Smart Topics
Smart Topics group related clusters into the story arcs that actually matter this week, so instead of scrolling thirty headlines, you read one topic. ThreatCluster AI scans the feed, finds narratives that cut across actors and incidents, and curates them daily.
Live Smart Topics
26 topicsDrone warfare and counter-drone operations in Ukraine conflict
Oct 4, 2026Clusters highlight expanding drone capabilities, drone strikes in Ukraine, military drone acquisitions, and government counter-drone programs amid rising geopolitical tensions.
AI deepfake scams targeting elections and executives
Oct 4, 2026Multiple clusters report AI deepfake misuse for election interference, executive impersonation, investment fraud, harassment, and legal challenges in victim justice.
Cryptocurrency theft, laundering, and sanctions evasion attacks
Oct 4, 2026Multiple clusters describe large-scale crypto exchange hacks, token thefts, laundering via privacy tools, sanctions evasion using cryptocurrency, and post-hack social engineering scams.
AI-driven cyber threats: autonomous agents and prompt injection attacks
Oct 4, 2026Clusters highlight AI-powered attacks, autonomous AI agents breaching systems, prompt injection risks, AI-accelerated vulnerability discovery, and AI-enabled social engineering challenging traditional defenses.
Active exploitation of critical RCE vulnerabilities in enterprise software
Oct 4, 2026Multiple clusters report urgent exploitation of critical RCE and zero-day vulnerabilities across enterprise platforms, web frameworks, open-source libraries, and security tools, requiring immediate patching.
State-backed cyber espionage targeting governments and critical infrastructure
Oct 4, 2026Reports detail espionage arrests, surveillance using spyware, gray zone operations, and cyberattacks by China, Russia, and other state actors against political, academic, and infrastructure targets.
Ransomware campaigns with public leaks and law enforcement crackdowns
Oct 4, 2026Multiple ransomware groups conduct attacks on healthcare, legal, real estate, municipal, and critical infrastructure sectors, with ongoing leak site activity and law enforcement interventions.
AI-powered phishing and social engineering with novel evasion tactics
Oct 4, 2026Clusters report phishing attacks abusing trusted software, OAuth token theft, AI-driven social engineering, homoglyph lures, and messaging app impersonation to compromise credentials and accounts.
Russian energy sector targeting and threats
May 29, 2026Cyber activities and physical threats involving Russian actors targeting energy infrastructure and resources.
Russian government targeting government sectors
May 29, 2026Cyber activities by Russian state actors aimed at government entities across various regions and sectors.
Iranian DDoS activity targeting regional services
May 29, 2026This topic covers DDoS campaigns originating from Iran aimed at various sectors and infrastructure within the region.
German government targeting cyber threat actors
May 29, 2026Cybersecurity stories involving German government entities facing or responding to cyber threats and attacks.
Canadian energy sector targeted by cyber threats
May 29, 2026Cybersecurity stories involving Canadian energy companies and infrastructure, highlighting threat actors and their targeting activities.
Iranian actors targeting energy infrastructure
May 29, 2026Cyber threat activity involving Iranian entities targeting energy sector infrastructure and related systems.
Chinese government targeting international research institutions
May 29, 2026Cyber activities linked to Chinese government entities targeting global research projects and academic institutions.
Chinese financial sector targeting and defense activities
May 29, 2026Cyber threat activities involving Chinese financial institutions, including targeted attacks, partnerships, and regulatory responses.
North Korean Lazarus Group targeting cryptocurrency platforms
May 29, 2026Cyber threat activity involving North Korea's Lazarus Group focusing on cryptocurrency exchanges, wallets, and blockchain infrastructure.
Indian government targeting digital infrastructure
May 29, 2026Cyber threat activities by actors targeting India's government digital infrastructure and online services.
Chinese transportation sector cyber activities
May 29, 2026Monitoring cyber operations and vulnerabilities targeting China's transportation infrastructure and related entities.
