Smart Topics

Clusters highlight expanding drone capabilities, drone strikes in Ukraine, military drone acquisitions, and government counter-drone programs amid rising geopolitical tensions.

137 sources 43 clusters

Multiple clusters report AI deepfake misuse for election interference, executive impersonation, investment fraud, harassment, and legal challenges in victim justice.

227 sources 57 clusters

Multiple clusters describe large-scale crypto exchange hacks, token thefts, laundering via privacy tools, sanctions evasion using cryptocurrency, and post-hack social engineering scams.

183 sources 41 clusters

Clusters highlight AI-powered attacks, autonomous AI agents breaching systems, prompt injection risks, AI-accelerated vulnerability discovery, and AI-enabled social engineering challenging traditional defenses.

491 sources 125 clusters

Multiple clusters report urgent exploitation of critical RCE and zero-day vulnerabilities across enterprise platforms, web frameworks, open-source libraries, and security tools, requiring immediate patching.

224 sources 115 clusters

Reports detail espionage arrests, surveillance using spyware, gray zone operations, and cyberattacks by China, Russia, and other state actors against political, academic, and infrastructure targets.

159 sources 32 clusters

Multiple ransomware groups conduct attacks on healthcare, legal, real estate, municipal, and critical infrastructure sectors, with ongoing leak site activity and law enforcement interventions.

175 sources 50 clusters

Clusters report phishing attacks abusing trusted software, OAuth token theft, AI-driven social engineering, homoglyph lures, and messaging app impersonation to compromise credentials and accounts.

106 sources 24 clusters

Cyber activities and physical threats involving Russian actors targeting energy infrastructure and resources.

324 sources 48 clusters

Cyber activities by Russian state actors aimed at government entities across various regions and sectors.

339 sources 32 clusters

This topic covers DDoS campaigns originating from Iran aimed at various sectors and infrastructure within the region.

149 sources 8 clusters

Cybersecurity stories involving German government entities facing or responding to cyber threats and attacks.

136 sources 14 clusters

Cybersecurity stories involving Canadian energy companies and infrastructure, highlighting threat actors and their targeting activities.

96 sources 11 clusters

Cyber threat activity involving Iranian entities targeting energy sector infrastructure and related systems.

292 sources 41 clusters

Cyber activities linked to Chinese government entities targeting global research projects and academic institutions.

338 sources 33 clusters

Cyber threat activities involving Chinese financial institutions, including targeted attacks, partnerships, and regulatory responses.

367 sources 27 clusters

Cyber threat activity involving North Korea's Lazarus Group focusing on cryptocurrency exchanges, wallets, and blockchain infrastructure.

93 sources 21 clusters

Cyber threat activities by actors targeting India's government digital infrastructure and online services.

176 sources 18 clusters

Monitoring cyber operations and vulnerabilities targeting China's transportation infrastructure and related entities.

160 sources 12 clusters

Cyber threat actors are actively targeting Canada's financial industry through various attack vectors, impacting institutions and infrastructure.

206 sources 11 clusters

Cybersecurity stories involving Indian healthcare organizations facing attacks, vulnerabilities, or malware campaigns.

104 sources 11 clusters

Analysis of distributed denial-of-service campaigns originating from Russia aimed at various sectors and services.

165 sources 8 clusters

Monitoring cyber operations and threats targeting India's financial industry, including malware, hacking groups, and defense efforts.

79 sources 6 clusters

Cyber threat activity involving German entities compromised through supply chain attacks on software and hardware components.

367 sources 10 clusters

Cyber threat groups are actively targeting financial institutions in Germany through various attack methods and malware campaigns.

370 sources 13 clusters

Analysis of supply chain attacks involving TeamPCP targeting software packages, cloud services, and development tools.

313 sources 8 clusters

Phishing and social engineering attacks increasingly leverage AI-generated content, impersonation, voice phishing (vishing), typo-squatting, and real-time hijacking to enable account takeovers across sectors.

166 sources 34 clusters

Phishing and social engineering attacks increasingly leverage AI-generated content, brand impersonation, vishing, and collaboration platforms to compromise corporate accounts, finance teams, and diverse sectors, often escalating into large-scale financial fraud.

131 sources 36 clusters

Ransomware groups increasingly focus on manufacturing, critical infrastructure, government, and political websites using double extortion, supply chain breaches, and disruptive attacks causing operational and reputational damage.

