Skip to content

Smart Topics

Smart Topics group related clusters into the story arcs that actually matter this week, so instead of scrolling thirty headlines, you read one topic. ThreatCluster AI scans the feed, finds narratives that cut across actors and incidents, and curates them daily.

Live Smart Topics

26 topics
Drone warfare and counter-drone operations in Ukraine conflict
Live

Drone warfare and counter-drone operations in Ukraine conflict

Oct 4, 2026

Clusters highlight expanding drone capabilities, drone strikes in Ukraine, military drone acquisitions, and government counter-drone programs amid rising geopolitical tensions.

www.nas.gov.uawww.l3harris.comAljazeerakyivindependent.comGround.News138 sources 43 clusters
AI deepfake scams targeting elections and executives
Live

AI deepfake scams targeting elections and executives

Oct 4, 2026

Multiple clusters report AI deepfake misuse for election interference, executive impersonation, investment fraud, harassment, and legal challenges in victim justice.

Smestreet.InAmadeuscapitalwww.parool.nlTheguardianAu.Pcmag228 sources 57 clusters
Cryptocurrency theft, laundering, and sanctions evasion attacks
Live

Cryptocurrency theft, laundering, and sanctions evasion attacks

Oct 4, 2026

Multiple clusters describe large-scale crypto exchange hacks, token thefts, laundering via privacy tools, sanctions evasion using cryptocurrency, and post-hack social engineering scams.

ChainalysisNewsbook.MtTrendingtopics.EuCryptotickerct.com183 sources 41 clusters
AI-driven cyber threats: autonomous agents and prompt injection attacks
Live

AI-driven cyber threats: autonomous agents and prompt injection attacks

Oct 4, 2026

Clusters highlight AI-powered attacks, autonomous AI agents breaching systems, prompt injection risks, AI-accelerated vulnerability discovery, and AI-enabled social engineering challenging traditional defenses.

Asiae.Co.KrTrendingtopics.EuBlog.Malwarebyteswww.theinformation.comabnormal.ai493 sources 125 clusters
Active exploitation of critical RCE vulnerabilities in enterprise software
Live

Active exploitation of critical RCE vulnerabilities in enterprise software

Oct 4, 2026

Multiple clusters report urgent exploitation of critical RCE and zero-day vulnerabilities across enterprise platforms, web frameworks, open-source libraries, and security tools, requiring immediate patching.

Helpnetsecuritycve.mitre.orgpsirt.watchguard.comwww.sentinelone.comwww.thehackerwire.com223 sources 115 clusters
State-backed cyber espionage targeting governments and critical infrastructure
Live

State-backed cyber espionage targeting governments and critical infrastructure

Oct 4, 2026

Reports detail espionage arrests, surveillance using spyware, gray zone operations, and cyberattacks by China, Russia, and other state actors against political, academic, and infrastructure targets.

ManilatimesTheshillongtimesAmadeuscapitalTheguardianHeygotrade159 sources 32 clusters
Ransomware campaigns with public leaks and law enforcement crackdowns
Live

Ransomware campaigns with public leaks and law enforcement crackdowns

Oct 4, 2026

Multiple ransomware groups conduct attacks on healthcare, legal, real estate, municipal, and critical infrastructure sectors, with ongoing leak site activity and law enforcement interventions.

www.eurojust.europa.eunvd.nist.govRansomware.LiveHeise.DeIa.Acs.Au175 sources 50 clusters
AI-powered phishing and social engineering with novel evasion tactics
Live

AI-powered phishing and social engineering with novel evasion tactics

Oct 4, 2026

Clusters report phishing attacks abusing trusted software, OAuth token theft, AI-driven social engineering, homoglyph lures, and messaging app impersonation to compromise credentials and accounts.

www.kaspersky.comabnormal.aiwww.techbook-magazine.comSmestreet.InTech.Yahoo107 sources 24 clusters
Russian energy sector targeting and threats
Broad

Russian energy sector targeting and threats

May 29, 2026

Cyber activities and physical threats involving Russian actors targeting energy infrastructure and resources.

Kyivpostwww.cnn.comBusinessinsiderThehill112.Ua324 sources 48 clusters
Russian government targeting government sectors
Trending

Russian government targeting government sectors

May 29, 2026

Cyber activities by Russian state actors aimed at government entities across various regions and sectors.

