Skip to content

Smart Topics

Smart Topics group related clusters into the story arcs that actually matter this week, so instead of scrolling thirty headlines, you read one topic. ThreatCluster AI scans the feed, finds narratives that cut across actors and incidents, and curates them daily.

Live Smart Topics

26 topics
Drone warfare and counter-drone operations in Ukraine conflict
Live

Drone warfare and counter-drone operations in Ukraine conflict

Oct 4, 2026

Clusters highlight expanding drone capabilities, drone strikes in Ukraine, military drone acquisitions, and government counter-drone programs amid rising geopolitical tensions.

www.nas.gov.uawww.l3harris.comAljazeerakyivindependent.comGround.News137 sources 43 clusters
AI deepfake scams targeting elections and executives
Live

AI deepfake scams targeting elections and executives

Oct 4, 2026

Multiple clusters report AI deepfake misuse for election interference, executive impersonation, investment fraud, harassment, and legal challenges in victim justice.

Smestreet.InAmadeuscapitalwww.parool.nlTheguardianAu.Pcmag227 sources 57 clusters
Cryptocurrency theft, laundering, and sanctions evasion attacks
Live

Cryptocurrency theft, laundering, and sanctions evasion attacks

Oct 4, 2026

Multiple clusters describe large-scale crypto exchange hacks, token thefts, laundering via privacy tools, sanctions evasion using cryptocurrency, and post-hack social engineering scams.

ChainalysisNewsbook.MtTrendingtopics.EuCryptotickerct.com183 sources 41 clusters
AI-driven cyber threats: autonomous agents and prompt injection attacks
Live

AI-driven cyber threats: autonomous agents and prompt injection attacks

Oct 4, 2026

Clusters highlight AI-powered attacks, autonomous AI agents breaching systems, prompt injection risks, AI-accelerated vulnerability discovery, and AI-enabled social engineering challenging traditional defenses.

Asiae.Co.KrTrendingtopics.EuBlog.Malwarebyteswww.theinformation.comabnormal.ai491 sources 125 clusters
Active exploitation of critical RCE vulnerabilities in enterprise software
Live

Active exploitation of critical RCE vulnerabilities in enterprise software

Oct 4, 2026

Multiple clusters report urgent exploitation of critical RCE and zero-day vulnerabilities across enterprise platforms, web frameworks, open-source libraries, and security tools, requiring immediate patching.

Helpnetsecuritycve.mitre.orgpsirt.watchguard.comwww.sentinelone.comwww.thehackerwire.com223 sources 115 clusters
State-backed cyber espionage targeting governments and critical infrastructure
Live

State-backed cyber espionage targeting governments and critical infrastructure

Oct 4, 2026

Reports detail espionage arrests, surveillance using spyware, gray zone operations, and cyberattacks by China, Russia, and other state actors against political, academic, and infrastructure targets.

ManilatimesTheshillongtimesAmadeuscapitalTheguardianHeygotrade159 sources 32 clusters
Ransomware campaigns with public leaks and law enforcement crackdowns
Live

Ransomware campaigns with public leaks and law enforcement crackdowns

Oct 4, 2026

Multiple ransomware groups conduct attacks on healthcare, legal, real estate, municipal, and critical infrastructure sectors, with ongoing leak site activity and law enforcement interventions.

www.eurojust.europa.eunvd.nist.govRansomware.LiveHeise.DeIa.Acs.Au175 sources 50 clusters
AI-powered phishing and social engineering with novel evasion tactics
Live

AI-powered phishing and social engineering with novel evasion tactics

Oct 4, 2026

Clusters report phishing attacks abusing trusted software, OAuth token theft, AI-driven social engineering, homoglyph lures, and messaging app impersonation to compromise credentials and accounts.

abnormal.aiwww.techbook-magazine.comSmestreet.InTech.YahooAustralianaviation.Au106 sources 24 clusters
Russian energy sector targeting and threats
Broad

Russian energy sector targeting and threats

May 29, 2026

Cyber activities and physical threats involving Russian actors targeting energy infrastructure and resources.

