Skip to content

Smart Topics

Smart Topics group related clusters into the story arcs that actually matter this week, so instead of scrolling thirty headlines, you read one topic. ThreatCluster AI scans the feed, finds narratives that cut across actors and incidents, and curates them daily.

Live Smart Topics

26 topics
Drone warfare and counter-drone operations in Ukraine conflict
Live

Drone warfare and counter-drone operations in Ukraine conflict

Oct 4, 2026

Clusters highlight expanding drone capabilities, drone strikes in Ukraine, military drone acquisitions, and government counter-drone programs amid rising geopolitical tensions.

www.nas.gov.uawww.l3harris.comAljazeerakyivindependent.comGround.News138 sources 43 clusters
AI deepfake scams targeting elections and executives
Live

AI deepfake scams targeting elections and executives

Oct 4, 2026

Multiple clusters report AI deepfake misuse for election interference, executive impersonation, investment fraud, harassment, and legal challenges in victim justice.

Smestreet.InAmadeuscapitalwww.parool.nlTheguardianAu.Pcmag228 sources 57 clusters
Cryptocurrency theft, laundering, and sanctions evasion attacks
Live

Cryptocurrency theft, laundering, and sanctions evasion attacks

Oct 4, 2026

Multiple clusters describe large-scale crypto exchange hacks, token thefts, laundering via privacy tools, sanctions evasion using cryptocurrency, and post-hack social engineering scams.

ChainalysisNewsbook.MtTrendingtopics.EuCryptotickerct.com183 sources 41 clusters
AI-driven cyber threats: autonomous agents and prompt injection attacks
Live

AI-driven cyber threats: autonomous agents and prompt injection attacks

Oct 4, 2026

Clusters highlight AI-powered attacks, autonomous AI agents breaching systems, prompt injection risks, AI-accelerated vulnerability discovery, and AI-enabled social engineering challenging traditional defenses.

Asiae.Co.KrTrendingtopics.EuBlog.Malwarebyteswww.theinformation.comabnormal.ai493 sources 125 clusters
Active exploitation of critical RCE vulnerabilities in enterprise software
Live

Active exploitation of critical RCE vulnerabilities in enterprise software

Oct 4, 2026

Multiple clusters report urgent exploitation of critical RCE and zero-day vulnerabilities across enterprise platforms, web frameworks, open-source libraries, and security tools, requiring immediate patching.

Helpnetsecuritycve.mitre.orgpsirt.watchguard.comwww.sentinelone.comwww.thehackerwire.com223 sources 115 clusters
State-backed cyber espionage targeting governments and critical infrastructure
Live

State-backed cyber espionage targeting governments and critical infrastructure

Oct 4, 2026

Reports detail espionage arrests, surveillance using spyware, gray zone operations, and cyberattacks by China, Russia, and other state actors against political, academic, and infrastructure targets.

ManilatimesTheshillongtimesAmadeuscapitalTheguardianHeygotrade159 sources 32 clusters
Ransomware campaigns with public leaks and law enforcement crackdowns
Live

Ransomware campaigns with public leaks and law enforcement crackdowns

Oct 4, 2026

Multiple ransomware groups conduct attacks on healthcare, legal, real estate, municipal, and critical infrastructure sectors, with ongoing leak site activity and law enforcement interventions.

www.eurojust.europa.eunvd.nist.govRansomware.LiveHeise.DeIa.Acs.Au175 sources 50 clusters
AI-powered phishing and social engineering with novel evasion tactics
Live

AI-powered phishing and social engineering with novel evasion tactics

Oct 4, 2026

Clusters report phishing attacks abusing trusted software, OAuth token theft, AI-driven social engineering, homoglyph lures, and messaging app impersonation to compromise credentials and accounts.

www.kaspersky.comabnormal.aiwww.techbook-magazine.comSmestreet.InTech.Yahoo107 sources 24 clusters
Russian energy sector targeting and threats
Broad

Russian energy sector targeting and threats

May 29, 2026

Cyber activities and physical threats involving Russian actors targeting energy infrastructure and resources.

Kyivpostwww.cnn.comBusinessinsiderThehill112.Ua324 sources 48 clusters
Russian government targeting government sectors
Trending

Russian government targeting government sectors

May 29, 2026

Cyber activities by Russian state actors aimed at government entities across various regions and sectors.