En.Ara.CatPetriwww.reuters.comwww.cnn.comThehackernews339 sources 32 clusters
Iranian DDoS activity targeting regional services
Live

Iranian DDoS activity targeting regional services

May 29, 2026

This topic covers DDoS campaigns originating from Iran aimed at various sectors and infrastructure within the region.

DarkreadingFeeds2.FeedburnerCloudsekPrnewswireIndustrialcyber.Co149 sources 8 clusters
German government targeting cyber threat actors
Broad

German government targeting cyber threat actors

May 29, 2026

Cybersecurity stories involving German government entities facing or responding to cyber threats and attacks.

En.Ara.CatEinpresswirewww.reuters.comThehackernewsSecurityaffairs.Co136 sources 14 clusters
Canadian energy sector targeted by cyber threats
Live

Canadian energy sector targeted by cyber threats

May 29, 2026

Cybersecurity stories involving Canadian energy companies and infrastructure, highlighting threat actors and their targeting activities.

Aninews.InBusinessinsiderLightreadingHeise.DeSg.Finance.Yahoo96 sources 11 clusters
Iranian actors targeting energy infrastructure
Broad

Iranian actors targeting energy infrastructure

May 29, 2026

Cyber threat activity involving Iranian entities targeting energy sector infrastructure and related systems.

www.cnn.comBusinessinsiderwww.gov.ukThehillapnews.com292 sources 41 clusters
Chinese government targeting international research institutions
Broad

Chinese government targeting international research institutions

May 29, 2026

Cyber activities linked to Chinese government entities targeting global research projects and academic institutions.

En.Ara.CatPetriEinpresswirewww.reuters.comwww.cnn.com338 sources 33 clusters
Chinese financial sector targeting and defense activities
Broad

Chinese financial sector targeting and defense activities

May 29, 2026

Cyber threat activities involving Chinese financial institutions, including targeted attacks, partnerships, and regulatory responses.

En.Ara.CatEinpresswirewww.reuters.comRss.SlashdotIconnect007367 sources 27 clusters
North Korean Lazarus Group targeting cryptocurrency platforms
Live

North Korean Lazarus Group targeting cryptocurrency platforms

May 29, 2026

Cyber threat activity involving North Korea's Lazarus Group focusing on cryptocurrency exchanges, wallets, and blockchain infrastructure.

Mexc.CoBitgetTheblock.Colayerzero.networkCryptopolitan93 sources 21 clusters
Indian government targeting digital infrastructure
Broad

Indian government targeting digital infrastructure

May 29, 2026

Cyber threat activities by actors targeting India's government digital infrastructure and online services.

Einpresswirewww.cnn.comTribuneindiaSecurityaffairs.CoMillenniumpost.In176 sources 18 clusters
Chinese transportation sector cyber activities
Live

Chinese transportation sector cyber activities

May 29, 2026

Monitoring cyber operations and vulnerabilities targeting China's transportation infrastructure and related entities.

DarkreadingFeeds2.FeedburnerCloudsekPrnewswireapnews.com160 sources 12 clusters
Canadian financial sector targeted by cyber threats
Broad

Canadian financial sector targeted by cyber threats

May 29, 2026

Cyber threat actors are actively targeting Canada's financial industry through various attack vectors, impacting institutions and infrastructure.

En.Ara.Catwww.reuters.comSecurityaffairs.CoDarkreadingFeeds2.Feedburner206 sources 11 clusters
Indian healthcare sector targeted by cyber threat actors
Live

Indian healthcare sector targeted by cyber threat actors

May 29, 2026

Cybersecurity stories involving Indian healthcare organizations facing attacks, vulnerabilities, or malware campaigns.

Aninews.InEinpresswirewww.cnn.comSecurityaffairs.CoM.Economictimes104 sources 11 clusters
Russian DDoS activity targeting infrastructure
Live

Russian DDoS activity targeting infrastructure

May 29, 2026

Analysis of distributed denial-of-service campaigns originating from Russia aimed at various sectors and services.

ThehackernewsCybersecuritynewsDarkreadingFeeds2.FeedburnerCryptobriefing165 sources 8 clusters
Indian financial sector cybersecurity activity
New

Indian financial sector cybersecurity activity

May 29, 2026

Monitoring cyber operations and threats targeting India's financial industry, including malware, hacking groups, and defense efforts.

