Skip to content

Smart Topics

Smart Topics group related clusters into the story arcs that actually matter this week, so instead of scrolling thirty headlines, you read one topic. ThreatCluster AI scans the feed, finds narratives that cut across actors and incidents, and curates them daily.

Live Smart Topics

26 topics
Drone warfare and counter-drone operations in Ukraine conflict
Live

Drone warfare and counter-drone operations in Ukraine conflict

Oct 4, 2026

Clusters highlight expanding drone capabilities, drone strikes in Ukraine, military drone acquisitions, and government counter-drone programs amid rising geopolitical tensions.

www.nas.gov.uawww.l3harris.comAljazeerakyivindependent.comGround.News137 sources 43 clusters
AI deepfake scams targeting elections and executives
Live

AI deepfake scams targeting elections and executives

Oct 4, 2026

Multiple clusters report AI deepfake misuse for election interference, executive impersonation, investment fraud, harassment, and legal challenges in victim justice.

Smestreet.InAmadeuscapitalwww.parool.nlTheguardianAu.Pcmag227 sources 57 clusters
Cryptocurrency theft, laundering, and sanctions evasion attacks
Live

Cryptocurrency theft, laundering, and sanctions evasion attacks

Oct 4, 2026

Multiple clusters describe large-scale crypto exchange hacks, token thefts, laundering via privacy tools, sanctions evasion using cryptocurrency, and post-hack social engineering scams.

ChainalysisNewsbook.MtTrendingtopics.EuCryptotickerct.com183 sources 41 clusters
AI-driven cyber threats: autonomous agents and prompt injection attacks
Live

AI-driven cyber threats: autonomous agents and prompt injection attacks

Oct 4, 2026

Clusters highlight AI-powered attacks, autonomous AI agents breaching systems, prompt injection risks, AI-accelerated vulnerability discovery, and AI-enabled social engineering challenging traditional defenses.

Asiae.Co.KrTrendingtopics.EuBlog.Malwarebyteswww.theinformation.comabnormal.ai491 sources 125 clusters
Active exploitation of critical RCE vulnerabilities in enterprise software
Live

Active exploitation of critical RCE vulnerabilities in enterprise software

Oct 4, 2026

Multiple clusters report urgent exploitation of critical RCE and zero-day vulnerabilities across enterprise platforms, web frameworks, open-source libraries, and security tools, requiring immediate patching.

Helpnetsecuritycve.mitre.orgpsirt.watchguard.comwww.sentinelone.comwww.thehackerwire.com223 sources 115 clusters
State-backed cyber espionage targeting governments and critical infrastructure
Live

State-backed cyber espionage targeting governments and critical infrastructure

Oct 4, 2026

Reports detail espionage arrests, surveillance using spyware, gray zone operations, and cyberattacks by China, Russia, and other state actors against political, academic, and infrastructure targets.

ManilatimesTheshillongtimesAmadeuscapitalTheguardianHeygotrade159 sources 32 clusters
Ransomware campaigns with public leaks and law enforcement crackdowns
Live

Ransomware campaigns with public leaks and law enforcement crackdowns

Oct 4, 2026

Multiple ransomware groups conduct attacks on healthcare, legal, real estate, municipal, and critical infrastructure sectors, with ongoing leak site activity and law enforcement interventions.

www.eurojust.europa.eunvd.nist.govRansomware.LiveHeise.DeIa.Acs.Au175 sources 50 clusters
AI-powered phishing and social engineering with novel evasion tactics
Live

AI-powered phishing and social engineering with novel evasion tactics

Oct 4, 2026

Clusters report phishing attacks abusing trusted software, OAuth token theft, AI-driven social engineering, homoglyph lures, and messaging app impersonation to compromise credentials and accounts.

abnormal.aiwww.techbook-magazine.comSmestreet.InTech.YahooAustralianaviation.Au106 sources 24 clusters
Russian energy sector targeting and threats
Broad

Russian energy sector targeting and threats

May 29, 2026

Cyber activities and physical threats involving Russian actors targeting energy infrastructure and resources.

Kyivpostwww.cnn.comBusinessinsiderThehill112.Ua324 sources 48 clusters
Russian government targeting government sectors
Trending

Russian government targeting government sectors

May 29, 2026

Cyber activities by Russian state actors aimed at government entities across various regions and sectors.

