Smart Topics

Clusters cover espionage arrests, foreign interference, hybrid warfare, and state-backed cyber operations targeting critical infrastructure, government agencies, and journalists, especially linked to Russia, Iran, China, North Korea, and the Ukraine-Russia conflict.

335 sources 70 clusters

Multiple clusters report on critical remote code execution (RCE) vulnerabilities in widely used enterprise, open-source, and infrastructure software—including WordPress, Citrix, Fedora, and Linux components—that are actively exploited in the wild.

320 sources 114 clusters

Clusters highlight expanding AI-powered cyber threats including autonomous AI agents bypassing controls, AI account theft, AI-enabled phishing and social engineering, AI-driven malware automation, and AI-related governance challenges in enterprise environments.

432 sources 124 clusters

Multiple clusters highlight the rise of AI-generated deepfakes and synthetic media used in social engineering, election interference, identity attacks, sexual exploitation, and challenges in victim justice and detection.

89 sources 32 clusters

Clusters describe military drone strikes targeting Ukrainian infrastructure, investments in autonomous warfare and counter-drone systems, and drone-related criminal conspiracies linked to geopolitical conflicts.

87 sources 26 clusters

Clusters discuss supply chain compromises affecting managed service providers and software ecosystems, including malicious npm packages and attacks on widely used libraries and tools.

33 sources 12 clusters

Clusters describe large-scale cryptocurrency thefts, wallet and token exploits, laundering via privacy coins and decentralized protocols, insider abuse, and sanction evasion linked to state and criminal actors.

132 sources 40 clusters

Clusters reveal AI-enabled election scams, voter manipulation, political disinformation, arrests for sedition, and the use of deepfake technology to influence political and social domains.

50 sources 12 clusters

Several clusters report active exploitation of zero-day vulnerabilities in enterprise infrastructure software and security products including Citrix NetScaler, routers, and access management systems.

129 sources 20 clusters

Cyber activities and physical threats involving Russian actors targeting energy infrastructure and resources.

324 sources 48 clusters

Cyber activities by Russian state actors aimed at government entities across various regions and sectors.

339 sources 32 clusters

This topic covers DDoS campaigns originating from Iran aimed at various sectors and infrastructure within the region.

149 sources 8 clusters

Cybersecurity stories involving German government entities facing or responding to cyber threats and attacks.

136 sources 14 clusters

Cybersecurity stories involving Canadian energy companies and infrastructure, highlighting threat actors and their targeting activities.

96 sources 11 clusters

Cyber threat activity involving Iranian entities targeting energy sector infrastructure and related systems.

292 sources 41 clusters

Cyber activities linked to Chinese government entities targeting global research projects and academic institutions.

338 sources 33 clusters

Cyber threat activities involving Chinese financial institutions, including targeted attacks, partnerships, and regulatory responses.

367 sources 27 clusters

Cyber threat activity involving North Korea's Lazarus Group focusing on cryptocurrency exchanges, wallets, and blockchain infrastructure.

93 sources 21 clusters

Cyber threat activities by actors targeting India's government digital infrastructure and online services.

176 sources 18 clusters

Monitoring cyber operations and vulnerabilities targeting China's transportation infrastructure and related entities.

160 sources 12 clusters

Cybersecurity stories involving Indian healthcare organizations facing attacks, vulnerabilities, or malware campaigns.

104 sources 11 clusters

Cyber threat actors are actively targeting Canada's financial industry through various attack vectors, impacting institutions and infrastructure.

206 sources 11 clusters

Analysis of distributed denial-of-service campaigns originating from Russia aimed at various sectors and services.

165 sources 8 clusters

Monitoring cyber operations and threats targeting India's financial industry, including malware, hacking groups, and defense efforts.

79 sources 6 clusters

Cyber threat activity involving German entities compromised through supply chain attacks on software and hardware components.

367 sources 10 clusters

Cyber threat groups are actively targeting financial institutions in Germany through various attack methods and malware campaigns.

370 sources 13 clusters

Analysis of supply chain attacks involving TeamPCP targeting software packages, cloud services, and development tools.

313 sources 8 clusters

Nation-state actors conduct cyber espionage and offensive operations against critical infrastructure sectors, satellite and space-based systems, and national security targets using advanced toolkits and cloud-based frameworks.

107 sources 16 clusters

Threat actors increasingly use AI tools for prompt injection attacks, autonomous cyber operations, AI-generated phishing and vishing campaigns, and manipulation of AI systems to automate and enhance attack effectiveness.

