Skip to content

Smart Topics

Smart Topics group related clusters into the story arcs that actually matter this week, so instead of scrolling thirty headlines, you read one topic. ThreatCluster AI scans the feed, finds narratives that cut across actors and incidents, and curates them daily.

Live Smart Topics

27 topics
Active exploitation of critical RCE and privilege escalation zero-days in enterprise and open-source software
Live

Active exploitation of critical RCE and privilege escalation zero-days in enterprise and open-source software

Oct 2, 2026

Multiple clusters report urgent and active exploitation of critical remote code execution and privilege escalation vulnerabilities across widely used enterprise software, Linux distributions, and open-source libraries, including zero-days and rapid weaponization.

cve.mitre.orgexploitbulletin.comLinuxsecuritywww.ekriti.grwww.cve.org260 sources 125 clusters
Drone and counter-drone operations in ongoing geopolitical conflicts
Live

Drone and counter-drone operations in ongoing geopolitical conflicts

Oct 2, 2026

Reports cover drone attacks on critical infrastructure, military drone deployments, counter-drone technologies, and related investments amid ongoing regional and maritime conflicts.

english.mapn.rowww.nedeljnik.rsPravda.UaChannelnewsasiaCbsnews107 sources 39 clusters
AI autonomous agents driving breaches and governance challenges
Live

AI autonomous agents driving breaches and governance challenges

Oct 2, 2026

Clusters describe AI-powered autonomous agents breaching government and healthcare systems, AI-driven cyberattacks, AI-enhanced phishing and scams, and the resulting regulatory and governance challenges.

Asiae.Co.KrTrendingtopics.Euwww.theinformation.comwww.canberratimes.com.auBmjgroup447 sources 106 clusters
State-linked espionage and cyber operations targeting governments and critical infrastructure
Live

State-linked espionage and cyber operations targeting governments and critical infrastructure

Oct 2, 2026

Multiple clusters highlight espionage campaigns, state-sponsored cyberattacks, surveillance activities, arrests, and law enforcement responses targeting governments, academia, critical infrastructure, and journalists.

Arabnews.Jpwww.ncsc.gov.ukCyberscoopFacebookIranintl241 sources 57 clusters
Critical zero-day exploits in enterprise network and security products
Live

Critical zero-day exploits in enterprise network and security products

Oct 2, 2026

Multiple clusters report zero-day and critical vulnerabilities in enterprise network devices, security products, and virtualization software being actively exploited to gain unauthorized access and disrupt defenses.

cna.stwww.cve.orgF5GovinfosecurityTheregister234 sources 32 clusters
Geopolitical tensions fueling cyber, kinetic, and hybrid warfare including disinformation
Live

Geopolitical tensions fueling cyber, kinetic, and hybrid warfare including disinformation

Oct 2, 2026

Clusters reveal cyberattacks, drone strikes, disinformation campaigns, sanctions, and military escalations linked to conflicts involving Russia, Ukraine, Iran, China, and other actors.

www.aljazeera.comPravda.Uawww.ncsc.gov.ukUnited24MediaCyberscoop174 sources 53 clusters
Ransomware and malware campaigns disrupting critical infrastructure and healthcare
Live

Ransomware and malware campaigns disrupting critical infrastructure and healthcare

Oct 2, 2026

Ongoing ransomware and malware campaigns target critical infrastructure, healthcare, government, legal, transportation, and other sectors, often combining extortion, data leaks, and destructive tactics.

www.eurojust.europa.eunvd.nist.govRansomware.Livewww.thalesgroup.comCybersecurity-Insiders238 sources 53 clusters
AI-enhanced phishing, social engineering, and BEC campaigns
Live

AI-enhanced phishing, social engineering, and BEC campaigns

Oct 2, 2026

Multiple clusters describe phishing and social engineering attacks targeting healthcare, education, military, and AI sectors using AI-driven deepfakes, QR codes, OAuth flows, and impersonation scams.

SecurityweekNews.Ua.EduSocprimeCrypto-EconomyAsiaone170 sources 44 clusters
Cryptocurrency theft and laundering exploiting privacy protocols and smart contracts
Live

Cryptocurrency theft and laundering exploiting privacy protocols and smart contracts

Oct 2, 2026

Clusters report large-scale cryptocurrency thefts, laundering through privacy-enhanced protocols, smart contract exploits, and related social engineering scams targeting crypto platforms and wallets.

