Smart Topics
Smart Topics group related clusters into the story arcs that actually matter this week, so instead of scrolling thirty headlines, you read one topic. ThreatCluster AI scans the feed, finds narratives that cut across actors and incidents, and curates them daily.
Live Smart Topics
26 topicsDrone warfare and counter-drone operations in Ukraine conflict
Oct 4, 2026Clusters highlight expanding drone capabilities, drone strikes in Ukraine, military drone acquisitions, and government counter-drone programs amid rising geopolitical tensions.
AI deepfake scams targeting elections and executives
Oct 4, 2026Multiple clusters report AI deepfake misuse for election interference, executive impersonation, investment fraud, harassment, and legal challenges in victim justice.
Cryptocurrency theft, laundering, and sanctions evasion attacks
Oct 4, 2026Multiple clusters describe large-scale crypto exchange hacks, token thefts, laundering via privacy tools, sanctions evasion using cryptocurrency, and post-hack social engineering scams.
AI-driven cyber threats: autonomous agents and prompt injection attacks
Oct 4, 2026Clusters highlight AI-powered attacks, autonomous AI agents breaching systems, prompt injection risks, AI-accelerated vulnerability discovery, and AI-enabled social engineering challenging traditional defenses.
Active exploitation of critical RCE vulnerabilities in enterprise software
Oct 4, 2026Multiple clusters report urgent exploitation of critical RCE and zero-day vulnerabilities across enterprise platforms, web frameworks, open-source libraries, and security tools, requiring immediate patching.
State-backed cyber espionage targeting governments and critical infrastructure
Oct 4, 2026Reports detail espionage arrests, surveillance using spyware, gray zone operations, and cyberattacks by China, Russia, and other state actors against political, academic, and infrastructure targets.
Ransomware campaigns with public leaks and law enforcement crackdowns
Oct 4, 2026Multiple ransomware groups conduct attacks on healthcare, legal, real estate, municipal, and critical infrastructure sectors, with ongoing leak site activity and law enforcement interventions.
AI-powered phishing and social engineering with novel evasion tactics
Oct 4, 2026Clusters report phishing attacks abusing trusted software, OAuth token theft, AI-driven social engineering, homoglyph lures, and messaging app impersonation to compromise credentials and accounts.
Russian energy sector targeting and threats
May 29, 2026Cyber activities and physical threats involving Russian actors targeting energy infrastructure and resources.
Russian government targeting government sectors
May 29, 2026Cyber activities by Russian state actors aimed at government entities across various regions and sectors.
Iranian DDoS activity targeting regional services
May 29, 2026This topic covers DDoS campaigns originating from Iran aimed at various sectors and infrastructure within the region.
German government targeting cyber threat actors
May 29, 2026Cybersecurity stories involving German government entities facing or responding to cyber threats and attacks.
Canadian energy sector targeted by cyber threats
May 29, 2026Cybersecurity stories involving Canadian energy companies and infrastructure, highlighting threat actors and their targeting activities.
Iranian actors targeting energy infrastructure
May 29, 2026Cyber threat activity involving Iranian entities targeting energy sector infrastructure and related systems.
Chinese government targeting international research institutions
May 29, 2026Cyber activities linked to Chinese government entities targeting global research projects and academic institutions.
Chinese financial sector targeting and defense activities
May 29, 2026Cyber threat activities involving Chinese financial institutions, including targeted attacks, partnerships, and regulatory responses.
North Korean Lazarus Group targeting cryptocurrency platforms
May 29, 2026Cyber threat activity involving North Korea's Lazarus Group focusing on cryptocurrency exchanges, wallets, and blockchain infrastructure.
Indian government targeting digital infrastructure
May 29, 2026Cyber threat activities by actors targeting India's government digital infrastructure and online services.
Chinese transportation sector cyber activities
May 29, 2026Monitoring cyber operations and vulnerabilities targeting China's transportation infrastructure and related entities.
Canadian financial sector targeted by cyber threats
May 29, 2026Cyber threat actors are actively targeting Canada's financial industry through various attack vectors, impacting institutions and infrastructure.
Indian healthcare sector targeted by cyber threat actors
May 29, 2026Cybersecurity stories involving Indian healthcare organizations facing attacks, vulnerabilities, or malware campaigns.
Russian DDoS activity targeting infrastructure
May 29, 2026Analysis of distributed denial-of-service campaigns originating from Russia aimed at various sectors and services.
Indian financial sector cybersecurity activity
May 29, 2026Monitoring cyber operations and threats targeting India's financial industry, including malware, hacking groups, and defense efforts.
German supply chain actors targeted by malicious packages
May 29, 2026Cyber threat activity involving German entities compromised through supply chain attacks on software and hardware components.
German financial sector targeted by cyber threat actors
May 29, 2026Cyber threat groups are actively targeting financial institutions in Germany through various attack methods and malware campaigns.
TeamPCP supply chain activity
May 29, 2026Analysis of supply chain attacks involving TeamPCP targeting software packages, cloud services, and development tools.
Archived Smart Topics
647 topicsNo longer detected as trending. Sorted newest archived first.
Cryptocurrency ecosystem under attack: malware, exploits, and social engineering
Aug 3, 2026Multiple clusters report sophisticated malware, smart contract exploits, bridge attacks, and social engineering campaigns targeting cryptocurrency users, wallets, DeFi platforms, and Web3 developer ecosystems.
Cryptocurrency and Web3 malware and governance attacks surge
Jul 30, 2026Multiple clusters describe sophisticated malware campaigns, thefts, impersonation scams, and governance manipulation attacks targeting cryptocurrency platforms, wallets, and Web3 developer ecosystems.