Kyivpostwww.cnn.comBusinessinsiderThehill112.Ua324 sources 48 clusters
Russian government targeting government sectors
Trending

Russian government targeting government sectors

May 29, 2026

Cyber activities by Russian state actors aimed at government entities across various regions and sectors.

En.Ara.CatPetriwww.reuters.comwww.cnn.comThehackernews339 sources 32 clusters
Iranian DDoS activity targeting regional services
Live

Iranian DDoS activity targeting regional services

May 29, 2026

This topic covers DDoS campaigns originating from Iran aimed at various sectors and infrastructure within the region.

DarkreadingFeeds2.FeedburnerCloudsekPrnewswireIndustrialcyber.Co149 sources 8 clusters
German government targeting cyber threat actors
Broad

German government targeting cyber threat actors

May 29, 2026

Cybersecurity stories involving German government entities facing or responding to cyber threats and attacks.

En.Ara.CatEinpresswirewww.reuters.comThehackernewsSecurityaffairs.Co136 sources 14 clusters
Canadian energy sector targeted by cyber threats
Live

Canadian energy sector targeted by cyber threats

May 29, 2026

Cybersecurity stories involving Canadian energy companies and infrastructure, highlighting threat actors and their targeting activities.

Aninews.InBusinessinsiderLightreadingHeise.DeSg.Finance.Yahoo96 sources 11 clusters
Iranian actors targeting energy infrastructure
Broad

Iranian actors targeting energy infrastructure

May 29, 2026

Cyber threat activity involving Iranian entities targeting energy sector infrastructure and related systems.

www.cnn.comBusinessinsiderwww.gov.ukThehillapnews.com292 sources 41 clusters
Chinese government targeting international research institutions
Broad

Chinese government targeting international research institutions

May 29, 2026

Cyber activities linked to Chinese government entities targeting global research projects and academic institutions.

En.Ara.CatPetriEinpresswirewww.reuters.comwww.cnn.com338 sources 33 clusters
Chinese financial sector targeting and defense activities
Broad

Chinese financial sector targeting and defense activities

May 29, 2026

Cyber threat activities involving Chinese financial institutions, including targeted attacks, partnerships, and regulatory responses.

En.Ara.CatEinpresswirewww.reuters.comRss.SlashdotIconnect007367 sources 27 clusters
North Korean Lazarus Group targeting cryptocurrency platforms
Live

North Korean Lazarus Group targeting cryptocurrency platforms

May 29, 2026

Cyber threat activity involving North Korea's Lazarus Group focusing on cryptocurrency exchanges, wallets, and blockchain infrastructure.

Mexc.CoBitgetTheblock.Colayerzero.networkCryptopolitan93 sources 21 clusters
Indian government targeting digital infrastructure
Broad

Indian government targeting digital infrastructure

May 29, 2026

Cyber threat activities by actors targeting India's government digital infrastructure and online services.

Einpresswirewww.cnn.comTribuneindiaSecurityaffairs.CoMillenniumpost.In176 sources 18 clusters
Chinese transportation sector cyber activities
Live

Chinese transportation sector cyber activities

May 29, 2026

Monitoring cyber operations and vulnerabilities targeting China's transportation infrastructure and related entities.

DarkreadingFeeds2.FeedburnerCloudsekPrnewswireapnews.com160 sources 12 clusters
Canadian financial sector targeted by cyber threats
Broad

Canadian financial sector targeted by cyber threats

May 29, 2026

Cyber threat actors are actively targeting Canada's financial industry through various attack vectors, impacting institutions and infrastructure.

En.Ara.Catwww.reuters.comSecurityaffairs.CoDarkreadingFeeds2.Feedburner206 sources 11 clusters
Indian healthcare sector targeted by cyber threat actors
Live

Indian healthcare sector targeted by cyber threat actors

May 29, 2026

Cybersecurity stories involving Indian healthcare organizations facing attacks, vulnerabilities, or malware campaigns.

Aninews.InEinpresswirewww.cnn.comSecurityaffairs.CoM.Economictimes104 sources 11 clusters
Russian DDoS activity targeting infrastructure
Live

Russian DDoS activity targeting infrastructure

May 29, 2026

Analysis of distributed denial-of-service campaigns originating from Russia aimed at various sectors and services.