Canadian financial sector targeted by cyber threats
May 29, 2026Cyber threat actors are actively targeting Canada's financial industry through various attack vectors, impacting institutions and infrastructure.
Indian healthcare sector targeted by cyber threat actors
May 29, 2026Cybersecurity stories involving Indian healthcare organizations facing attacks, vulnerabilities, or malware campaigns.
Russian DDoS activity targeting infrastructure
May 29, 2026Analysis of distributed denial-of-service campaigns originating from Russia aimed at various sectors and services.
Indian financial sector cybersecurity activity
May 29, 2026Monitoring cyber operations and threats targeting India's financial industry, including malware, hacking groups, and defense efforts.
German supply chain actors targeted by malicious packages
May 29, 2026Cyber threat activity involving German entities compromised through supply chain attacks on software and hardware components.
German financial sector targeted by cyber threat actors
May 29, 2026Cyber threat groups are actively targeting financial institutions in Germany through various attack methods and malware campaigns.
TeamPCP supply chain activity
May 29, 2026Analysis of supply chain attacks involving TeamPCP targeting software packages, cloud services, and development tools.
Archived Smart Topics
647 topicsNo longer detected as trending. Sorted newest archived first.
Supply chain attacks targeting open-source and software development ecosystems
Jun 22, 2026Attackers increasingly compromise open-source package repositories and development environments through malicious build scripts, plugins, and loaders to steal credentials and disrupt software supply chains.
Drone warfare and countermeasures impacting critical infrastructure and conflict zones
Jun 14, 2026Drone strikes, unauthorized drone activities, and the development of counter-drone technologies are increasingly shaping military conflicts and security operations, with notable impacts on critical infrastructure and regional security.
Active exploitation of critical enterprise software vulnerabilities enabling RCE and account takeover
Jun 14, 2026Several high-severity vulnerabilities in widely used enterprise software and platforms allow attackers to execute code remotely, hijack accounts, bypass authorization, and escalate privileges, with multiple advisories reporting active exploitation.
Advanced espionage campaigns leveraging malware, social engineering, and persistence
Jun 14, 2026State-backed and sophisticated espionage campaigns employ novel delivery methods, social engineering including fake profiles, authentication stack compromises, and targeting of managed service providers to maintain persistent access and gather intelligence amid geopolitical tensions.
Surge in deepfake and AI-driven disinformation campaigns threatening political processes
Jun 17, 2026Clusters reveal rising misuse of deepfake and voice-cloning technologies in scams, political misinformation, election interference, and AI-driven synthetic identity fraud impacting national security and public health.
Geopolitical conflicts fueling combined cyber and kinetic attacks on critical infrastructure
Jun 14, 2026Ongoing geopolitical tensions, including Russia-Ukraine, Iran-Israel, and Indo-Pacific rivalries, are fueling combined cyberattacks, drone strikes, espionage, and military actions that disrupt critical infrastructure and influence regional security dynamics.
Supply chain attacks targeting open-source package repositories
Jun 14, 2026Sophisticated supply chain compromises have been observed injecting malware into open-source package repositories and development pipelines, affecting thousands of users and developer ecosystems such as npm and PyPI.
Phishing and account takeover campaigns targeting critical infrastructure and cloud platforms
Jun 14, 2026Multiple sophisticated phishing and social engineering campaigns exploit cloud and mobile platforms, impersonate trusted entities, and leverage OAuth and account recovery flaws to compromise accounts in energy, financial, and enterprise sectors.
Novel Malware and AI-Driven Phishing Campaigns Targeting Credentials and Cryptocurrency
Jun 11, 2026Multiple clusters describe phishing-as-a-service, AI-enabled phishing, social engineering scams, malware exploiting software supply chains, session hijacking, and cryptocurrency wallet compromises targeting diverse user groups.
State-Sponsored Cyber Espionage and Influence Operations Targeting Critical Infrastructure and Media
Jun 11, 2026Clusters reveal nation-state cyber espionage campaigns using sophisticated malware, social engineering, fake personas, and disinformation to influence elections, surveil journalists, and target critical infrastructure.