MirrorTrendingtopics.EuCryptotickerct.comarchive.is202 sources 40 clusters
Russian energy sector targeting and threats
Broad

Russian energy sector targeting and threats

May 29, 2026

Cyber activities and physical threats involving Russian actors targeting energy infrastructure and resources.

Kyivpostwww.cnn.comBusinessinsiderThehill112.Ua324 sources 48 clusters
Russian government targeting government sectors
Trending

Russian government targeting government sectors

May 29, 2026

Cyber activities by Russian state actors aimed at government entities across various regions and sectors.

En.Ara.CatPetriwww.reuters.comwww.cnn.comThehackernews339 sources 32 clusters
Iranian DDoS activity targeting regional services
Live

Iranian DDoS activity targeting regional services

May 29, 2026

This topic covers DDoS campaigns originating from Iran aimed at various sectors and infrastructure within the region.

DarkreadingFeeds2.FeedburnerCloudsekPrnewswireIndustrialcyber.Co149 sources 8 clusters
German government targeting cyber threat actors
Broad

German government targeting cyber threat actors

May 29, 2026

Cybersecurity stories involving German government entities facing or responding to cyber threats and attacks.

En.Ara.CatEinpresswirewww.reuters.comThehackernewsSecurityaffairs.Co136 sources 14 clusters
Canadian energy sector targeted by cyber threats
Live

Canadian energy sector targeted by cyber threats

May 29, 2026

Cybersecurity stories involving Canadian energy companies and infrastructure, highlighting threat actors and their targeting activities.

Aninews.InBusinessinsiderLightreadingHeise.DeSg.Finance.Yahoo96 sources 11 clusters
Iranian actors targeting energy infrastructure
Broad

Iranian actors targeting energy infrastructure

May 29, 2026

Cyber threat activity involving Iranian entities targeting energy sector infrastructure and related systems.

www.cnn.comBusinessinsiderwww.gov.ukThehillapnews.com292 sources 41 clusters
Chinese government targeting international research institutions
Broad

Chinese government targeting international research institutions

May 29, 2026

Cyber activities linked to Chinese government entities targeting global research projects and academic institutions.

En.Ara.CatPetriEinpresswirewww.reuters.comwww.cnn.com338 sources 33 clusters
Chinese financial sector targeting and defense activities
Broad

Chinese financial sector targeting and defense activities

May 29, 2026

Cyber threat activities involving Chinese financial institutions, including targeted attacks, partnerships, and regulatory responses.

En.Ara.CatEinpresswirewww.reuters.comRss.SlashdotIconnect007367 sources 27 clusters
North Korean Lazarus Group targeting cryptocurrency platforms
Live

North Korean Lazarus Group targeting cryptocurrency platforms

May 29, 2026

Cyber threat activity involving North Korea's Lazarus Group focusing on cryptocurrency exchanges, wallets, and blockchain infrastructure.

Mexc.CoBitgetTheblock.Colayerzero.networkCryptopolitan93 sources 21 clusters
Indian government targeting digital infrastructure
Broad

Indian government targeting digital infrastructure

May 29, 2026

Cyber threat activities by actors targeting India's government digital infrastructure and online services.

Einpresswirewww.cnn.comTribuneindiaSecurityaffairs.CoMillenniumpost.In176 sources 18 clusters
Chinese transportation sector cyber activities
Live

Chinese transportation sector cyber activities

May 29, 2026

Monitoring cyber operations and vulnerabilities targeting China's transportation infrastructure and related entities.

DarkreadingFeeds2.FeedburnerCloudsekPrnewswireapnews.com160 sources 12 clusters
Indian healthcare sector targeted by cyber threat actors
Live

Indian healthcare sector targeted by cyber threat actors

May 29, 2026

Cybersecurity stories involving Indian healthcare organizations facing attacks, vulnerabilities, or malware campaigns.

Aninews.InEinpresswirewww.cnn.comSecurityaffairs.CoM.Economictimes104 sources 11 clusters
Canadian financial sector targeted by cyber threats
Broad

Canadian financial sector targeted by cyber threats

May 29, 2026

Cyber threat actors are actively targeting Canada's financial industry through various attack vectors, impacting institutions and infrastructure.