LbcSmestreet.InEtvbharatwww.reuters.comMondaq79 sources 6 clusters
German supply chain actors targeted by malicious packages
Broad

German supply chain actors targeted by malicious packages

May 29, 2026

Cyber threat activity involving German entities compromised through supply chain attacks on software and hardware components.

En.Ara.CatDigital.Nhs.Ukwww.reuters.comCsoonlineThehackernews367 sources 10 clusters
German financial sector targeted by cyber threat actors
Broad

German financial sector targeted by cyber threat actors

May 29, 2026

Cyber threat groups are actively targeting financial institutions in Germany through various attack methods and malware campaigns.

En.Ara.CatDigital.Nhs.UkEinpresswirewww.reuters.comSonatype370 sources 13 clusters
TeamPCP supply chain activity
Broad

TeamPCP supply chain activity

May 29, 2026

Analysis of supply chain attacks involving TeamPCP targeting software packages, cloud services, and development tools.

Digital.Nhs.UkTechcrunchAppleinsiderItnews.AuTechnadu313 sources 8 clusters

Archived Smart Topics

647 topics

No longer detected as trending. Sorted newest archived first.

Supply chain attacks targeting open-source and software development ecosystems
Archived

Supply chain attacks targeting open-source and software development ecosystems

Jun 22, 2026

Attackers increasingly compromise open-source package repositories and development environments through malicious build scripts, plugins, and loaders to steal credentials and disrupt software supply chains.

Feeds.4SysopsThecyberexpressThenextwebFeeds.FeedburnerMashable63 sources 15 clusters
Drone warfare and countermeasures impacting critical infrastructure and conflict zones
Archived

Drone warfare and countermeasures impacting critical infrastructure and conflict zones

Jun 14, 2026

Drone strikes, unauthorized drone activities, and the development of counter-drone technologies are increasingly shaping military conflicts and security operations, with notable impacts on critical infrastructure and regional security.

Ukrinformwww.ukrinform.uaArnnewscentre.AeRheinmetallTheguardian99 sources 35 clusters
Active exploitation of critical enterprise software vulnerabilities enabling RCE and account takeover
Archived

Active exploitation of critical enterprise software vulnerabilities enabling RCE and account takeover

Jun 14, 2026

Several high-severity vulnerabilities in widely used enterprise software and platforms allow attackers to execute code remotely, hijack accounts, bypass authorization, and escalate privileges, with multiple advisories reporting active exploitation.

GadgetreviewGbhackershub.ivanti.comadvisory.splunk.comCyber.Gc.Ca153 sources 46 clusters
Advanced espionage campaigns leveraging malware, social engineering, and persistence
Archived

Advanced espionage campaigns leveraging malware, social engineering, and persistence

Jun 14, 2026

State-backed and sophisticated espionage campaigns employ novel delivery methods, social engineering including fake profiles, authentication stack compromises, and targeting of managed service providers to maintain persistent access and gather intelligence amid geopolitical tensions.

Uk.News.YahooUnn.UaSocprimeReport.Azwww.dailystar.co.uk183 sources 33 clusters
Surge in deepfake and AI-driven disinformation campaigns threatening political processes
Archived

Surge in deepfake and AI-driven disinformation campaigns threatening political processes

Jun 17, 2026

Clusters reveal rising misuse of deepfake and voice-cloning technologies in scams, political misinformation, election interference, and AI-driven synthetic identity fraud impacting national security and public health.

news.drweb.comwww.techradar.comIndependentLbcTechspot84 sources 24 clusters
Geopolitical conflicts fueling combined cyber and kinetic attacks on critical infrastructure
Archived

Geopolitical conflicts fueling combined cyber and kinetic attacks on critical infrastructure

Jun 14, 2026

Ongoing geopolitical tensions, including Russia-Ukraine, Iran-Israel, and Indo-Pacific rivalries, are fueling combined cyberattacks, drone strikes, espionage, and military actions that disrupt critical infrastructure and influence regional security dynamics.

FtUa.Newsthehill.comHaaretzEn.Mehrnews227 sources 89 clusters
Supply chain attacks targeting open-source package repositories
Archived

Supply chain attacks targeting open-source package repositories

Jun 14, 2026

Sophisticated supply chain compromises have been observed injecting malware into open-source package repositories and development pipelines, affecting thousands of users and developer ecosystems such as npm and PyPI.