204 sources 48 clusters

Ransomware groups are expanding data theft operations, adopting stealth evasion techniques like Safe Mode bypass, leveraging critical vulnerabilities, and deploying decentralized blockchain-based recovery methods to evade defenses.

151 sources 32 clusters

Ransomware groups are expanding data theft and extortion efforts with new tactics impacting industrial, public, healthcare, and enterprise organizations, often involving high-profile prosecutions and data leak extortion.

102 sources 20 clusters

Cryptocurrency holders and platforms face rising threats from phishing, wrench attacks, malicious developer extensions, regulatory controls, and North Korean state-backed cyber operations.

52 sources 12 clusters

Cybercriminals increasingly leverage AI for autonomous malware adaptation, AI-driven phishing, identity fraud, token jacking, and exploitation of software vulnerabilities, lowering attacker skill barriers and evolving malware tactics.

135 sources 37 clusters

Crypto exchanges, wallets, and developer tools face phishing, data breaches, physical coercion, and theft campaigns orchestrated by nation-state and criminal groups.

155 sources 21 clusters

Ransomware groups increasingly leverage advanced evasion tactics, blockchain-based recovery, and data theft campaigns impacting cloud platforms, healthcare, supply chains, and critical infrastructure.

137 sources 28 clusters

Targeted phishing and spyware operations leverage messaging apps and mercenary spyware to surveil and compromise journalists, activists, and political figures.

12 sources 4 clusters

Emerging threats involve AI models autonomously conducting cyberattacks, exploiting prompt injection vulnerabilities, and enabling sophisticated AI-powered phishing, identity fraud, and malware tactics.

209 sources 49 clusters

State-backed and criminal actors use AI, cloud services, and messaging apps to conduct sophisticated phishing, social engineering, and disinformation campaigns targeting financial, crypto, journalistic, and public audiences.

89 sources 24 clusters

Threat actors use AI-generated content, messaging platforms, impersonation scams, and phishing-as-a-service to target consumers, industries, journalists, and travelers, with law enforcement takedowns ongoing.

100 sources 24 clusters

APT groups and state-linked actors conduct espionage campaigns using cloud collaboration tools, target drone industry executives, interfere in elections, and execute cyber-kinetic operations including drone warfare and internet disruption.

160 sources 24 clusters

Multiple critical vulnerabilities in Linux distributions and open-source components enable privilege escalation and remote code execution, with active exploitation and urgent patching.

75 sources 47 clusters

Phishing campaigns exploit novel file formats, trusted platforms, and AI enhancements to conduct social engineering, credential theft, and account hijacking causing significant financial and identity breaches.

156 sources 36 clusters

Clusters cover AI-powered security automation, autonomous cyberattacks, AI-enhanced malware and fraud tactics, prompt injection exploits, and AI model misuse impacting both attack and defense.

260 sources 71 clusters

Ransomware campaigns increasingly combine large-scale data breaches with extortion tactics targeting healthcare, logistics, sports, municipalities, and multinational corporations worldwide.

189 sources 28 clusters

Ransomware campaigns increasingly combine large-scale data theft for extortion, novel evasion methods including blockchain-based recovery, and attacks on healthcare, infrastructure, and enterprises.

167 sources 28 clusters

Ransomware actors like Cl0p and ShinyHunters are increasingly stealing large volumes of sensitive data and disrupting operations in healthcare, critical infrastructure, supply chains, and diverse public and private sectors.

170 sources 24 clusters

State-linked actors, including Russian and Chinese groups, conduct cyberattacks, espionage, disinformation, and supply chain compromises against government agencies, critical infrastructure, and political figures amid geopolitical conflicts.

205 sources 37 clusters

Phishing, extortion, and laundering campaigns targeting cryptocurrency users and platforms involve state-backed actors and sophisticated fraud techniques causing significant financial losses and prompting regulatory responses.

193 sources 33 clusters

Reports highlight AI-powered cyberattacks including autonomous exploitation, prompt injection, AI agent frameworks abused for coordinated attacks, AI-enabled phishing and social engineering, and AI tools accelerating zero-click and identity fraud attacks.

185 sources 33 clusters

Threat actors actively exploit zero-day and critical remote code execution vulnerabilities in Windows and widely used enterprise software, enabling unauthorized access and system compromise.

110 sources 25 clusters

Clusters describe ransomware campaigns evolving with decentralized infrastructure, targeting healthcare, water utilities, government agencies, and financial services causing operational disruption, data extortion, and cryptocurrency-based extortion.

100 sources 24 clusters