En.Ara.Catwww.reuters.comSecurityaffairs.CoDarkreadingFeeds2.Feedburner206 sources 11 clusters
Russian DDoS activity targeting infrastructure
Live

Russian DDoS activity targeting infrastructure

May 29, 2026

Analysis of distributed denial-of-service campaigns originating from Russia aimed at various sectors and services.

ThehackernewsCybersecuritynewsDarkreadingFeeds2.FeedburnerCryptobriefing165 sources 8 clusters
Indian financial sector cybersecurity activity
New

Indian financial sector cybersecurity activity

May 29, 2026

Monitoring cyber operations and threats targeting India's financial industry, including malware, hacking groups, and defense efforts.

LbcSmestreet.InEtvbharatwww.reuters.comMondaq79 sources 6 clusters
German supply chain actors targeted by malicious packages
Broad

German supply chain actors targeted by malicious packages

May 29, 2026

Cyber threat activity involving German entities compromised through supply chain attacks on software and hardware components.

En.Ara.CatDigital.Nhs.Ukwww.reuters.comCsoonlineThehackernews367 sources 10 clusters
German financial sector targeted by cyber threat actors
Broad

German financial sector targeted by cyber threat actors

May 29, 2026

Cyber threat groups are actively targeting financial institutions in Germany through various attack methods and malware campaigns.

En.Ara.CatDigital.Nhs.UkEinpresswirewww.reuters.comSonatype370 sources 13 clusters
TeamPCP supply chain activity
Broad

TeamPCP supply chain activity

May 29, 2026

Analysis of supply chain attacks involving TeamPCP targeting software packages, cloud services, and development tools.

Digital.Nhs.UkTechcrunchAppleinsiderItnews.AuTechnadu313 sources 8 clusters

Archived Smart Topics

629 topics

No longer detected as trending. Sorted newest archived first.

Critical WordPress plugin vulnerabilities enabling unauthorized access and code execution
Archived

Critical WordPress plugin vulnerabilities enabling unauthorized access and code execution

Sep 5, 2026

Multiple WordPress plugin flaws allow attackers to access sensitive files, modify content, or execute code without authorization, posing significant risks to websites.

CiberseguridadlatamNvd.Nistnvd.nist.govTheexploitdesk.Techpatchstack.com6 sources 4 clusters
Active exploitation of critical RCE and privilege escalation vulnerabilities
Archived

Active exploitation of critical RCE and privilege escalation vulnerabilities

Aug 24, 2026

Clusters covering severe vulnerabilities in widely used software, open-source infrastructure, Linux distributions, and enterprise platforms that enable remote code execution, privilege escalation, and account takeover, with active exploitation observed.

Securityaffairs.Cocve.akaoma.comLinuxsecuritycve.mitre.orgCybernews174 sources 71 clusters
State-linked cyber espionage targeting critical infrastructure and national security
Archived

State-linked cyber espionage targeting critical infrastructure and national security

Aug 24, 2026

Clusters detailing cyberattacks, espionage, and influence operations by nation-state actors including Chinese and Russian groups targeting government, industrial, satellite, and critical infrastructure sectors.

Uk.News.YahooNewscordwww.independent.co.ukAsiaonewww.security.com152 sources 16 clusters
Cryptocurrency and DeFi exploits, fraud, and emerging physical attacks
Archived

Cryptocurrency and DeFi exploits, fraud, and emerging physical attacks

Aug 27, 2026

Exploits in blockchain governance, wallet apps, and phishing campaigns cause significant financial losses, while physical coercion and social attacks increasingly target cryptocurrency holders.

CryptoslateThecyberexpressCryptorankCryptobriefingstatuspage.incident.io62 sources 20 clusters
Cryptocurrency exploits, wallet thefts, and social engineering fraud
Archived

Cryptocurrency exploits, wallet thefts, and social engineering fraud

Aug 24, 2026

Clusters reporting exploits and thefts targeting cryptocurrency wallets, DeFi governance, exchanges, and users through vulnerabilities, phishing, wrench attacks, and malicious tooling.

FinanzenPluangcryptoslate.comAsiaonewtvbam.com91 sources 21 clusters
Cryptocurrency ecosystem exploits, governance attacks, and phishing incidents
Archived

Cryptocurrency ecosystem exploits, governance attacks, and phishing incidents

Aug 29, 2026

Multiple incidents involve attacks on cryptocurrency platforms exploiting governance flaws, blockchain vulnerabilities, phishing campaigns, and data breaches targeting wallets, DeFi apps, and token theft.

