Smart Topics
Smart Topics group related clusters into the story arcs that actually matter this week, so instead of scrolling thirty headlines, you read one topic. ThreatCluster AI scans the feed, finds narratives that cut across actors and incidents, and curates them daily.
Live Smart Topics
26 topicsDrone warfare and counter-drone operations in Ukraine conflict
Oct 4, 2026Clusters highlight expanding drone capabilities, drone strikes in Ukraine, military drone acquisitions, and government counter-drone programs amid rising geopolitical tensions.
AI deepfake scams targeting elections and executives
Oct 4, 2026Multiple clusters report AI deepfake misuse for election interference, executive impersonation, investment fraud, harassment, and legal challenges in victim justice.
Cryptocurrency theft, laundering, and sanctions evasion attacks
Oct 4, 2026Multiple clusters describe large-scale crypto exchange hacks, token thefts, laundering via privacy tools, sanctions evasion using cryptocurrency, and post-hack social engineering scams.
AI-driven cyber threats: autonomous agents and prompt injection attacks
Oct 4, 2026Clusters highlight AI-powered attacks, autonomous AI agents breaching systems, prompt injection risks, AI-accelerated vulnerability discovery, and AI-enabled social engineering challenging traditional defenses.
Active exploitation of critical RCE vulnerabilities in enterprise software
Oct 4, 2026Multiple clusters report urgent exploitation of critical RCE and zero-day vulnerabilities across enterprise platforms, web frameworks, open-source libraries, and security tools, requiring immediate patching.
State-backed cyber espionage targeting governments and critical infrastructure
Oct 4, 2026Reports detail espionage arrests, surveillance using spyware, gray zone operations, and cyberattacks by China, Russia, and other state actors against political, academic, and infrastructure targets.
Ransomware campaigns with public leaks and law enforcement crackdowns
Oct 4, 2026Multiple ransomware groups conduct attacks on healthcare, legal, real estate, municipal, and critical infrastructure sectors, with ongoing leak site activity and law enforcement interventions.
AI-powered phishing and social engineering with novel evasion tactics
Oct 4, 2026Clusters report phishing attacks abusing trusted software, OAuth token theft, AI-driven social engineering, homoglyph lures, and messaging app impersonation to compromise credentials and accounts.
Russian energy sector targeting and threats
May 29, 2026Cyber activities and physical threats involving Russian actors targeting energy infrastructure and resources.
Russian government targeting government sectors
May 29, 2026Cyber activities by Russian state actors aimed at government entities across various regions and sectors.
Iranian DDoS activity targeting regional services
May 29, 2026This topic covers DDoS campaigns originating from Iran aimed at various sectors and infrastructure within the region.
German government targeting cyber threat actors
May 29, 2026Cybersecurity stories involving German government entities facing or responding to cyber threats and attacks.
Canadian energy sector targeted by cyber threats
May 29, 2026Cybersecurity stories involving Canadian energy companies and infrastructure, highlighting threat actors and their targeting activities.
Iranian actors targeting energy infrastructure
May 29, 2026Cyber threat activity involving Iranian entities targeting energy sector infrastructure and related systems.
Chinese government targeting international research institutions
May 29, 2026Cyber activities linked to Chinese government entities targeting global research projects and academic institutions.
Chinese financial sector targeting and defense activities
May 29, 2026Cyber threat activities involving Chinese financial institutions, including targeted attacks, partnerships, and regulatory responses.
North Korean Lazarus Group targeting cryptocurrency platforms
May 29, 2026Cyber threat activity involving North Korea's Lazarus Group focusing on cryptocurrency exchanges, wallets, and blockchain infrastructure.
Indian government targeting digital infrastructure
May 29, 2026Cyber threat activities by actors targeting India's government digital infrastructure and online services.
Chinese transportation sector cyber activities
May 29, 2026Monitoring cyber operations and vulnerabilities targeting China's transportation infrastructure and related entities.
Canadian financial sector targeted by cyber threats
May 29, 2026Cyber threat actors are actively targeting Canada's financial industry through various attack vectors, impacting institutions and infrastructure.
Indian healthcare sector targeted by cyber threat actors
May 29, 2026Cybersecurity stories involving Indian healthcare organizations facing attacks, vulnerabilities, or malware campaigns.
Russian DDoS activity targeting infrastructure
May 29, 2026Analysis of distributed denial-of-service campaigns originating from Russia aimed at various sectors and services.
Indian financial sector cybersecurity activity
May 29, 2026Monitoring cyber operations and threats targeting India's financial industry, including malware, hacking groups, and defense efforts.
German supply chain actors targeted by malicious packages
May 29, 2026Cyber threat activity involving German entities compromised through supply chain attacks on software and hardware components.
German financial sector targeted by cyber threat actors
May 29, 2026Cyber threat groups are actively targeting financial institutions in Germany through various attack methods and malware campaigns.
TeamPCP supply chain activity
May 29, 2026Analysis of supply chain attacks involving TeamPCP targeting software packages, cloud services, and development tools.
Archived Smart Topics
647 topicsNo longer detected as trending. Sorted newest archived first.
State-linked espionage and influence campaigns targeting governments and critical sectors
Jul 27, 2026Multiple clusters highlight espionage campaigns, surveillance, and hybrid tactics by Russian, North Korean, and other state-linked actors targeting government, defense, political figures, and critical infrastructure.
New State-Linked Cyber Espionage Targeting Government and Military
Jul 26, 2026Nation-state actors conduct cyber espionage campaigns using malware, spyware, drones, satellite surveillance, and social media recruitment to infiltrate government, defense, and critical infrastructure networks.