ThehackernewsCybersecuritynewsDarkreadingFeeds2.FeedburnerCryptobriefing165 sources 8 clusters
Indian financial sector cybersecurity activity
New

Indian financial sector cybersecurity activity

May 29, 2026

Monitoring cyber operations and threats targeting India's financial industry, including malware, hacking groups, and defense efforts.

LbcSmestreet.InEtvbharatwww.reuters.comMondaq79 sources 6 clusters
German supply chain actors targeted by malicious packages
Broad

German supply chain actors targeted by malicious packages

May 29, 2026

Cyber threat activity involving German entities compromised through supply chain attacks on software and hardware components.

En.Ara.CatDigital.Nhs.Ukwww.reuters.comCsoonlineThehackernews367 sources 10 clusters
German financial sector targeted by cyber threat actors
Broad

German financial sector targeted by cyber threat actors

May 29, 2026

Cyber threat groups are actively targeting financial institutions in Germany through various attack methods and malware campaigns.

En.Ara.CatDigital.Nhs.UkEinpresswirewww.reuters.comSonatype370 sources 13 clusters
TeamPCP supply chain activity
Broad

TeamPCP supply chain activity

May 29, 2026

Analysis of supply chain attacks involving TeamPCP targeting software packages, cloud services, and development tools.

Digital.Nhs.UkTechcrunchAppleinsiderItnews.AuTechnadu313 sources 8 clusters

Archived Smart Topics

647 topics

No longer detected as trending. Sorted newest archived first.

Cryptocurrency ecosystem under attack: malware, exploits, and social engineering
Archived

Cryptocurrency ecosystem under attack: malware, exploits, and social engineering

Aug 3, 2026

Multiple clusters report sophisticated malware, smart contract exploits, bridge attacks, and social engineering campaigns targeting cryptocurrency users, wallets, DeFi platforms, and Web3 developer ecosystems.

Securityaffairs.CoCybersecuritynewsFeeds.4SysopsPluangBleepingcomputer128 sources 30 clusters
Cryptocurrency and Web3 malware and governance attacks surge
Archived

Cryptocurrency and Web3 malware and governance attacks surge

Jul 30, 2026

Multiple clusters describe sophisticated malware campaigns, thefts, impersonation scams, and governance manipulation attacks targeting cryptocurrency platforms, wallets, and Web3 developer ecosystems.

InsurancebusinessmagCybersecuritynewsFeeds.4SysopsPluangGuardian.Ng151 sources 28 clusters
Network infrastructure and VPN exploits enable persistent espionage
Archived

Network infrastructure and VPN exploits enable persistent espionage

Jul 31, 2026

Clusters describe critical vulnerabilities and active exploitation of network infrastructure components including VPN daemons, DHCP servers, firewalls, and proxies enabling remote code execution, access bypass, and persistent intrusion.

LinuxsecurityCsa.SgCsoonlinewww.it-daily.netFeeds2.Feedburner52 sources 12 clusters
Cryptocurrency platform exploits and fraud campaigns surge
Archived

Cryptocurrency platform exploits and fraud campaigns surge

Aug 1, 2026

Multiple campaigns target cryptocurrency users, wallets, exchanges, and blockchain platforms using phishing, malware, social engineering, bridge exploits, and app store scams resulting in significant financial losses.

CybersecuritynewsNews.Sbs.Co.KrPluangcyberint.comCryptopolitan92 sources 36 clusters
Surge in AI-powered cyberattacks and deepfake fraud campaigns
Archived

Surge in AI-powered cyberattacks and deepfake fraud campaigns

Jul 29, 2026

Clusters highlight AI-powered offensive tools, autonomous exploitation of zero-days, deepfake scams for misinformation and fraud, and AI-enabled automation in cyber offense and defense.

InsurancebusinessmagCybersecuritynewsTipranksMsspalertGbhackers253 sources 86 clusters
AI-generated deepfake scams and misinformation spike with detection advances
Archived

AI-generated deepfake scams and misinformation spike with detection advances

Jul 30, 2026

Reports cover AI deepfake videos and calls used in scams and political manipulation, alongside advances in detection technologies and anti-deepfake identity verification methods.