En.Ara.CatPetriwww.reuters.comwww.cnn.comThehackernews339 sources 32 clusters
Iranian DDoS activity targeting regional services
Live

Iranian DDoS activity targeting regional services

May 29, 2026

This topic covers DDoS campaigns originating from Iran aimed at various sectors and infrastructure within the region.

DarkreadingFeeds2.FeedburnerCloudsekPrnewswireIndustrialcyber.Co149 sources 8 clusters
German government targeting cyber threat actors
Broad

German government targeting cyber threat actors

May 29, 2026

Cybersecurity stories involving German government entities facing or responding to cyber threats and attacks.

En.Ara.CatEinpresswirewww.reuters.comThehackernewsSecurityaffairs.Co136 sources 14 clusters
Canadian energy sector targeted by cyber threats
Live

Canadian energy sector targeted by cyber threats

May 29, 2026

Cybersecurity stories involving Canadian energy companies and infrastructure, highlighting threat actors and their targeting activities.

Aninews.InBusinessinsiderLightreadingHeise.DeSg.Finance.Yahoo96 sources 11 clusters
Iranian actors targeting energy infrastructure
Broad

Iranian actors targeting energy infrastructure

May 29, 2026

Cyber threat activity involving Iranian entities targeting energy sector infrastructure and related systems.

www.cnn.comBusinessinsiderwww.gov.ukThehillapnews.com292 sources 41 clusters
Chinese government targeting international research institutions
Broad

Chinese government targeting international research institutions

May 29, 2026

Cyber activities linked to Chinese government entities targeting global research projects and academic institutions.

En.Ara.CatPetriEinpresswirewww.reuters.comwww.cnn.com338 sources 33 clusters
Chinese financial sector targeting and defense activities
Broad

Chinese financial sector targeting and defense activities

May 29, 2026

Cyber threat activities involving Chinese financial institutions, including targeted attacks, partnerships, and regulatory responses.

En.Ara.CatEinpresswirewww.reuters.comRss.SlashdotIconnect007367 sources 27 clusters
North Korean Lazarus Group targeting cryptocurrency platforms
Live

North Korean Lazarus Group targeting cryptocurrency platforms

May 29, 2026

Cyber threat activity involving North Korea's Lazarus Group focusing on cryptocurrency exchanges, wallets, and blockchain infrastructure.

Mexc.CoBitgetTheblock.Colayerzero.networkCryptopolitan93 sources 21 clusters
Indian government targeting digital infrastructure
Broad

Indian government targeting digital infrastructure

May 29, 2026

Cyber threat activities by actors targeting India's government digital infrastructure and online services.

Einpresswirewww.cnn.comTribuneindiaSecurityaffairs.CoMillenniumpost.In176 sources 18 clusters
Chinese transportation sector cyber activities
Live

Chinese transportation sector cyber activities

May 29, 2026

Monitoring cyber operations and vulnerabilities targeting China's transportation infrastructure and related entities.

DarkreadingFeeds2.FeedburnerCloudsekPrnewswireapnews.com160 sources 12 clusters
Canadian financial sector targeted by cyber threats
Broad

Canadian financial sector targeted by cyber threats

May 29, 2026

Cyber threat actors are actively targeting Canada's financial industry through various attack vectors, impacting institutions and infrastructure.

En.Ara.Catwww.reuters.comSecurityaffairs.CoDarkreadingFeeds2.Feedburner206 sources 11 clusters
Indian healthcare sector targeted by cyber threat actors
Live

Indian healthcare sector targeted by cyber threat actors

May 29, 2026

Cybersecurity stories involving Indian healthcare organizations facing attacks, vulnerabilities, or malware campaigns.

Aninews.InEinpresswirewww.cnn.comSecurityaffairs.CoM.Economictimes104 sources 11 clusters
Russian DDoS activity targeting infrastructure
Live

Russian DDoS activity targeting infrastructure

May 29, 2026

Analysis of distributed denial-of-service campaigns originating from Russia aimed at various sectors and services.

