Smart Topics
Smart Topics group related clusters into the story arcs that actually matter this week, so instead of scrolling thirty headlines, you read one topic. ThreatCluster AI scans the feed, finds narratives that cut across actors and incidents, and curates them daily.
Live Smart Topics
26 topicsDrone warfare and counter-drone operations in Ukraine conflict
Oct 4, 2026Clusters highlight expanding drone capabilities, drone strikes in Ukraine, military drone acquisitions, and government counter-drone programs amid rising geopolitical tensions.
AI deepfake scams targeting elections and executives
Oct 4, 2026Multiple clusters report AI deepfake misuse for election interference, executive impersonation, investment fraud, harassment, and legal challenges in victim justice.
Cryptocurrency theft, laundering, and sanctions evasion attacks
Oct 4, 2026Multiple clusters describe large-scale crypto exchange hacks, token thefts, laundering via privacy tools, sanctions evasion using cryptocurrency, and post-hack social engineering scams.
AI-driven cyber threats: autonomous agents and prompt injection attacks
Oct 4, 2026Clusters highlight AI-powered attacks, autonomous AI agents breaching systems, prompt injection risks, AI-accelerated vulnerability discovery, and AI-enabled social engineering challenging traditional defenses.
Active exploitation of critical RCE vulnerabilities in enterprise software
Oct 4, 2026Multiple clusters report urgent exploitation of critical RCE and zero-day vulnerabilities across enterprise platforms, web frameworks, open-source libraries, and security tools, requiring immediate patching.
State-backed cyber espionage targeting governments and critical infrastructure
Oct 4, 2026Reports detail espionage arrests, surveillance using spyware, gray zone operations, and cyberattacks by China, Russia, and other state actors against political, academic, and infrastructure targets.
Ransomware campaigns with public leaks and law enforcement crackdowns
Oct 4, 2026Multiple ransomware groups conduct attacks on healthcare, legal, real estate, municipal, and critical infrastructure sectors, with ongoing leak site activity and law enforcement interventions.
AI-powered phishing and social engineering with novel evasion tactics
Oct 4, 2026Clusters report phishing attacks abusing trusted software, OAuth token theft, AI-driven social engineering, homoglyph lures, and messaging app impersonation to compromise credentials and accounts.
Russian energy sector targeting and threats
May 29, 2026Cyber activities and physical threats involving Russian actors targeting energy infrastructure and resources.
Russian government targeting government sectors
May 29, 2026Cyber activities by Russian state actors aimed at government entities across various regions and sectors.
Iranian DDoS activity targeting regional services
May 29, 2026This topic covers DDoS campaigns originating from Iran aimed at various sectors and infrastructure within the region.
German government targeting cyber threat actors
May 29, 2026Cybersecurity stories involving German government entities facing or responding to cyber threats and attacks.
Canadian energy sector targeted by cyber threats
May 29, 2026Cybersecurity stories involving Canadian energy companies and infrastructure, highlighting threat actors and their targeting activities.
Iranian actors targeting energy infrastructure
May 29, 2026Cyber threat activity involving Iranian entities targeting energy sector infrastructure and related systems.
Chinese government targeting international research institutions
May 29, 2026Cyber activities linked to Chinese government entities targeting global research projects and academic institutions.
Chinese financial sector targeting and defense activities
May 29, 2026Cyber threat activities involving Chinese financial institutions, including targeted attacks, partnerships, and regulatory responses.
North Korean Lazarus Group targeting cryptocurrency platforms
May 29, 2026Cyber threat activity involving North Korea's Lazarus Group focusing on cryptocurrency exchanges, wallets, and blockchain infrastructure.
Indian government targeting digital infrastructure
May 29, 2026Cyber threat activities by actors targeting India's government digital infrastructure and online services.
Chinese transportation sector cyber activities
May 29, 2026Monitoring cyber operations and vulnerabilities targeting China's transportation infrastructure and related entities.
Canadian financial sector targeted by cyber threats
May 29, 2026Cyber threat actors are actively targeting Canada's financial industry through various attack vectors, impacting institutions and infrastructure.
Indian healthcare sector targeted by cyber threat actors
May 29, 2026Cybersecurity stories involving Indian healthcare organizations facing attacks, vulnerabilities, or malware campaigns.
Russian DDoS activity targeting infrastructure
May 29, 2026Analysis of distributed denial-of-service campaigns originating from Russia aimed at various sectors and services.
Indian financial sector cybersecurity activity
May 29, 2026Monitoring cyber operations and threats targeting India's financial industry, including malware, hacking groups, and defense efforts.
German supply chain actors targeted by malicious packages
May 29, 2026Cyber threat activity involving German entities compromised through supply chain attacks on software and hardware components.
German financial sector targeted by cyber threat actors
May 29, 2026Cyber threat groups are actively targeting financial institutions in Germany through various attack methods and malware campaigns.
TeamPCP supply chain activity
May 29, 2026Analysis of supply chain attacks involving TeamPCP targeting software packages, cloud services, and development tools.
Archived Smart Topics
647 topicsNo longer detected as trending. Sorted newest archived first.
Recent State-Backed Espionage via Social Engineering and Cloud Abuse
Jun 4, 2026State-backed espionage campaigns exploit social engineering tactics, fake profiles, and cloud platforms to target governments, political figures, journalists, and critical sectors amid geopolitical tensions.
State-backed cyber espionage leveraging cloud and social engineering this week
Jun 5, 2026Nation-state actors conduct sophisticated cyber espionage campaigns using cloud platforms, social engineering, fake profiles, and spyware to target governments, military, journalists, and activists amid geopolitical tensions.