MsspalertGbhackersmediaindonesia.comwww.businesswire.comEinpresswire46 sources 16 clusters
AI-generated deepfake scams and disinformation targeting political and executive figures
Archived

AI-generated deepfake scams and disinformation targeting political and executive figures

Aug 3, 2026

Clusters highlight AI-driven deepfake videos and calls used for scams, misinformation, and propaganda campaigns manipulating political protests and executive communications.

mediaindonesia.comCybersecuritynewsFeeds2.FeedburnerPrwebwww.ilkkapohjalainen.fi21 sources 8 clusters
New wave of cryptocurrency malware and large-scale thefts
Archived

New wave of cryptocurrency malware and large-scale thefts

Jul 29, 2026

Multiple clusters describe sophisticated malware, exploits, phishing, and ransomware schemes targeting cryptocurrency wallets, platforms, and Web3 professionals resulting in significant asset theft.

Securityaffairs.CoCybersecuritynewsFoxnewsNews.Sbs.Co.KrPluang125 sources 28 clusters
Advanced malware and theft campaigns targeting cryptocurrency ecosystem
Archived

Advanced malware and theft campaigns targeting cryptocurrency ecosystem

Aug 8, 2026

Clusters highlight sophisticated malware campaigns, phishing attacks, botnets, and exploits targeting crypto wallets, exchanges, smart contracts, and blockchain-based command and control.

Securityaffairs.CoCybersecuritynewsPluangwww.nozominetworks.comcyberint.com75 sources 19 clusters
Critical zero-day exploits hit enterprise network infrastructure
Archived

Critical zero-day exploits hit enterprise network infrastructure

Jul 29, 2026

Attackers actively exploit zero-day and high-severity flaws in routers, firewalls, VPN gateways, remote desktop protocols, and other infrastructure devices to gain persistent access or remote code execution.

Tech-InsiderLinuxsecurityGbhackersThehackernewsSocprime70 sources 16 clusters
Phishing and Disinformation Infrastructure Takedowns
Archived

Phishing and Disinformation Infrastructure Takedowns

Aug 2, 2026

Clusters cover coordinated law enforcement takedowns of phishing services, voice phishing scams, and disinformation campaigns linked to state actors targeting political and military figures.

www.politico.euwww.franceinfo.frwww.bka.deagerpres.roLemonde.Fr149 sources 20 clusters
Ransomware and destructive attacks disrupting critical infrastructure
Archived

Ransomware and destructive attacks disrupting critical infrastructure

Jul 30, 2026

Ransomware gangs and destructive malware increasingly target industrial, medical, energy, and public sector infrastructure causing operational disruptions and demanding ransoms.

www.cbsnews.comwww.politico.comwww.state.govthreatbeat.comFeeds2.Feedburner321 sources 16 clusters
Major law enforcement takedowns disrupt phishing and cybercrime networks
Archived

Major law enforcement takedowns disrupt phishing and cybercrime networks

Jul 29, 2026

Clusters cover large-scale arrests, service takedowns, and legislative efforts targeting phishing-as-a-service, voice phishing, disinformation campaigns, and cybercrime activities on the dark web.

Deccanchroniclewww.stern.deKanaknewswww.bka.dewww.medianama.com92 sources 20 clusters
Cryptocurrency Platform Exploits and Theft Waves
Archived

Cryptocurrency Platform Exploits and Theft Waves

Aug 2, 2026

Multiple clusters describe evolving phishing, malware, social engineering, and large-scale exploits targeting cryptocurrency wallets, exchanges, bridges, and protocols resulting in significant thefts and fraud.

CybersecuritynewsNews.Sbs.Co.KrPluangcyberint.comCryptopolitan84 sources 28 clusters
Critical Linux and open-source vulnerabilities enabling RCE and privilege escalation disclosed and patched
Archived

Critical Linux and open-source vulnerabilities enabling RCE and privilege escalation disclosed and patched

Jul 28, 2026

Multiple critical vulnerabilities affecting Linux kernels, distributions, and open-source libraries have been disclosed and patched, enabling remote code execution, privilege escalation, and denial of service.

www.hacktron.aiHkcertLinuxsecurityGbhackersUbuntu145 sources 93 clusters
Sophisticated malware and social engineering attacks targeting cryptocurrency ecosystem this week
Archived

Sophisticated malware and social engineering attacks targeting cryptocurrency ecosystem this week

Jul 28, 2026

Cryptocurrency platforms and users face large-scale thefts and frauds through malware, social engineering, smart contract vulnerabilities, blockchain oracle manipulations, and nation-state espionage.