KasperskySearchsecurity.TechtargetThehackernewsarxiv.orgScworld81 sources 11 clusters
Phishing and account takeover campaigns targeting critical infrastructure and cloud platforms
Archived

Phishing and account takeover campaigns targeting critical infrastructure and cloud platforms

Jun 14, 2026

Multiple sophisticated phishing and social engineering campaigns exploit cloud and mobile platforms, impersonate trusted entities, and leverage OAuth and account recovery flaws to compromise accounts in energy, financial, and enterprise sectors.

Cybernewsmsrc.microsoft.comDarkreadingGbhackersBleepingcomputer60 sources 28 clusters
Novel Malware and AI-Driven Phishing Campaigns Targeting Credentials and Cryptocurrency
Archived

Novel Malware and AI-Driven Phishing Campaigns Targeting Credentials and Cryptocurrency

Jun 11, 2026

Multiple clusters describe phishing-as-a-service, AI-enabled phishing, social engineering scams, malware exploiting software supply chains, session hijacking, and cryptocurrency wallet compromises targeting diverse user groups.

CybernewsFeeds.Feedburnermsrc.microsoft.comDarkreadingbeincrypto.com178 sources 56 clusters
State-Sponsored Cyber Espionage and Influence Operations Targeting Critical Infrastructure and Media
Archived

State-Sponsored Cyber Espionage and Influence Operations Targeting Critical Infrastructure and Media

Jun 11, 2026

Clusters reveal nation-state cyber espionage campaigns using sophisticated malware, social engineering, fake personas, and disinformation to influence elections, surveil journalists, and target critical infrastructure.

SocprimePsnews.AuReport.AzInternazionale.Itwww.dailystar.co.uk213 sources 56 clusters
Critical RCE and DoS Vulnerabilities Actively Exploited in Enterprise and Linux Ecosystems
Archived

Critical RCE and DoS Vulnerabilities Actively Exploited in Enterprise and Linux Ecosystems

Jun 11, 2026

Multiple clusters report active exploitation and patching of critical remote code execution and denial-of-service vulnerabilities across widely used enterprise software, Linux kernels, distributions, and open-source components.

LinuxsecurityBlog.Torprojecthub.ivanti.comCyber.Gc.CaLetsdatascience133 sources 84 clusters
Critical infrastructure and OT cyber threats surge amid geopolitical tensions
Archived

Critical infrastructure and OT cyber threats surge amid geopolitical tensions

Jun 17, 2026

Cyberattacks, drone threats, and electronic warfare increasingly target critical infrastructure and OT environments in energy, maritime, and industrial sectors, prompting new partnerships and security assessments.

Pravda.UaUkrinformNews.CisionNoviniteStraitstimes91 sources 28 clusters
Critical Vulnerabilities and Supply Chain Attacks in Software Platforms and Developer Tools
Archived

Critical Vulnerabilities and Supply Chain Attacks in Software Platforms and Developer Tools

Jun 11, 2026

Clusters describe critical flaws and active exploits in enterprise software, server management, developer tools, and npm ecosystems enabling remote code execution and supply chain compromises.

GbhackersPrnewswireCybersecuritynewswww.thehackerwire.comLinuxsecurity55 sources 28 clusters
Cryptocurrency Exploits, Laundering Schemes, and Financial Crime Prosecutions
Archived

Cryptocurrency Exploits, Laundering Schemes, and Financial Crime Prosecutions

Jun 11, 2026

Clusters highlight large-scale cryptocurrency thefts, smart contract and cross-chain bridge vulnerabilities, laundering schemes, and law enforcement actions disrupting crypto-enabled financial crimes.

Abc17Newswww.chaincatcher.comKucoinbeincrypto.comBitget145 sources 35 clusters
Geopolitical Conflicts Fuel Cyber and Kinetic Attacks on Critical Infrastructure
Archived

Geopolitical Conflicts Fuel Cyber and Kinetic Attacks on Critical Infrastructure

Jun 11, 2026

Clusters highlight state-backed cyber and kinetic attacks, drone and naval military developments, sanctions enforcement, and hybrid operations impacting critical infrastructure and regional security amid ongoing geopolitical tensions.