FinanzenPluangcryptoslate.comAsiaoneCryptoslate71 sources 14 clusters
Physical and electronic attacks on critical infrastructure: drone strikes and GPS jamming
Archived

Physical and electronic attacks on critical infrastructure: drone strikes and GPS jamming

Aug 29, 2026

Recent incidents include drone attacks on logistics and industrial sites and GPS jamming disrupting aviation and critical infrastructure operations, raising concerns over physical and electronic security.

Uk.News.Yahoowww.independent.co.ukWilsontimeswww.elliptic.coCbsnews100 sources 8 clusters
Cryptocurrency ecosystem attacks: phishing, governance exploits, wallet thefts, and domain hijacking
Archived

Cryptocurrency ecosystem attacks: phishing, governance exploits, wallet thefts, and domain hijacking

Aug 28, 2026

Clusters describe phishing scams impersonating tax authorities, DeFi governance attacks, hardware wallet vulnerabilities, domain hijacking, and large-scale crypto thefts impacting users and exchanges.

NewscordTech.YahooCryptoslateCryptorankCryptobriefing77 sources 16 clusters
Cryptocurrency and DeFi Exploits, Scams, and Malware Campaigns
Archived

Cryptocurrency and DeFi Exploits, Scams, and Malware Campaigns

Aug 25, 2026

Multiple incidents involve exploitation of DeFi governance, blockchain platforms, and cryptocurrency users through malware, social engineering, impersonation scams, and fraudulent extensions.

CybernewsFinanzenPluangCryptoslateabc11.com68 sources 16 clusters
Malware Campaigns Targeting Financial Apps and macOS Users
Archived

Malware Campaigns Targeting Financial Apps and macOS Users

Aug 25, 2026

Reports highlight expansion of Android banking malware and MacSync stealer campaigns using advanced evasion and malvertising to steal credentials from financial and macOS users.

Feeds.FeedburnerCryptobriefingSecurityaffairs.CoBeincryptowww.huntress.com43 sources 12 clusters
Phishing and social engineering targeting cryptocurrency and financial services
Archived

Phishing and social engineering targeting cryptocurrency and financial services

Aug 23, 2026

Phishing and social engineering attacks increasingly target cryptocurrency users, wallets, and financial institutions using advanced impersonation, novel vectors, and evasion techniques to steal credentials and funds.

SocprimeFinanzenPluangTheloadstarChaincatcher185 sources 42 clusters
Critical RCE and Privilege Escalation Vulnerabilities Actively Exploited This Week
Archived

Critical RCE and Privilege Escalation Vulnerabilities Actively Exploited This Week

Aug 25, 2026

Multiple clusters report critical remote code execution and privilege escalation vulnerabilities in widely used software, plugins, and developer tools that are actively exploited or require urgent patching.

Linuxsecuritycve.akaoma.comSecurityaffairs.Covulners.comvuldb.com135 sources 48 clusters
Active exploitation of critical RCE and privilege escalation vulnerabilities
Archived

Active exploitation of critical RCE and privilege escalation vulnerabilities

Aug 23, 2026

Multiple reports detail critical remote code execution and privilege escalation vulnerabilities across enterprise software, Linux/open-source platforms, and widely used plugins that are actively exploited by attackers.

LinuxsecuritySecurityaffairs.Cocve.mitre.orgvuldb.comCcb.Belgium.Be111 sources 49 clusters
Malware campaigns leveraging novel loaders and cloud platforms for C2
Archived

Malware campaigns leveraging novel loaders and cloud platforms for C2

Aug 24, 2026

Clusters describing malware distribution using advanced loaders and exploiting cloud and collaboration platforms like Microsoft 365, GitHub, and Electron apps for command-and-control and persistence.

www.gendigital.comwww.praetorian.comradar.offseq.comSecurityaffairs.CoThehackernews44 sources 12 clusters
GPS jamming disrupts aviation and critical infrastructure
Archived

GPS jamming disrupts aviation and critical infrastructure

Sep 2, 2026

Authorities detected and mitigated GPS jamming devices causing disruptions to aviation and critical infrastructure systems, highlighting emerging physical-layer cyber threats.