Critical RCE and DoS Vulnerabilities Actively Exploited in Enterprise and Linux Ecosystems
Jun 11, 2026Multiple clusters report active exploitation and patching of critical remote code execution and denial-of-service vulnerabilities across widely used enterprise software, Linux kernels, distributions, and open-source components.
Critical infrastructure and OT cyber threats surge amid geopolitical tensions
Jun 17, 2026Cyberattacks, drone threats, and electronic warfare increasingly target critical infrastructure and OT environments in energy, maritime, and industrial sectors, prompting new partnerships and security assessments.
Critical Vulnerabilities and Supply Chain Attacks in Software Platforms and Developer Tools
Jun 11, 2026Clusters describe critical flaws and active exploits in enterprise software, server management, developer tools, and npm ecosystems enabling remote code execution and supply chain compromises.
Cryptocurrency Exploits, Laundering Schemes, and Financial Crime Prosecutions
Jun 11, 2026Clusters highlight large-scale cryptocurrency thefts, smart contract and cross-chain bridge vulnerabilities, laundering schemes, and law enforcement actions disrupting crypto-enabled financial crimes.
Geopolitical Conflicts Fuel Cyber and Kinetic Attacks on Critical Infrastructure
Jun 11, 2026Clusters highlight state-backed cyber and kinetic attacks, drone and naval military developments, sanctions enforcement, and hybrid operations impacting critical infrastructure and regional security amid ongoing geopolitical tensions.
Emerging Ransomware and Malware Strains Causing Operational Disruptions and Data Loss
Jun 11, 2026New ransomware variants and malware campaigns are causing permanent data loss, operational shutdowns in critical infrastructure and education sectors, and evolving extortion tactics.
Geopolitical Cyber-Physical Attacks Disrupting Critical Infrastructure
Jun 7, 2026Ongoing geopolitical tensions drive cyber and kinetic attacks, espionage, military escalations, and disruptions to energy, maritime, and supply chain infrastructure across multiple regions.
Drone Warfare and Counter-Drone Tactics in Current Conflicts
Jun 7, 2026Clusters highlight drone attacks, GPS jamming/spoofing, and counter-drone developments impacting military, civilian, and critical infrastructure sectors amid ongoing conflicts including Ukraine.
This Week’s AI Attack Vectors: Prompt Injection and Autonomous Agent Flaws
Jun 7, 2026Emerging AI threats include prompt injection attacks on AI and CI/CD systems, vulnerabilities in autonomous AI agents, AI-driven phishing, and AI-powered defense tools addressing these evolving risks.
Global Law Enforcement Crackdowns on Cybercrime Marketplaces and Ransomware
Jun 7, 2026Clusters highlight prosecutions, regulatory actions, and multinational efforts against dark web markets, ransomware campaigns, and extortion targeting critical infrastructure and healthcare.
State-linked cyber and kinetic attacks on critical infrastructure and maritime assets
Jun 5, 2026State-linked cyber and kinetic operations target critical infrastructure including nuclear plants, undersea cables, and maritime assets amid geopolitical tensions and gray-zone conflicts.
Drone and cyber-physical warfare in the Russia-Ukraine conflict
Jun 5, 2026Ongoing Russia-Ukraine hostilities feature coordinated drone strikes, missile attacks, cyber intrusions, and counter-drone operations targeting military and critical infrastructure assets.
Geopolitical cyber and kinetic conflict in Russia-Ukraine and regional theaters
Jun 4, 2026Ongoing cyberattacks, drone and kinetic strikes, espionage, sanctions enforcement, and military posturing characterize the multifaceted conflict involving Russia, Ukraine, and regional actors including Iran, Greece, and North Korea.
AI-Enhanced Phishing and Social Engineering Campaigns
Jun 7, 2026Multiple campaigns use hacked social media accounts, major ad and messaging platforms, AI-enhanced phishing kits, and novel social engineering tactics to distribute scams, malware, and credential theft.