Smart Topics

Clusters highlight expanding drone capabilities, drone strikes in Ukraine, military drone acquisitions, and government counter-drone programs amid rising geopolitical tensions.

138 sources 43 clusters

Multiple clusters report AI deepfake misuse for election interference, executive impersonation, investment fraud, harassment, and legal challenges in victim justice.

228 sources 57 clusters

Multiple clusters describe large-scale crypto exchange hacks, token thefts, laundering via privacy tools, sanctions evasion using cryptocurrency, and post-hack social engineering scams.

183 sources 41 clusters

Clusters highlight AI-powered attacks, autonomous AI agents breaching systems, prompt injection risks, AI-accelerated vulnerability discovery, and AI-enabled social engineering challenging traditional defenses.

491 sources 125 clusters

Multiple clusters report urgent exploitation of critical RCE and zero-day vulnerabilities across enterprise platforms, web frameworks, open-source libraries, and security tools, requiring immediate patching.

223 sources 115 clusters

Reports detail espionage arrests, surveillance using spyware, gray zone operations, and cyberattacks by China, Russia, and other state actors against political, academic, and infrastructure targets.

159 sources 32 clusters

Multiple ransomware groups conduct attacks on healthcare, legal, real estate, municipal, and critical infrastructure sectors, with ongoing leak site activity and law enforcement interventions.

175 sources 50 clusters

Clusters report phishing attacks abusing trusted software, OAuth token theft, AI-driven social engineering, homoglyph lures, and messaging app impersonation to compromise credentials and accounts.

107 sources 24 clusters

Cyber activities and physical threats involving Russian actors targeting energy infrastructure and resources.

324 sources 48 clusters

Cyber activities by Russian state actors aimed at government entities across various regions and sectors.

339 sources 32 clusters

This topic covers DDoS campaigns originating from Iran aimed at various sectors and infrastructure within the region.

149 sources 8 clusters

Cybersecurity stories involving German government entities facing or responding to cyber threats and attacks.

136 sources 14 clusters

Cybersecurity stories involving Canadian energy companies and infrastructure, highlighting threat actors and their targeting activities.

96 sources 11 clusters

Cyber threat activity involving Iranian entities targeting energy sector infrastructure and related systems.

292 sources 41 clusters

Cyber activities linked to Chinese government entities targeting global research projects and academic institutions.

338 sources 33 clusters

Cyber threat activities involving Chinese financial institutions, including targeted attacks, partnerships, and regulatory responses.

367 sources 27 clusters

Cyber threat activity involving North Korea's Lazarus Group focusing on cryptocurrency exchanges, wallets, and blockchain infrastructure.

93 sources 21 clusters

Cyber threat activities by actors targeting India's government digital infrastructure and online services.

176 sources 18 clusters

Monitoring cyber operations and vulnerabilities targeting China's transportation infrastructure and related entities.

160 sources 12 clusters

Cyber threat actors are actively targeting Canada's financial industry through various attack vectors, impacting institutions and infrastructure.

206 sources 11 clusters

Cybersecurity stories involving Indian healthcare organizations facing attacks, vulnerabilities, or malware campaigns.

104 sources 11 clusters

Analysis of distributed denial-of-service campaigns originating from Russia aimed at various sectors and services.

165 sources 8 clusters

Monitoring cyber operations and threats targeting India's financial industry, including malware, hacking groups, and defense efforts.

79 sources 6 clusters

Cyber threat activity involving German entities compromised through supply chain attacks on software and hardware components.

367 sources 10 clusters

Cyber threat groups are actively targeting financial institutions in Germany through various attack methods and malware campaigns.

370 sources 13 clusters

Analysis of supply chain attacks involving TeamPCP targeting software packages, cloud services, and development tools.

313 sources 8 clusters

AI-generated deepfakes, synthetic identities, and AI-enhanced social engineering campaigns increasingly target individuals and enterprises through phishing, vishing, and brand impersonation to steal credentials and commit fraud.

80 sources 25 clusters

Ransomware groups increasingly collaborate with credential theft specialists and exploit vulnerabilities in third-party software and insider access to conduct extortion and data theft campaigns affecting government, manufacturing, and small businesses.

124 sources 35 clusters

Threat actors, including North Korean groups, expand supply chain compromises involving npm packages, container security, and open-source developer tools to infiltrate software ecosystems and cause data exposure.