WilsontimesNoviniteUkrinformBnrnews.BgInformat.Ro15 sources 4 clusters
AI-Driven Cybercrime: Malware Evolution and Offensive Automation This Week
Archived

AI-Driven Cybercrime: Malware Evolution and Offensive Automation This Week

Aug 25, 2026

Threat actors increasingly leverage AI-generated malware, prompt injection, autonomous agents, and AI-powered offensive tools to enhance cybercrime campaigns, social engineering, and exploit development.

Feeds2.FeedburnerSocprimeThehillChaincatcherwww.mckinsey.com130 sources 37 clusters
Supply chain compromises and malware via software ecosystems and brand impersonation
Archived

Supply chain compromises and malware via software ecosystems and brand impersonation

Aug 28, 2026

Attackers infiltrate software supply chains including Rust crates and browser extensions, and use brand impersonation with AI and emoji obfuscation to distribute malware and steal credentials.

Cybernewswww.gendigital.comwww.opswat.comNews.YcombinatorSocprime60 sources 16 clusters
Spike in AI-driven cybercrime and offensive AI attacks
Archived

Spike in AI-driven cybercrime and offensive AI attacks

Aug 22, 2026

Threat actors increasingly employ AI-generated exploits, offensive AI tools, prompt injection attacks, and autonomous AI agents to conduct cyberattacks, fraud, and identity manipulation across industrial and enterprise systems.

Feeds2.FeedburnerSocprimenews.bloomberglaw.comwww.foxnews.comSecurityaffairs.Co240 sources 42 clusters
Malware campaigns using novel delivery, evasion, and social engineering techniques
Archived

Malware campaigns using novel delivery, evasion, and social engineering techniques

Aug 27, 2026

Recent malware operations employ advanced loaders, emoji obfuscation, SVG phishing, expired domains, blockchain-based botnet command storage, and social engineering on collaboration platforms to evade detection and steal credentials.

SocprimeCybersecuritynewsChaincatcherwww.gendigital.comwww.opswat.com90 sources 25 clusters
Malware campaigns leveraging novel delivery and evasion techniques
Archived

Malware campaigns leveraging novel delivery and evasion techniques

Aug 23, 2026

Threat actors employ advanced loaders, emoji obfuscation, malicious browser extensions, AI brand impersonation, compromised hardware drivers, and malvertising to distribute malware and infostealers.

Cybernewswww.gendigital.comUbuntuNews.YcombinatorSocprime68 sources 20 clusters
AI-enhanced phishing and social engineering campaigns with novel tactics
Archived

AI-enhanced phishing and social engineering campaigns with novel tactics

Aug 24, 2026

Clusters describing sophisticated phishing, vishing, social engineering, and impersonation attacks using AI deepfakes, novel vectors like SVG files, brand impersonation, and law enforcement takedowns of phishing infrastructure.

Securityaffairs.Cowww.mckinsey.comBitdefenderwww.security.comAndroidauthority173 sources 40 clusters
AI-Generated Deepfakes and Synthetic Identity Abuse in Fraud and Misinformation
Archived

AI-Generated Deepfakes and Synthetic Identity Abuse in Fraud and Misinformation

Aug 25, 2026

Clusters cover the use of AI deepfakes and synthetic identities in political misinformation, financial scams, harassment, and legal disputes, alongside emerging defenses.

news.bloomberglaw.comHeise.DeEn.Yna.Co.KrKatvFeeds.4Sysops59 sources 13 clusters
AI-enabled cyber threats: deepfakes, automation, and offensive tools
Archived

AI-enabled cyber threats: deepfakes, automation, and offensive tools

Aug 24, 2026

Clusters highlighting AI-driven attacks including deepfake impersonation scams, AI-automated exploitation, prompt injection in AI tools, autonomous malware evolution, and AI-enhanced social engineering.

Feeds2.FeedburnerSocprimenews.bloomberglaw.comwww.resemble.aiTheregister151 sources 42 clusters
Surge in AI-driven cybercrime: deepfakes, social engineering, and autonomous attacks
Archived

Surge in AI-driven cybercrime: deepfakes, social engineering, and autonomous attacks

Aug 21, 2026

Clusters highlight the rise of AI-driven threats including deepfake fraud, AI-enhanced phishing and social engineering, autonomous AI attacks, and AI model sandbox escapes impacting multiple sectors.

news.bloomberglaw.comwww.resemble.aiTheregisterSecurityaffairs.Cowww.mckinsey.com138 sources 46 clusters