En.Ara.CatPetriwww.reuters.comwww.cnn.comThehackernews339 sources 32 clusters
Iranian DDoS activity targeting regional services
Live

Iranian DDoS activity targeting regional services

May 29, 2026

This topic covers DDoS campaigns originating from Iran aimed at various sectors and infrastructure within the region.

DarkreadingFeeds2.FeedburnerCloudsekPrnewswireIndustrialcyber.Co149 sources 8 clusters
German government targeting cyber threat actors
Broad

German government targeting cyber threat actors

May 29, 2026

Cybersecurity stories involving German government entities facing or responding to cyber threats and attacks.

En.Ara.CatEinpresswirewww.reuters.comThehackernewsSecurityaffairs.Co136 sources 14 clusters
Canadian energy sector targeted by cyber threats
Live

Canadian energy sector targeted by cyber threats

May 29, 2026

Cybersecurity stories involving Canadian energy companies and infrastructure, highlighting threat actors and their targeting activities.

Aninews.InBusinessinsiderLightreadingHeise.DeSg.Finance.Yahoo96 sources 11 clusters
Iranian actors targeting energy infrastructure
Broad

Iranian actors targeting energy infrastructure

May 29, 2026

Cyber threat activity involving Iranian entities targeting energy sector infrastructure and related systems.

www.cnn.comBusinessinsiderwww.gov.ukThehillapnews.com292 sources 41 clusters
Chinese government targeting international research institutions
Broad

Chinese government targeting international research institutions

May 29, 2026

Cyber activities linked to Chinese government entities targeting global research projects and academic institutions.

En.Ara.CatPetriEinpresswirewww.reuters.comwww.cnn.com338 sources 33 clusters
Chinese financial sector targeting and defense activities
Broad

Chinese financial sector targeting and defense activities

May 29, 2026

Cyber threat activities involving Chinese financial institutions, including targeted attacks, partnerships, and regulatory responses.

En.Ara.CatEinpresswirewww.reuters.comRss.SlashdotIconnect007367 sources 27 clusters
North Korean Lazarus Group targeting cryptocurrency platforms
Live

North Korean Lazarus Group targeting cryptocurrency platforms

May 29, 2026

Cyber threat activity involving North Korea's Lazarus Group focusing on cryptocurrency exchanges, wallets, and blockchain infrastructure.

Mexc.CoBitgetTheblock.Colayerzero.networkCryptopolitan93 sources 21 clusters
Indian government targeting digital infrastructure
Broad

Indian government targeting digital infrastructure

May 29, 2026

Cyber threat activities by actors targeting India's government digital infrastructure and online services.

Einpresswirewww.cnn.comTribuneindiaSecurityaffairs.CoMillenniumpost.In176 sources 18 clusters
Chinese transportation sector cyber activities
Live

Chinese transportation sector cyber activities

May 29, 2026

Monitoring cyber operations and vulnerabilities targeting China's transportation infrastructure and related entities.

DarkreadingFeeds2.FeedburnerCloudsekPrnewswireapnews.com160 sources 12 clusters
Canadian financial sector targeted by cyber threats
Broad

Canadian financial sector targeted by cyber threats

May 29, 2026

Cyber threat actors are actively targeting Canada's financial industry through various attack vectors, impacting institutions and infrastructure.

En.Ara.Catwww.reuters.comSecurityaffairs.CoDarkreadingFeeds2.Feedburner206 sources 11 clusters
Indian healthcare sector targeted by cyber threat actors
Live

Indian healthcare sector targeted by cyber threat actors

May 29, 2026

Cybersecurity stories involving Indian healthcare organizations facing attacks, vulnerabilities, or malware campaigns.

Aninews.InEinpresswirewww.cnn.comSecurityaffairs.CoM.Economictimes104 sources 11 clusters
Russian DDoS activity targeting infrastructure
Live

Russian DDoS activity targeting infrastructure

May 29, 2026

Analysis of distributed denial-of-service campaigns originating from Russia aimed at various sectors and services.

ThehackernewsCybersecuritynewsDarkreadingFeeds2.FeedburnerCryptobriefing165 sources 8 clusters
Indian financial sector cybersecurity activity
New

Indian financial sector cybersecurity activity

May 29, 2026

Monitoring cyber operations and threats targeting India's financial industry, including malware, hacking groups, and defense efforts.

