiple clusters report active exploitation of critical remote code execution and privilege escalation vulnerabilities across widely used enterprise software, Linux distributions (including SUSE, Fedora, Ubuntu), kernels, and open-source components, prompting urgent patches and alerts.

211 sources 130 clusters

Multiple ransomware groups have targeted organizations across healthcare, finance, government, legal, professional, education, and infrastructure sectors worldwide using novel tactics such as Active Directory exploitation, VPN and credential abuse, public victim shaming, and advanced evasion techniques, frequently causing operational disruption and data leaks.

274 sources 93 clusters

Clusters highlight AI-powered threats including autonomous attack agents, AI-generated deepfakes used in scams, phishing, social engineering, identity fraud, and AI-enhanced malware targeting government, healthcare, critical infrastructure, and enterprise systems, raising new challenges in detection, governance, and accountability.

554 sources 119 clusters

Clusters describe large-scale cryptocurrency platform breaches, smart contract flaws, wallet thefts linked to North Korean actors, malware targeting blockchain ecosystems, and AI-driven scams leveraging fake agents and deepfakes to deceive users and influencers.

136 sources 24 clusters

AI-powered attacks are rapidly evolving, employing automation, agent impersonation, AI-generated phishing, autonomous malware, and deepfake scams to escalate breaches, evade detection, and conduct sophisticated social engineering.

433 sources 98 clusters

Multiple clusters report rapid weaponization and active exploitation of critical vulnerabilities in popular web platforms, CMS software, and WordPress plugins, enabling remote code execution, unauthorized access, and widespread site compromises.

63 sources 22 clusters

Large-scale cryptocurrency exchange breaches, wallet compromises, and social engineering scams have surged, with some attacks attributed to North Korean state-sponsored groups and involving illicit fund laundering.

136 sources 20 clusters

State-aligned actors conduct espionage and surveillance operations using malware, compromised devices, and social engineering to target government entities, political critics, activists, and sensitive industries, with arrests and convictions reported.

129 sources 28 clusters

Multiple ransomware groups have launched widespread campaigns across healthcare, government, finance, infrastructure, and other sectors, increasingly combining data exfiltration, leak sites, automation, and identity exploitation to maximize impact and pressure victims.

247 sources 83 clusters

Rapidly exploited critical vulnerabilities in popular web platforms and content management systems such as WordPress, Roundcube, and Grav CMS enable remote code execution and unauthorized access.

55 sources 17 clusters

Numerous critical vulnerabilities enabling remote code execution, privilege escalation, authentication bypass, and injection attacks have been disclosed and actively exploited in popular enterprise, open-source, and network software requiring urgent patching.

265 sources 118 clusters

Multiple ransomware groups have launched attacks across various industries worldwide, leveraging automation, data exfiltration, and leak sites to pressure victims for ransom payments.

333 sources 111 clusters

Recent data breaches have compromised large volumes of sensitive personal, financial, and corporate data across healthcare, government, financial services, and other industries.

166 sources 30 clusters

Multiple clusters describe sophisticated phishing and social engineering attacks leveraging AI-generated content, holiday-themed lures, homoglyphs, brand impersonation, and credential theft to compromise financial institutions, cloud services, and enterprise accounts.

166 sources 36 clusters

AI-generated deepfakes and synthetic media are increasingly used for political disinformation, election interference, identity fraud, and scams targeting individuals and financial institutions, prompting new detection and policy responses.

176 sources 36 clusters

AI technologies are increasingly leveraged for malicious purposes such as deepfake-enabled social engineering, AI-powered phishing campaigns targeting education and telecom, autonomous malware, and AI-enhanced offensive cyber operations impacting finance, politics, and industrial systems.

464 sources 93 clusters

Attackers employ innovative phishing methods including holiday-themed lures, homoglyph attacks, voice phishing, AI-enhanced scams, QR code fraud, OAuth exploits, and impersonation to steal credentials and cryptocurrency from individuals and enterprises.

152 sources 32 clusters

Nation-state actors engage in cyber espionage campaigns using insider access, covert surveillance, recruitment, and geopolitical cyber conflict, targeting military, political, and sensitive technology sectors including AI and semiconductor theft.

189 sources 28 clusters

New malware strains leverage compromised package repository accounts, malicious npm packages, Go modules, Terraform providers, and OSINT tools to infiltrate systems and steal credentials.

57 sources 12 clusters