61 sources 12 clusters

Attackers exploit vulnerabilities in blockchain bridges, DeFi governance, and crypto wallets, while sanctioned nations use cryptocurrency for sanctions evasion and laundering through complex schemes.

80 sources 24 clusters

Clusters highlight crypto wallet and Web3 platform vulnerabilities exploited for large-scale thefts, governance attacks, fraud scams, and use of crypto transactions by sanctioned states to bypass restrictions.

116 sources 28 clusters

Multiple clusters report critical software flaws in widely used infrastructure, open-source, AI tools, and enterprise software that enable remote code execution, privilege escalation, and unauthorized control, with active exploitation observed.

99 sources 56 clusters

Reports highlight the rise of AI-powered cyberattacks including AI-adaptive malware, prompt injection, AI-enabled ransomware, and AI-driven phishing, alongside emerging AI-based security tools and governance efforts.

249 sources 84 clusters

Russian FSB and GRU conduct cyberattacks and espionage campaigns against critical infrastructure, military, and government targets across NATO, EU, and Ukraine, accompanied by international diplomatic and legal responses.

248 sources 25 clusters

Clusters detail Russian state-sponsored cyber espionage and cyberattacks against EU, NATO, and critical infrastructure sectors, alongside related sanctions enforcement by the US and EU.

213 sources 10 clusters

Threat actors employ sophisticated phishing, vishing, and social engineering techniques exploiting Microsoft 365, Google Workspace, cryptocurrency wallets, hospitality, and professional users to steal credentials and conduct fraud.

128 sources 40 clusters

APT groups use sophisticated evasion methods including steganography, fileless backdoors, kernel-mode rootkits, and cloud collaboration platforms to conduct espionage targeting military, law enforcement, and critical infrastructure.

84 sources 24 clusters

Clusters report AI-driven deepfake videos, synthetic media, and disinformation campaigns targeting political leaders, ethnic groups, and journalists, raising concerns over misinformation and public trust.

47 sources 16 clusters

Recent ransomware campaigns increasingly leverage AI, signed kernel drivers, modular toolkits, SEO poisoning, proxy malware, and advanced lateral movement methods to enhance stealth, scale, and impact.

100 sources 24 clusters

Multiple clusters report AI-driven or foreign-origin online content targeting communities to manipulate social and political narratives.

8 sources 4 clusters

Clusters highlight new AI-related security threats, governance solutions, and systemic risks from advanced AI models in enterprises and society.

18 sources 4 clusters

Novel data theft methods such as pixel-based radio emissions from air-gapped systems are emerging alongside rising insider threats involving collusion and negligent insiders causing significant organizational damage.

32 sources 8 clusters

Several clusters reveal security gaps and critical flaws in industrial protocols and OT environments enabling unauthorized access and control.

23 sources 4 clusters

Multiple incidents involve significant data breaches affecting millions of users and corporate secrets, leading to lawsuits and darknet sales.

27 sources 4 clusters

Sophisticated phishing attacks use AI-driven techniques, social engineering, brand impersonation, MFA bypass, RATs, and novel delivery methods targeting sectors including hospitality, public, and private organizations.

89 sources 28 clusters

Several widely used enterprise, cloud, and network device platforms face critical remote code execution vulnerabilities that are actively exploited by threat actors to deploy malware and gain unauthorized access.

74 sources 34 clusters

Multiple clusters report critical remote code execution and privilege escalation vulnerabilities actively exploited in widely used Linux components, enterprise platforms, and cloud-native environments requiring urgent patching.

105 sources 94 clusters

Sophisticated phishing, social engineering, and infostealer campaigns increasingly use AI-generated content, impersonation, and evasion tactics like AiTM and SIM swapping to steal credentials and compromise cloud, crypto, and enterprise users.

106 sources 29 clusters

Multiple advisories and active exploitations reveal critical vulnerabilities in Linux kernels, Fedora, SUSE, and widely used open-source libraries that allow privilege escalation, container escapes, and remote code execution requiring urgent patching.

36 sources 54 clusters

Ransomware groups increasingly leverage AI automation, SEO poisoning, proxy networks, and new backdoors deployed by initial access brokers to infiltrate and persist in critical infrastructure and enterprise environments.

76 sources 24 clusters