LbcSmestreet.InEtvbharatwww.reuters.comMondaq79 sources 6 clusters
German supply chain actors targeted by malicious packages
Broad

German supply chain actors targeted by malicious packages

May 29, 2026

Cyber threat activity involving German entities compromised through supply chain attacks on software and hardware components.

En.Ara.CatDigital.Nhs.Ukwww.reuters.comCsoonlineThehackernews367 sources 10 clusters
German financial sector targeted by cyber threat actors
Broad

German financial sector targeted by cyber threat actors

May 29, 2026

Cyber threat groups are actively targeting financial institutions in Germany through various attack methods and malware campaigns.

En.Ara.CatDigital.Nhs.UkEinpresswirewww.reuters.comSonatype370 sources 13 clusters
TeamPCP supply chain activity
Broad

TeamPCP supply chain activity

May 29, 2026

Analysis of supply chain attacks involving TeamPCP targeting software packages, cloud services, and development tools.

Digital.Nhs.UkTechcrunchAppleinsiderItnews.AuTechnadu313 sources 8 clusters

Archived Smart Topics

647 topics

No longer detected as trending. Sorted newest archived first.

Ransomware and Malware Campaigns Leveraging Credential Theft and Advanced Network Techniques
Archived

Ransomware and Malware Campaigns Leveraging Credential Theft and Advanced Network Techniques

Jul 7, 2026

Emerging ransomware groups and malware campaigns leverage stolen credentials, operational security lapses, and sophisticated remote execution and persistence methods to compromise diverse sectors including industrial and enterprise environments.

Uk.Finance.YahooGbhackerswww.josefelipeotero.comwww.prnewswire.comEastleighvoice.Co.Ke43 sources 20 clusters
Financial Exploits and Fraud Targeting Cryptocurrency and DeFi Platforms
Archived

Financial Exploits and Fraud Targeting Cryptocurrency and DeFi Platforms

Jul 7, 2026

Crypto and DeFi ecosystems face diverse financial attacks including flash loan exploits, wallet manipulation, smart contract vulnerabilities, and state seizures of illicit assets.

ThehackernewsWeexcyberpolice.gov.uawww.cryptowisser.comIndex.Vn61 sources 17 clusters
State-Linked Cyber Espionage and Sabotage Targeting Critical Infrastructure and Political Entities
Archived

State-Linked Cyber Espionage and Sabotage Targeting Critical Infrastructure and Political Entities

Jul 7, 2026

Law enforcement and reports reveal nation-state cyber operations involving espionage, sabotage, and influence campaigns against critical infrastructure, government, media, and political figures amid geopolitical tensions.

ShafaqSocprimeKyivpostMemeburnCbsnews184 sources 41 clusters
This week’s emerging threats and exploits in cryptocurrency and DeFi
Archived

This week’s emerging threats and exploits in cryptocurrency and DeFi

Jul 8, 2026

Cryptocurrency and DeFi platforms face complex exploits including flash loans, wallet address swapping, SIM swaps, infostealers, and laundering linked to state-backed threat actors, resulting in large-scale thefts and law enforcement seizures.

Kucoinwww.state.govThehackernewswww.sootoday.comWeex102 sources 28 clusters
AI-Driven Offensive Techniques: Prompt Injection, Deepfakes, and Supply Chain Attacks
Archived

AI-Driven Offensive Techniques: Prompt Injection, Deepfakes, and Supply Chain Attacks

Jul 5, 2026

Emerging AI-powered cyber threats leverage prompt injection, AI-generated deepfakes, SEO poisoning, and attacks on AI software supply chains to conduct sophisticated fraud, misinformation, and exploitation campaigns.

Feeds.4SysopsCybernewswww.microsoft.compromptarmor.substack.comProofpoint201 sources 50 clusters
Critical RCE and Privilege Escalation Vulnerabilities Actively Exploited
Archived

Critical RCE and Privilege Escalation Vulnerabilities Actively Exploited

Jul 5, 2026

Multiple clusters report critical software vulnerabilities across open-source, enterprise, cloud-native, and Linux ecosystems that allow attackers to execute code remotely, escalate privileges, or bypass authentication, with active exploitation observed.