Wired-Govwww.wyden.senate.govInternazionale.ItUa.NewsUkrinform258 sources 83 clusters
Emerging Ransomware and Malware Strains Causing Operational Disruptions and Data Loss
Archived

Emerging Ransomware and Malware Strains Causing Operational Disruptions and Data Loss

Jun 11, 2026

New ransomware variants and malware campaigns are causing permanent data loss, operational shutdowns in critical infrastructure and education sectors, and evolving extortion tactics.

DailyhiveGbhackerswww.morphisec.comSecurityaffairs.Coeths202.org45 sources 15 clusters
Geopolitical Cyber-Physical Attacks Disrupting Critical Infrastructure
Archived

Geopolitical Cyber-Physical Attacks Disrupting Critical Infrastructure

Jun 7, 2026

Ongoing geopolitical tensions drive cyber and kinetic attacks, espionage, military escalations, and disruptions to energy, maritime, and supply chain infrastructure across multiple regions.

BastillepostSocprimeLowyinstituteReport.AzYasstribune.Au196 sources 62 clusters
Drone Warfare and Counter-Drone Tactics in Current Conflicts
Archived

Drone Warfare and Counter-Drone Tactics in Current Conflicts

Jun 7, 2026

Clusters highlight drone attacks, GPS jamming/spoofing, and counter-drone developments impacting military, civilian, and critical infrastructure sectors amid ongoing conflicts including Ukraine.

SocprimeBbcUkrinformJusticebrodhub.eu74 sources 38 clusters
This Week’s AI Attack Vectors: Prompt Injection and Autonomous Agent Flaws
Archived

This Week’s AI Attack Vectors: Prompt Injection and Autonomous Agent Flaws

Jun 7, 2026

Emerging AI threats include prompt injection attacks on AI and CI/CD systems, vulnerabilities in autonomous AI agents, AI-driven phishing, and AI-powered defense tools addressing these evolving risks.

StocktitanSg.Finance.YahooGround.NewsMarkets.FtTweaktown229 sources 78 clusters
Global Law Enforcement Crackdowns on Cybercrime Marketplaces and Ransomware
Archived

Global Law Enforcement Crackdowns on Cybercrime Marketplaces and Ransomware

Jun 7, 2026

Clusters highlight prosecutions, regulatory actions, and multinational efforts against dark web markets, ransomware campaigns, and extortion targeting critical infrastructure and healthcare.

Feeds.FeedburnerScworldJusticewww.justice.govwww.bostonglobe.com43 sources 16 clusters
State-linked cyber and kinetic attacks on critical infrastructure and maritime assets
Archived

State-linked cyber and kinetic attacks on critical infrastructure and maritime assets

Jun 5, 2026

State-linked cyber and kinetic operations target critical infrastructure including nuclear plants, undersea cables, and maritime assets amid geopolitical tensions and gray-zone conflicts.

WashingtonpostBloombergM.Economictimesapnews.comKyivpost159 sources 52 clusters
Drone and cyber-physical warfare in the Russia-Ukraine conflict
Archived

Drone and cyber-physical warfare in the Russia-Ukraine conflict

Jun 5, 2026

Ongoing Russia-Ukraine hostilities feature coordinated drone strikes, missile attacks, cyber intrusions, and counter-drone operations targeting military and critical infrastructure assets.

BastillepostSocprimeBbcUkrinformbrodhub.eu83 sources 41 clusters
Geopolitical cyber and kinetic conflict in Russia-Ukraine and regional theaters
Archived

Geopolitical cyber and kinetic conflict in Russia-Ukraine and regional theaters

Jun 4, 2026

Ongoing cyberattacks, drone and kinetic strikes, espionage, sanctions enforcement, and military posturing characterize the multifaceted conflict involving Russia, Ukraine, and regional actors including Iran, Greece, and North Korea.

SocprimeUkrinformBbcKyivpostCaspianpost48 sources 30 clusters
AI-Enhanced Phishing and Social Engineering Campaigns
Archived

AI-Enhanced Phishing and Social Engineering Campaigns

Jun 7, 2026

Multiple campaigns use hacked social media accounts, major ad and messaging platforms, AI-enhanced phishing kits, and novel social engineering tactics to distribute scams, malware, and credential theft.

Feeds.Feedburnermoneywise.comKasperskyGbhackersCybersecuritynews82 sources 35 clusters