This Week’s Surge in AI-Driven Offensive Cyber Operations
Jul 26, 2026Threat actors increasingly leverage AI for offensive operations including automated exploit generation, AI-powered phishing, malware delivery, autonomous attacks, and AI-enhanced malware evasion.
Sanctions and legal actions targeting cybercriminals and espionage actors
Aug 3, 2026EU and US authorities impose sanctions and prosecute individuals involved in cybercrime, espionage, and human rights violations to disrupt malicious activities.
Data breaches impact healthcare, consumer platforms, and public institutions
Jul 31, 2026Clusters report significant data exposures affecting healthcare providers, religious apps, consumer platforms, and Romanian public institutions leading to regulatory fines and privacy risks.
Phishing campaigns exploiting trusted digital channels surge in credential theft attacks
Jul 25, 2026Phishing and social engineering attacks increasingly abuse trusted platforms, collaboration tools, and recent breach data to steal credentials, session tokens, and financial assets across corporate, government, and consumer targets.
Crypto and DeFi platforms hit by multi-million dollar cybercrime campaigns
Jul 25, 2026Sophisticated malware, exploits, and fraud campaigns target cryptocurrency wallets, blockchain bridges, DeFi smart contracts, and exchanges, resulting in multi-million dollar thefts and operational disruptions.
Active exploitation of critical RCE and privilege escalation vulnerabilities
Jul 27, 2026Multiple clusters report actively exploited critical vulnerabilities that allow remote code execution and privilege escalation across enterprise, Linux, and open-source platforms requiring urgent patching.
Ransomware and destructive cyberattacks disrupt industrial and critical infrastructure sectors
Jul 25, 2026Ransomware groups and destructive malware campaigns exploit critical vulnerabilities and network infrastructure to disrupt operations, steal data, and demand ransoms in industrial, manufacturing, healthcare, and technology firms.
Supply chain attacks disrupt developer ecosystems and critical infrastructure
Jul 29, 2026Clusters reveal malware and compromises in developer package ecosystems such as RubyGems and npm, as well as IT suppliers in the energy sector disrupting infrastructure and developer environments.
Supply chain compromises hitting developer ecosystems and energy sector
Jul 30, 2026Clusters reveal supply chain attacks exploiting developer package ecosystems like npm and RubyGems, as well as IT suppliers in the energy sector, impacting infrastructure and software development.
Russia, North Korea, and others escalate state-sponsored cyber espionage and hybrid warfare this week
Jul 25, 2026Multiple clusters describe nation-state cyber operations by Russian, North Korean, and other actors conducting espionage, malware campaigns, and hybrid warfare tactics against government agencies, critical infrastructure, and military targets.
Supply chain attacks leverage package repositories and developer ecosystems this week
Jul 25, 2026Clusters reveal supply chain compromises involving malicious packages and malware campaigns targeting developer tools and repositories such as RubyGems and npm, spreading cryptojacking and other malware.
Supply chain attacks compromise developer ecosystems and code-signing
Aug 1, 2026Attackers leverage supply chain compromises in open-source package repositories, developer tools, and code-signing certificates to distribute malware and cryptominers affecting software development environments.
Open-Source Supply Chain Attacks and Developer Tool Exploits
Aug 2, 2026Clusters reveal supply chain compromises involving malicious packages and vulnerabilities in open-source repositories and developer environments used to infiltrate software supply chains.
AI deepfake scams drive new legal and insurance countermeasures
Aug 1, 2026Clusters report AI-generated deepfake videos and calls used in scams impersonating officials and individuals, driving new legal frameworks, insurance products, and authentication methods to combat identity fraud and harassment.
Russian state-sponsored cyber operations targeting critical infrastructure and hybrid warfare
Jul 24, 2026Russian-linked cyber campaigns employ espionage, infrastructure attacks, deception tactics, and AI tools targeting government, military, and allied nations, including Ukraine and NATO members.
Spike in AI-enabled fraud, deepfake scams, and misinformation campaigns
Jul 24, 2026AI-generated deepfakes and generative media are increasingly used in financial fraud, scams, misinformation campaigns, blackmail, and child exploitation, raising new digital safety challenges.
AI Deepfake and Synthetic Media Abuse in This Week’s Fraud and Misinformation
Jul 26, 2026AI deepfake videos and synthetic media are increasingly used in scams, misinformation campaigns, workplace misconduct, medical image forgery, and extortion, challenging detection and trust.
Deepfake-enabled social engineering scams and new legal responses
Jul 28, 2026AI deepfake technology is used in video call scams and social engineering frauds, prompting new legal actions, regulatory efforts, and insurance coverage to combat non-consensual AI manipulation.
Critical RCE and privilege escalation vulnerabilities patched across major Linux distros
Jul 24, 2026Multiple critical vulnerabilities enabling remote code execution and privilege escalation have been disclosed and patched across major Linux distributions including Ubuntu, Fedora, Oracle Linux, and openSUSE.
This Week’s AI-Powered Cyber Offense and Defense Campaigns
Jul 23, 2026Clusters cover AI-powered malware campaigns, AI-driven phishing, AI-based vulnerability discovery, autonomous ransomware, and AI-enhanced defense and detection tools used by both attackers and defenders.
Phishing Campaigns Exploiting Trusted Brands and Platforms
Jul 23, 2026Clusters report phishing and social engineering scams impersonating financial and corporate entities, leveraging trusted digital experiences, fake repositories, and evolving techniques to bypass defenses.
Supply chain attacks via package typosquatting and code-signing compromise
Jul 24, 2026Attackers exploit software supply chains by injecting malicious code via typosquatting in package repositories and compromising developer tools and code-signing certificates to distribute malware downstream.