This Week’s Surge in AI-Powered Cyberattacks and Defenses
Jun 4, 2026Emerging AI-powered attack techniques including prompt injection, AI-enabled phishing, deepfake fraud, and AI-driven malware are met with new AI-based security tools, governance efforts, and incident response platforms addressing vulnerabilities in AI agents and applications.
Supply chain attacks targeting developer tools and open-source packages
Jun 3, 2026Attackers compromise developer environments, GitHub accounts, npm packages, and third-party modules to inject malicious code, steal credentials, and facilitate large-scale crypto thefts.
Crypto Ecosystem Under Siege: Exploits, Phishing, and Laundering This Week
Jun 4, 2026Sophisticated malware campaigns, bridge and smart contract exploits, phishing scams, multisig tampering, and money laundering networks are causing significant financial losses and prompting law enforcement actions in the crypto space.
AI-enhanced phishing campaigns targeting financial services
Jun 3, 2026Sophisticated phishing and social engineering attacks leverage AI enhancements and impersonation of trusted brands to steal credentials and defraud users across financial and corporate sectors.
Critical Linux kernel vulnerabilities enabling remote exploitation
Jun 3, 2026Multiple critical vulnerabilities affecting Linux kernels and distributions including Ubuntu, Fedora, SUSE, and Oracle allow remote code execution, denial of service, and privilege escalation, prompting urgent patches.
Emerging OT Attacks Target Physical Processes and Defensive Advances
Jun 4, 2026Industrial control systems face new vulnerabilities and exploits, with cyberattacks shifting from reconnaissance to physical process manipulation, while market growth and strategic acquisitions drive improved OT security frameworks.
Russia-Ukraine and Iran-related cyber and military operations impacting infrastructure
Jun 3, 2026Ongoing geopolitical conflicts, including the Russia-Ukraine and Iran-related tensions, fuel cyberattacks, sanctions, military escalations, and international defense partnerships affecting critical infrastructure and regional stability.
Drone warfare and counter-drone operations in Ukraine and regional conflicts
Jun 3, 2026Advancements in drone technologies, including weaponized drones and electronic countermeasures, are prominently featured in the Ukraine conflict and other regional military operations.
Cryptocurrency ecosystem attacks: exploits, scams, and laundering
Jun 3, 2026Cryptocurrency platforms face threats from private key compromises, multisig tampering, smart contract exploits, laundering networks, and emerging quantum risks leading to multimillion-dollar losses.
Cryptocurrency wallet and smart contract exploits surge this week
Jun 5, 2026Financial losses mount from exploits targeting cryptocurrency wallets, smart contracts, cross-chain bridges, and third-party modules, alongside money laundering and kidnapping schemes involving crypto assets.
This Week’s Cryptocurrency Exploits and Wallet Thefts
Jun 7, 2026Significant financial losses arise from crypto bridge exploits, smart contract vulnerabilities, phishing, laundering networks, and multisig wallet security incidents targeting high-value cryptocurrency holders.
Drone Warfare and Counter-Drone Tech in Ongoing Conflicts
Jun 4, 2026The evolving use of weaponized drones and electronic countermeasures, including interceptor drones, plays a significant role in ongoing military engagements, particularly in the Ukraine conflict.
Escalating Russia-China-Iran cyber espionage and influence amid geopolitical tensions
May 31, 2026Clusters highlight escalating geopolitical conflicts driving cyber espionage, military modernization, election interference, sanctions enforcement, and cyber influence operations involving Russia, China, Iran, North Korea, and regional actors.
Weaponized drone strikes and countermeasures in Ukraine conflict
May 31, 2026Reports cover the development, deployment, and countermeasures of weaponized drones in military and border security contexts, including drone strikes disrupting logistics in conflicts such as Ukraine.
Surge in smart contract exploits and wallet thefts in cryptocurrency ecosystem
May 31, 2026Clusters describe attacks exploiting smart contract vulnerabilities, third-party module flaws, key compromises, and social engineering scams leading to large-scale crypto theft, fraud, and illicit finance including terrorism and drug trafficking.
Supply chain attacks hit developer tools and open-source ecosystems
May 31, 2026Recent supply chain compromises focus on developer environments, open-source package repositories, and CI/CD workflows to infiltrate software development pipelines and steal cloud and infrastructure credentials.
Supply chain attacks hit developer tools and open-source ecosystems this week
Jun 5, 2026Attackers exploit trusted developer environments and open-source package repositories through malicious versions and compromised components to infiltrate software supply chains and developer credentials.
Spike in Supply Chain Attacks Targeting Developer Tools and Open Source
Jun 4, 2026Attackers increasingly compromise developer environments and open-source software dependencies, including package repositories like npm, to infiltrate software supply chains and steal developer credentials.
Supply Chain Attacks Targeting Developer Tools and Software Ecosystems
Jun 7, 2026Attackers increasingly compromise developer tools, third-party modules, and npm typosquatting to infiltrate software builds and steal credentials, impacting software supply chains.
Advanced spyware targeting journalists and activists
Jun 3, 2026State-linked spyware firms deploy zero-click exploits and human intelligence operations to surveil journalists and activists, raising significant privacy and security concerns.
State spyware campaigns targeting journalists and activists exposed
May 31, 2026State-linked spyware campaigns and intelligence operations focus on journalists, activists, and academic communities, prompting enhanced anti-spyware defenses and revealing covert influence and recruitment efforts.
Spike in critical infrastructure cyberattacks triggers national security responses
May 31, 2026Rising cyberattacks and vulnerabilities in critical infrastructure sectors including energy, water, and military networks prompt government initiatives, strategic partnerships, and policy shifts to enhance cybersecurity and resilience.