Gbhackersaccess.redhat.comCsoonlineLinuxsecuritygithub.com108 sources 69 clusters
Phishing and Account Takeover Campaigns Evolve with Advanced Evasion
Archived

Phishing and Account Takeover Campaigns Evolve with Advanced Evasion

Jul 5, 2026

Phishing operations increasingly use impersonation, social engineering, AiTM kits, Microsoft 365 collaboration features, and novel evasion methods to deliver malware, remote access trojans, and steal credentials across cloud, crypto, and targeted industries.

Feeds.Feedburneraadinternals.comany.runSecurelistFeeds.4Sysops129 sources 34 clusters
Sector-Specific Phishing and Social Engineering Campaigns Exploiting Trusted Brands
Archived

Sector-Specific Phishing and Social Engineering Campaigns Exploiting Trusted Brands

Jul 7, 2026

Attackers use tailored social engineering tactics including event- and sector-specific lures, brand impersonation, voice phishing, and social media ads to deceive victims and facilitate fraud.

9To5Macamzn.toCybersecuritynewswww.sophos.comwww.infosecurityeurope.com35 sources 12 clusters
Supply Chain Attacks Target Open-Source Developer Accounts and Package Ecosystems
Archived

Supply Chain Attacks Target Open-Source Developer Accounts and Package Ecosystems

Jul 5, 2026

Threat actors compromise open-source maintainer accounts and exploit vulnerabilities in package registries and plugin marketplaces to distribute malicious code and malware across software supply chains.

Gbhackerswww.vulncheck.comMondoocve.akaoma.comthreatlabz.zscaler.com42 sources 12 clusters
Major Data Breaches Expose Sensitive Information Triggering Legal Actions
Archived

Major Data Breaches Expose Sensitive Information Triggering Legal Actions

Jul 5, 2026

Multiple large-scale data breaches impact healthcare, education, nonprofit, and corporate sectors, exposing personal and financial data and triggering investigations, settlements, and regulatory actions.

Texasborderbusinessskift.comen.wikipedia.orgNextgovClaimdepot89 sources 24 clusters
Ransomware and Malware Campaigns Employ Novel Delivery and Evasion Techniques
Archived

Ransomware and Malware Campaigns Employ Novel Delivery and Evasion Techniques

Jul 5, 2026

Ransomware groups increasingly use autonomous AI, browser extensions, proxy networks, DLL sideloading, and initial access brokers to disrupt critical infrastructure, healthcare, and enterprise endpoints with advanced evasion and delivery methods.

StartupfortuneDeccanheraldDaijiworldDevdiscourseZscaler238 sources 34 clusters
Cryptocurrency and DeFi Under Sustained Cyberattack with New Exploits
Archived

Cryptocurrency and DeFi Under Sustained Cyberattack with New Exploits

Jul 5, 2026

Crypto platforms, wallets, and decentralized finance projects face exploits including signature flaws, SIM swap, supply chain compromises, blockchain bridge breaches, and state asset seizures, prompting governance reforms and highlighting evolving threats.

LinuxsecurityCryptopotatoGulfnewsCbsnewsBitget128 sources 36 clusters
Critical RCE and Privilege Escalation Exploits in Linux and Enterprise Software
Archived

Critical RCE and Privilege Escalation Exploits in Linux and Enterprise Software

Jul 2, 2026

Multiple critical vulnerabilities enabling remote code execution and privilege escalation have been disclosed and actively exploited across open-source Linux components, Fedora, SUSE, and widely used enterprise applications.

LinuxsecurityGbhackersaccess.redhat.comCsoonlineCcb.Belgium.Be92 sources 74 clusters
Cryptocurrency Exploits, Thefts, and Law Enforcement Crackdowns
Archived

Cryptocurrency Exploits, Thefts, and Law Enforcement Crackdowns

Jul 2, 2026

Threat actors continue to target cryptocurrency users, DeFi platforms, and blockchain bridges through malware, scams, SIM swaps, and supply-chain attacks, while law enforcement agencies conduct seizures and crackdowns on illicit crypto activities.

CryptopotatoGulfnewswww.vulncheck.comCybernewsCryptorank95 sources 32 clusters
State-Sponsored Espionage and Sabotage Targeting Critical Sectors
Archived

State-Sponsored Espionage and Sabotage Targeting Critical Sectors

Jul 2, 2026

Nation-state actors, including Russian and Chinese-linked groups, conduct sophisticated espionage, sabotage, and influence operations against political figures, media, energy, water utilities, and election infrastructure.