Network infrastructure and VPN exploits enable persistent espionage
Jul 31, 2026Clusters describe critical vulnerabilities and active exploitation of network infrastructure components including VPN daemons, DHCP servers, firewalls, and proxies enabling remote code execution, access bypass, and persistent intrusion.
Cryptocurrency platform exploits and fraud campaigns surge
Aug 1, 2026Multiple campaigns target cryptocurrency users, wallets, exchanges, and blockchain platforms using phishing, malware, social engineering, bridge exploits, and app store scams resulting in significant financial losses.
Surge in AI-powered cyberattacks and deepfake fraud campaigns
Jul 29, 2026Clusters highlight AI-powered offensive tools, autonomous exploitation of zero-days, deepfake scams for misinformation and fraud, and AI-enabled automation in cyber offense and defense.
AI-generated deepfake scams and misinformation spike with detection advances
Jul 30, 2026Reports cover AI deepfake videos and calls used in scams and political manipulation, alongside advances in detection technologies and anti-deepfake identity verification methods.
AI-generated deepfake scams and disinformation targeting political and executive figures
Aug 3, 2026Clusters highlight AI-driven deepfake videos and calls used for scams, misinformation, and propaganda campaigns manipulating political protests and executive communications.
New wave of cryptocurrency malware and large-scale thefts
Jul 29, 2026Multiple clusters describe sophisticated malware, exploits, phishing, and ransomware schemes targeting cryptocurrency wallets, platforms, and Web3 professionals resulting in significant asset theft.
Advanced malware and theft campaigns targeting cryptocurrency ecosystem
Aug 8, 2026Clusters highlight sophisticated malware campaigns, phishing attacks, botnets, and exploits targeting crypto wallets, exchanges, smart contracts, and blockchain-based command and control.
Critical zero-day exploits hit enterprise network infrastructure
Jul 29, 2026Attackers actively exploit zero-day and high-severity flaws in routers, firewalls, VPN gateways, remote desktop protocols, and other infrastructure devices to gain persistent access or remote code execution.
Phishing and Disinformation Infrastructure Takedowns
Aug 2, 2026Clusters cover coordinated law enforcement takedowns of phishing services, voice phishing scams, and disinformation campaigns linked to state actors targeting political and military figures.
Ransomware and destructive attacks disrupting critical infrastructure
Jul 30, 2026Ransomware gangs and destructive malware increasingly target industrial, medical, energy, and public sector infrastructure causing operational disruptions and demanding ransoms.
Major law enforcement takedowns disrupt phishing and cybercrime networks
Jul 29, 2026Clusters cover large-scale arrests, service takedowns, and legislative efforts targeting phishing-as-a-service, voice phishing, disinformation campaigns, and cybercrime activities on the dark web.
Cryptocurrency Platform Exploits and Theft Waves
Aug 2, 2026Multiple clusters describe evolving phishing, malware, social engineering, and large-scale exploits targeting cryptocurrency wallets, exchanges, bridges, and protocols resulting in significant thefts and fraud.
Critical Linux and open-source vulnerabilities enabling RCE and privilege escalation disclosed and patched
Jul 28, 2026Multiple critical vulnerabilities affecting Linux kernels, distributions, and open-source libraries have been disclosed and patched, enabling remote code execution, privilege escalation, and denial of service.
Sophisticated malware and social engineering attacks targeting cryptocurrency ecosystem this week
Jul 28, 2026Cryptocurrency platforms and users face large-scale thefts and frauds through malware, social engineering, smart contract vulnerabilities, blockchain oracle manipulations, and nation-state espionage.
AI-enhanced phishing and impersonation campaigns spike
Jul 29, 2026Clusters reveal advanced phishing leveraging AI-generated content, brand impersonation, social engineering, and real-time account hijacking to defraud individuals and organizations.
Phishing infrastructure takedowns and law enforcement actions
Aug 3, 2026Coordinated law enforcement efforts disrupt phishing services, social engineering operations, and disinformation networks through arrests and platform account takedowns.
Phishing and social engineering campaigns exploiting AI and current events
Jul 27, 2026Phishing operations increasingly leverage AI-generated content, social engineering tied to events, voice phishing, business email compromise, and trusted services to steal credentials and cause financial losses.
Cross-chain cryptocurrency exploits and coordinated attacks
Jul 27, 2026Clusters report large-scale thefts and fraud in the cryptocurrency ecosystem via smart contract vulnerabilities, hot wallet compromises, social engineering, and state-sanctioned crypto abuse.
AI-powered phishing and social engineering campaigns targeting financial services this week
Jul 28, 2026Phishing attacks increasingly leverage AI-generated content, social engineering, impersonation, and novel malware loaders to target financial services, enterprises, and diverse sectors, often leading to sophisticated account takeovers.
Exploitation of token, CI/CD, and authentication flaws in web and cloud platforms
Jul 28, 2026Attackers exploit Insecure Direct Object References, token revocation bypasses, CI/CD automation workflows, and critical authentication vulnerabilities to gain unauthorized access and compromise servers at scale.
Recent Cryptocurrency Thefts and Blockchain Exploitation Waves
Jul 26, 2026Large-scale crypto thefts, malware targeting wallets and exchanges, bridge vulnerabilities, social engineering, and fraud schemes impact cryptocurrency users and Web3 professionals.
AI-Enhanced Phishing and Social Engineering Campaigns This Week
Jul 26, 2026Phishing operations exploit social engineering, AI-generated content, brand impersonation, and novel delivery methods to steal credentials and funds from individuals, organizations, and high-value targets across sectors.