ThehackernewsCybersecuritynewsDarkreadingFeeds2.FeedburnerCryptobriefing165 sources 8 clusters
Indian financial sector cybersecurity activity
New

Indian financial sector cybersecurity activity

May 29, 2026

Monitoring cyber operations and threats targeting India's financial industry, including malware, hacking groups, and defense efforts.

LbcSmestreet.InEtvbharatwww.reuters.comMondaq79 sources 6 clusters
German supply chain actors targeted by malicious packages
Broad

German supply chain actors targeted by malicious packages

May 29, 2026

Cyber threat activity involving German entities compromised through supply chain attacks on software and hardware components.

En.Ara.CatDigital.Nhs.Ukwww.reuters.comCsoonlineThehackernews367 sources 10 clusters
German financial sector targeted by cyber threat actors
Broad

German financial sector targeted by cyber threat actors

May 29, 2026

Cyber threat groups are actively targeting financial institutions in Germany through various attack methods and malware campaigns.

En.Ara.CatDigital.Nhs.UkEinpresswirewww.reuters.comSonatype370 sources 13 clusters
TeamPCP supply chain activity
Broad

TeamPCP supply chain activity

May 29, 2026

Analysis of supply chain attacks involving TeamPCP targeting software packages, cloud services, and development tools.

Digital.Nhs.UkTechcrunchAppleinsiderItnews.AuTechnadu313 sources 8 clusters

Archived Smart Topics

647 topics

No longer detected as trending. Sorted newest archived first.

State-linked espionage and influence campaigns targeting governments and critical sectors
Archived

State-linked espionage and influence campaigns targeting governments and critical sectors

Jul 27, 2026

Multiple clusters highlight espionage campaigns, surveillance, and hybrid tactics by Russian, North Korean, and other state-linked actors targeting government, defense, political figures, and critical infrastructure.

ThehackernewsConsilium.Europa.Euwww.politico.euDevdiscourseFeeds2.Feedburner342 sources 56 clusters
New State-Linked Cyber Espionage Targeting Government and Military
Archived

New State-Linked Cyber Espionage Targeting Government and Military

Jul 26, 2026

Nation-state actors conduct cyber espionage campaigns using malware, spyware, drones, satellite surveillance, and social media recruitment to infiltrate government, defense, and critical infrastructure networks.

ThenationalnewsThehackernewsConsilium.Europa.Euwww.politico.euen.wikipedia.org409 sources 49 clusters
This Week’s Surge in AI-Driven Offensive Cyber Operations
Archived

This Week’s Surge in AI-Driven Offensive Cyber Operations

Jul 26, 2026

Threat actors increasingly leverage AI for offensive operations including automated exploit generation, AI-powered phishing, malware delivery, autonomous attacks, and AI-enhanced malware evasion.

InsurancebusinessmagMsspalertGbhackersCybersecuritynewsedge.prnewswire.com159 sources 60 clusters
Sanctions and legal actions targeting cybercriminals and espionage actors
Archived

Sanctions and legal actions targeting cybercriminals and espionage actors

Aug 3, 2026

EU and US authorities impose sanctions and prosecute individuals involved in cybercrime, espionage, and human rights violations to disrupt malicious activities.

en.wikipedia.orggithub.comamzn.toThenationalnewsTheregister27 sources 4 clusters
Data breaches impact healthcare, consumer platforms, and public institutions
Archived

Data breaches impact healthcare, consumer platforms, and public institutions

Jul 31, 2026

Clusters report significant data exposures affecting healthcare providers, religious apps, consumer platforms, and Romanian public institutions leading to regulatory fines and privacy risks.

Feeds.4SysopsFeeds2.FeedburnerEn.Yna.Co.KrClaimdepotlaunchpad.net126 sources 17 clusters
Phishing campaigns exploiting trusted digital channels surge in credential theft attacks
Archived

Phishing campaigns exploiting trusted digital channels surge in credential theft attacks

Jul 25, 2026

Phishing and social engineering attacks increasingly abuse trusted platforms, collaboration tools, and recent breach data to steal credentials, session tokens, and financial assets across corporate, government, and consumer targets.