ShafaqSocprimeAfrGlobalbankingandfinanceCbsnews139 sources 28 clusters
Malicious Open-Source Packages and AI Supply Chain Threats
Archived

Malicious Open-Source Packages and AI Supply Chain Threats

Jul 7, 2026

Clusters highlight risks from malicious open-source packages delivering malware, AI-related supply chain threats, and domain squatting impacting software and AI ecosystems.

GbhackersPrnewswireCybersecuritynewswww.netrise.ioedge.prnewswire.com37 sources 12 clusters
Microsoft 365 and Cloud Service Exploits Including MFA Bypass
Archived

Microsoft 365 and Cloud Service Exploits Including MFA Bypass

Jul 2, 2026

Attackers increasingly exploit Microsoft 365 environments and enterprise cloud platforms through password spraying, phishing kits bypassing MFA, and identity-based attacks to gain unauthorized access.

Feeds.Feedburneraadinternals.comany.runMarkets.BusinessinsiderSecurelist66 sources 20 clusters
Advanced Evasion Phishing and Social Engineering Campaigns
Archived

Advanced Evasion Phishing and Social Engineering Campaigns

Jul 2, 2026

Recent phishing and social engineering operations employ novel evasion techniques such as authentication laundering and AI-enhanced methods to target enterprises, hospitality, financial users, and consumers across multiple platforms including Microsoft 365.

www.microsoft.comProofpointaadinternals.comany.runGulfnews98 sources 28 clusters
This Week’s Law Enforcement Disruptions of Cybercrime Infrastructure
Archived

This Week’s Law Enforcement Disruptions of Cybercrime Infrastructure

Jul 1, 2026

Coordinated police operations target cybercrime forums, ransomware infrastructure, online fraud, gambling syndicates, and cybercrime-as-a-service platforms to disrupt illicit activities.

Dev.Uawww.ukrinform.uaKrypt3Ia.WordpressPunchngwww.europol.europa.eu48 sources 12 clusters
This Week’s AI-Driven Cyber Offense and Defense Advances
Archived

This Week’s AI-Driven Cyber Offense and Defense Advances

Jul 1, 2026

Recent developments include AI-powered penetration testing, vulnerability discovery, incident response, and emerging AI-enabled attack tools and malware using prompt injection and evasion techniques.

www.barracuda.comFeeds.4SysopsCybernewspromptarmor.substack.comPrnewswire152 sources 53 clusters
Novel Phishing and Social Engineering Campaigns Exploiting Trust and Urgency
Archived

Novel Phishing and Social Engineering Campaigns Exploiting Trust and Urgency

Jul 1, 2026

Attackers increasingly use social engineering tactics including QR code scams, RAT-laden emails, fraudulent AI tenants, and targeted campaigns against tourists and high-profile individuals.

CybersecuritynewsBlog.Knowbe4TimesofmaltaInfosecurity-MagazineAfr89 sources 28 clusters
Ransomware Campaigns Using Novel Delivery and Network Exploits
Archived

Ransomware Campaigns Using Novel Delivery and Network Exploits

Jul 1, 2026

Emerging ransomware operations use innovative delivery techniques such as SEO poisoning, malware-based proxies, browser extensions, and actively exploit network and firewall vulnerabilities.

UpguardZscalerDigitalterminal.InGbhackersFeeds.Feedburner46 sources 16 clusters
Active Exploitation of Critical RCE and Privilege Escalation Vulnerabilities
Archived

Active Exploitation of Critical RCE and Privilege Escalation Vulnerabilities

Jul 1, 2026

Multiple critical vulnerabilities enabling remote code execution and privilege escalation in widely used open-source and enterprise software are being actively exploited by attackers.

Csoonlinegithub.comcve.mitre.orgwww.jenkins.ioGbhackers88 sources 45 clusters
Ransomware Campaigns Using Novel Delivery and Access Exploitation
Archived

Ransomware Campaigns Using Novel Delivery and Access Exploitation

Jul 2, 2026

Ransomware groups are adopting novel infiltration methods including SEO poisoning, malware-based proxy networks, exploitation of firewall vulnerabilities, malicious browser extensions, and access broker backdoors to target enterprises and critical infrastructure.

ZscalerSearchsecurity.TechtargetMsspalertTheregisterFeeds2.Feedburner66 sources 23 clusters