92 sources 20 clusters

Clusters report ransomware campaigns impacting manufacturing, critical infrastructure, enterprises, and government or high-profile websites using double extortion, supply chain breaches, and politically motivated defacements.

99 sources 20 clusters

Clusters describe ransomware groups exploiting critical vulnerabilities, targeting supply chains and data exchange platforms, and conducting politically motivated website defacements and ransom demands.

63 sources 16 clusters

Clusters cover AI-powered vulnerability detection, automated remediation, AI-assisted offensive cyber campaigns, prompt injection attacks, autonomous AI agent intrusions, AI model sandbox escapes, and AI-related vulnerabilities impacting software development and fraud.

108 sources 50 clusters

Clusters highlight military GPS jamming tests, drone strike activities, and navigation disruptions linked to electronic warfare in conflict zones such as Ukraine and Russia.

49 sources 8 clusters

Recent ransomware attacks increasingly employ double extortion tactics and use browser-based evasion and remote access trojans to bypass detection and pressure victims.

50 sources 16 clusters

Clusters report ransomware attacks causing operational disruption and data breaches in manufacturing, rail, healthcare, and other critical infrastructure sectors, often involving double extortion tactics.

254 sources 12 clusters

Authoritarian regimes and threat actors use cyberattacks such as DDoS and AI-generated deepfake scams to silence exiled journalists, activists, and impersonate officials for harassment and fraud.

42 sources 12 clusters

Ransomware gangs and destructive malware campaigns increasingly target industrial control systems, utilities, and OT environments causing operational disruption and prompting cybersecurity resilience enhancements.

269 sources 16 clusters

Threat actors exploit vulnerabilities in messaging apps, email platforms like Outlook Web Access, Zimbra, and collaboration tools to maintain persistent access and conduct targeted espionage campaigns.

109 sources 12 clusters

Threat actors exploit vulnerabilities in Microsoft Outlook Web Access, Microsoft 365 APIs, Signal backups, and collaboration platforms to maintain persistent access, exfiltrate data, and conduct espionage.

85 sources 12 clusters

Multiple campaigns exploit vulnerabilities in Outlook Web Access, email, and collaboration tools to maintain long-term access and conduct espionage despite remediation efforts.

77 sources 8 clusters

Clusters highlight state-sponsored cyber espionage campaigns, advanced malware use, exploitation of messaging and collaboration platform vulnerabilities, and cyberattacks disrupting critical infrastructure and essential services.

206 sources 41 clusters

State-sponsored groups conduct cyber espionage, supply chain attacks, and influence operations targeting government, defense sectors, and open source software infrastructure using malware, botnets, and email platform exploits.

150 sources 33 clusters

Multiple clusters report sophisticated phishing and vishing attacks targeting financial, enterprise, and high-value sectors using impersonation, social engineering, AI-driven deepfakes, and collaboration tools like Microsoft Teams.

97 sources 26 clusters

Phishing attacks increasingly leverage AI-generated content, trusted platform impersonation, social engineering, and novel evasion methods to enable account takeovers, financial fraud, and large-scale scams.

156 sources 44 clusters

Phishing operations increasingly use AI-generated content, impersonate trusted organizations and brands, and employ sophisticated social engineering to steal credentials and enable account takeovers across diverse sectors.

117 sources 32 clusters

Phishing attacks increasingly use AI-generated content and brand impersonation to deceive targets, facilitating credential theft, account hijacking, and evolving phishing infrastructure takedowns.

88 sources 24 clusters

Clusters describe state-backed cyber operations involving espionage, sabotage, spyware campaigns, zero-day exploits, and surveillance targeting government entities, critical infrastructure, political figures, and dissidents.

231 sources 39 clusters

Reports highlight autonomous AI agents conducting multi-stage intrusions, AI systems exploiting zero-days in software supply chains, vulnerabilities in AI platforms, and AI-assisted offensive tools used in cyberattacks.

133 sources 55 clusters

Clusters report campaigns stealing credentials and compromising enterprise VPNs, firewalls, and customer accounts through phishing, malware, and credential stuffing attacks.

28 sources 8 clusters

Clusters describe AI-generated deepfake videos, synthetic content, and misinformation campaigns aimed at influencing elections, political discourse, and public opinion.

29 sources 12 clusters