Feeds2.FeedburnerGbhackersPeopledaily.DigitalEastleighvoice.Co.Kewww.bka.de177 sources 49 clusters
Crypto and DeFi platforms hit by multi-million dollar cybercrime campaigns
Archived

Crypto and DeFi platforms hit by multi-million dollar cybercrime campaigns

Jul 25, 2026

Sophisticated malware, exploits, and fraud campaigns target cryptocurrency wallets, blockchain bridges, DeFi smart contracts, and exchanges, resulting in multi-million dollar thefts and operational disruptions.

ZscalerNews.Sbs.Co.KrPeopledaily.DigitalGuardian.NgEastleighvoice.Co.Ke133 sources 28 clusters
Active exploitation of critical RCE and privilege escalation vulnerabilities
Archived

Active exploitation of critical RCE and privilege escalation vulnerabilities

Jul 27, 2026

Multiple clusters report actively exploited critical vulnerabilities that allow remote code execution and privilege escalation across enterprise, Linux, and open-source platforms requiring urgent patching.

www.hacktron.aiLinuxsecurityFeedlyUbuntuTech-Insider139 sources 72 clusters
Ransomware and destructive cyberattacks disrupt industrial and critical infrastructure sectors
Archived

Ransomware and destructive cyberattacks disrupt industrial and critical infrastructure sectors

Jul 25, 2026

Ransomware groups and destructive malware campaigns exploit critical vulnerabilities and network infrastructure to disrupt operations, steal data, and demand ransoms in industrial, manufacturing, healthcare, and technology firms.

Cryptobriefingransom-isac.comOutlookbusinessSmestreet.InFeeds2.Feedburner280 sources 24 clusters
Supply chain attacks disrupt developer ecosystems and critical infrastructure
Archived

Supply chain attacks disrupt developer ecosystems and critical infrastructure

Jul 29, 2026

Clusters reveal malware and compromises in developer package ecosystems such as RubyGems and npm, as well as IT suppliers in the energy sector disrupting infrastructure and developer environments.

Linuxsecuritywww.techtarget.comcsrc.nist.govAdsadvanceTheguardian37 sources 8 clusters
Supply chain compromises hitting developer ecosystems and energy sector
Archived

Supply chain compromises hitting developer ecosystems and energy sector

Jul 30, 2026

Clusters reveal supply chain attacks exploiting developer package ecosystems like npm and RubyGems, as well as IT suppliers in the energy sector, impacting infrastructure and software development.

www.hacktron.aiLinuxsecuritywww.fortiguard.comwww.techtarget.comcsrc.nist.gov87 sources 8 clusters
Russia, North Korea, and others escalate state-sponsored cyber espionage and hybrid warfare this week
Archived

Russia, North Korea, and others escalate state-sponsored cyber espionage and hybrid warfare this week

Jul 25, 2026

Multiple clusters describe nation-state cyber operations by Russian, North Korean, and other actors conducting espionage, malware campaigns, and hybrid warfare tactics against government agencies, critical infrastructure, and military targets.

ThenationalnewsCommittees.Parliament.UkMacaubusinessZscalerwww.ukrinform.ua386 sources 53 clusters
Supply chain attacks leverage package repositories and developer ecosystems this week
Archived

Supply chain attacks leverage package repositories and developer ecosystems this week

Jul 25, 2026

Clusters reveal supply chain compromises involving malicious packages and malware campaigns targeting developer tools and repositories such as RubyGems and npm, spreading cryptojacking and other malware.

ransom-isac.comBleepingcomputerButtondownwww.cisa.govFox5Atlanta62 sources 12 clusters
Supply chain attacks compromise developer ecosystems and code-signing
Archived

Supply chain attacks compromise developer ecosystems and code-signing

Aug 1, 2026

Attackers leverage supply chain compromises in open-source package repositories, developer tools, and code-signing certificates to distribute malware and cryptominers affecting software development environments.

Linuxsecuritywww.cryptowisser.comCybersecuritynewsFeeds.FeedburnerThehackernews25 sources 8 clusters
Open-Source Supply Chain Attacks and Developer Tool Exploits
Archived

Open-Source Supply Chain Attacks and Developer Tool Exploits

Aug 2, 2026

Clusters reveal supply chain compromises involving malicious packages and vulnerabilities in open-source repositories and developer environments used to infiltrate software supply chains.