CybersecuritynewsNews.Sbs.Co.KrPluangcoincentral.comBleepingcomputer118 sources 30 clusters
AI-enhanced phishing and impersonation campaigns spike
Archived

AI-enhanced phishing and impersonation campaigns spike

Jul 29, 2026

Clusters reveal advanced phishing leveraging AI-generated content, brand impersonation, social engineering, and real-time account hijacking to defraud individuals and organizations.

ThehackernewsBleepingcomputerChannelnewsasiaany.runNewindianexpress200 sources 48 clusters
Phishing infrastructure takedowns and law enforcement actions
Archived

Phishing infrastructure takedowns and law enforcement actions

Aug 3, 2026

Coordinated law enforcement efforts disrupt phishing services, social engineering operations, and disinformation networks through arrests and platform account takedowns.

Kanaknewswww.bka.dewww.medianama.comnvd.nist.govWionews47 sources 8 clusters
Phishing and social engineering campaigns exploiting AI and current events
Archived

Phishing and social engineering campaigns exploiting AI and current events

Jul 27, 2026

Phishing operations increasingly leverage AI-generated content, social engineering tied to events, voice phishing, business email compromise, and trusted services to steal credentials and cause financial losses.

BleepingcomputerGbhackersCryptopolitanAiweekly.Coattack.mitre.org122 sources 37 clusters
Cross-chain cryptocurrency exploits and coordinated attacks
Archived

Cross-chain cryptocurrency exploits and coordinated attacks

Jul 27, 2026

Clusters report large-scale thefts and fraud in the cryptocurrency ecosystem via smart contract vulnerabilities, hot wallet compromises, social engineering, and state-sanctioned crypto abuse.

News.Sbs.Co.KrPluangTrmlabsLcxCnet67 sources 17 clusters
AI-powered phishing and social engineering campaigns targeting financial services this week
Archived

AI-powered phishing and social engineering campaigns targeting financial services this week

Jul 28, 2026

Phishing attacks increasingly leverage AI-generated content, social engineering, impersonation, and novel malware loaders to target financial services, enterprises, and diverse sectors, often leading to sophisticated account takeovers.

ChannelnewsasiaCryptopolitanwww.cryptowisser.comAiweekly.Convd.nist.gov134 sources 40 clusters
Exploitation of token, CI/CD, and authentication flaws in web and cloud platforms
Archived

Exploitation of token, CI/CD, and authentication flaws in web and cloud platforms

Jul 28, 2026

Attackers exploit Insecure Direct Object References, token revocation bypasses, CI/CD automation workflows, and critical authentication vulnerabilities to gain unauthorized access and compromise servers at scale.

Feeds2.FeedburnerCybersecuritynewsTiprankscts.businesswire.commsrc.microsoft.com47 sources 12 clusters
Recent Cryptocurrency Thefts and Blockchain Exploitation Waves
Archived

Recent Cryptocurrency Thefts and Blockchain Exploitation Waves

Jul 26, 2026

Large-scale crypto thefts, malware targeting wallets and exchanges, bridge vulnerabilities, social engineering, and fraud schemes impact cryptocurrency users and Web3 professionals.

News.Sbs.Co.Krany.runBleepingcomputerforms.fbi.govCryptopolitan112 sources 28 clusters
AI-Enhanced Phishing and Social Engineering Campaigns This Week
Archived

AI-Enhanced Phishing and Social Engineering Campaigns This Week

Jul 26, 2026

Phishing operations exploit social engineering, AI-generated content, brand impersonation, and novel delivery methods to steal credentials and funds from individuals, organizations, and high-value targets across sectors.

ThehackernewsFeeds2.FeedburnerMsspalertFoxnewsCybersecuritynews155 sources 46 clusters