LinuxsecurityFeeds.FeedburnerGbhackersCybersecuritynewsFeeds.4Sysops9 sources 8 clusters
AI deepfake scams drive new legal and insurance countermeasures
Archived

AI deepfake scams drive new legal and insurance countermeasures

Aug 1, 2026

Clusters report AI-generated deepfake videos and calls used in scams impersonating officials and individuals, driving new legal frameworks, insurance products, and authentication methods to combat identity fraud and harassment.

Insurancebusinessmagmediaindonesia.comGuardian.Ngwww.eweek.comSg.Finance.Yahoo45 sources 12 clusters
Russian state-sponsored cyber operations targeting critical infrastructure and hybrid warfare
Archived

Russian state-sponsored cyber operations targeting critical infrastructure and hybrid warfare

Jul 24, 2026

Russian-linked cyber campaigns employ espionage, infrastructure attacks, deception tactics, and AI tools targeting government, military, and allied nations, including Ukraine and NATO members.

www.ukrinform.uaDevdiscourseTechtimesInternazionale.ItThefinancialdistrict.Ph282 sources 34 clusters
Spike in AI-enabled fraud, deepfake scams, and misinformation campaigns
Archived

Spike in AI-enabled fraud, deepfake scams, and misinformation campaigns

Jul 24, 2026

AI-generated deepfakes and generative media are increasingly used in financial fraud, scams, misinformation campaigns, blackmail, and child exploitation, raising new digital safety challenges.

Insurancebusinessmagcybernoz.comUrdupointmediaindonesia.comGuardian.Ng78 sources 20 clusters
AI Deepfake and Synthetic Media Abuse in This Week’s Fraud and Misinformation
Archived

AI Deepfake and Synthetic Media Abuse in This Week’s Fraud and Misinformation

Jul 26, 2026

AI deepfake videos and synthetic media are increasingly used in scams, misinformation campaigns, workplace misconduct, medical image forgery, and extortion, challenging detection and trust.

Gbhackersmediaindonesia.comwww.npr.orgMemeburnBiometricupdate32 sources 12 clusters
Deepfake-enabled social engineering scams and new legal responses
Archived

Deepfake-enabled social engineering scams and new legal responses

Jul 28, 2026

AI deepfake technology is used in video call scams and social engineering frauds, prompting new legal actions, regulatory efforts, and insurance coverage to combat non-consensual AI manipulation.

Insurancebusinessmagmediaindonesia.comGuardian.Ngwww.npr.orgTheregister44 sources 16 clusters
Critical RCE and privilege escalation vulnerabilities patched across major Linux distros
Archived

Critical RCE and privilege escalation vulnerabilities patched across major Linux distros

Jul 24, 2026

Multiple critical vulnerabilities enabling remote code execution and privilege escalation have been disclosed and patched across major Linux distributions including Ubuntu, Fedora, Oracle Linux, and openSUSE.

HkcertLinuxsecurityUbuntunvd.nist.govGuru3D64 sources 62 clusters
This Week’s AI-Powered Cyber Offense and Defense Campaigns
Archived

This Week’s AI-Powered Cyber Offense and Defense Campaigns

Jul 23, 2026

Clusters cover AI-powered malware campaigns, AI-driven phishing, AI-based vulnerability discovery, autonomous ransomware, and AI-enhanced defense and detection tools used by both attackers and defenders.

InsurancebusinessmagCybersecuritynewsTechgigGbhackersUrdupoint189 sources 68 clusters
Phishing Campaigns Exploiting Trusted Brands and Platforms
Archived

Phishing Campaigns Exploiting Trusted Brands and Platforms

Jul 23, 2026

Clusters report phishing and social engineering scams impersonating financial and corporate entities, leveraging trusted digital experiences, fake repositories, and evolving techniques to bypass defenses.

BleepingcomputerGbhackersChannelnewsasiaany.runFox5Atlanta91 sources 27 clusters
Supply chain attacks via package typosquatting and code-signing compromise
Archived

Supply chain attacks via package typosquatting and code-signing compromise

Jul 24, 2026

Attackers exploit software supply chains by injecting malicious code via typosquatting in package repositories and compromising developer tools and code-signing certificates to distribute malware downstream.

Technaduany.runIxbt.Gameswww.cryptowisser.comCybersecuritynews42 sources 12 clusters