Skip to content

Smart Topics

Smart Topics group related clusters into the story arcs that actually matter this week, so instead of scrolling thirty headlines, you read one topic. ThreatCluster AI scans the feed, finds narratives that cut across actors and incidents, and curates them daily.

Live Smart Topics

26 topics
Drone warfare and counter-drone operations in Ukraine conflict
Live

Drone warfare and counter-drone operations in Ukraine conflict

Oct 4, 2026

Clusters highlight expanding drone capabilities, drone strikes in Ukraine, military drone acquisitions, and government counter-drone programs amid rising geopolitical tensions.

www.nas.gov.uawww.l3harris.comAljazeerakyivindependent.comGround.News138 sources 43 clusters
AI deepfake scams targeting elections and executives
Live

AI deepfake scams targeting elections and executives

Oct 4, 2026

Multiple clusters report AI deepfake misuse for election interference, executive impersonation, investment fraud, harassment, and legal challenges in victim justice.

Smestreet.InAmadeuscapitalwww.parool.nlTheguardianAu.Pcmag229 sources 57 clusters
Cryptocurrency theft, laundering, and sanctions evasion attacks
Live

Cryptocurrency theft, laundering, and sanctions evasion attacks

Oct 4, 2026

Multiple clusters describe large-scale crypto exchange hacks, token thefts, laundering via privacy tools, sanctions evasion using cryptocurrency, and post-hack social engineering scams.

ChainalysisNewsbook.MtTrendingtopics.EuCryptotickerct.com183 sources 41 clusters
AI-driven cyber threats: autonomous agents and prompt injection attacks
Live

AI-driven cyber threats: autonomous agents and prompt injection attacks

Oct 4, 2026

Clusters highlight AI-powered attacks, autonomous AI agents breaching systems, prompt injection risks, AI-accelerated vulnerability discovery, and AI-enabled social engineering challenging traditional defenses.

Asiae.Co.KrTrendingtopics.EuBlog.Malwarebyteswww.theinformation.comabnormal.ai493 sources 125 clusters
Active exploitation of critical RCE vulnerabilities in enterprise software
Live

Active exploitation of critical RCE vulnerabilities in enterprise software

Oct 4, 2026

Multiple clusters report urgent exploitation of critical RCE and zero-day vulnerabilities across enterprise platforms, web frameworks, open-source libraries, and security tools, requiring immediate patching.

Helpnetsecuritycve.mitre.orgpsirt.watchguard.comwww.sentinelone.comwww.thehackerwire.com224 sources 115 clusters
State-backed cyber espionage targeting governments and critical infrastructure
Live

State-backed cyber espionage targeting governments and critical infrastructure

Oct 4, 2026

Reports detail espionage arrests, surveillance using spyware, gray zone operations, and cyberattacks by China, Russia, and other state actors against political, academic, and infrastructure targets.

ManilatimesTheshillongtimesAmadeuscapitalTheguardianHeygotrade160 sources 32 clusters
Ransomware campaigns with public leaks and law enforcement crackdowns
Live

Ransomware campaigns with public leaks and law enforcement crackdowns

Oct 4, 2026

Multiple ransomware groups conduct attacks on healthcare, legal, real estate, municipal, and critical infrastructure sectors, with ongoing leak site activity and law enforcement interventions.

www.eurojust.europa.eunvd.nist.govRansomware.LiveHeise.DeIa.Acs.Au175 sources 50 clusters
AI-powered phishing and social engineering with novel evasion tactics
Live

AI-powered phishing and social engineering with novel evasion tactics

Oct 4, 2026

Clusters report phishing attacks abusing trusted software, OAuth token theft, AI-driven social engineering, homoglyph lures, and messaging app impersonation to compromise credentials and accounts.

www.kaspersky.comabnormal.aiwww.techbook-magazine.comSmestreet.InTech.Yahoo107 sources 24 clusters
Russian energy sector targeting and threats
Broad

Russian energy sector targeting and threats

May 29, 2026

Cyber activities and physical threats involving Russian actors targeting energy infrastructure and resources.

Kyivpostwww.cnn.comBusinessinsiderThehill112.Ua324 sources 48 clusters
Russian government targeting government sectors
Trending

Russian government targeting government sectors

May 29, 2026

Cyber activities by Russian state actors aimed at government entities across various regions and sectors.

En.Ara.CatPetriwww.reuters.comwww.cnn.comThehackernews339 sources 32 clusters
Iranian DDoS activity targeting regional services
Live

Iranian DDoS activity targeting regional services

May 29, 2026

This topic covers DDoS campaigns originating from Iran aimed at various sectors and infrastructure within the region.

DarkreadingFeeds2.FeedburnerCloudsekPrnewswireIndustrialcyber.Co149 sources 8 clusters
German government targeting cyber threat actors
Broad

German government targeting cyber threat actors

May 29, 2026

Cybersecurity stories involving German government entities facing or responding to cyber threats and attacks.

En.Ara.CatEinpresswirewww.reuters.comThehackernewsSecurityaffairs.Co136 sources 14 clusters
Canadian energy sector targeted by cyber threats
Live

Canadian energy sector targeted by cyber threats

May 29, 2026

Cybersecurity stories involving Canadian energy companies and infrastructure, highlighting threat actors and their targeting activities.

Aninews.InBusinessinsiderLightreadingHeise.DeSg.Finance.Yahoo96 sources 11 clusters
Iranian actors targeting energy infrastructure
Broad

Iranian actors targeting energy infrastructure

May 29, 2026

Cyber threat activity involving Iranian entities targeting energy sector infrastructure and related systems.

www.cnn.comBusinessinsiderwww.gov.ukThehillapnews.com292 sources 41 clusters
Chinese government targeting international research institutions
Broad

Chinese government targeting international research institutions

May 29, 2026

Cyber activities linked to Chinese government entities targeting global research projects and academic institutions.

En.Ara.CatPetriEinpresswirewww.reuters.comwww.cnn.com338 sources 33 clusters
Chinese financial sector targeting and defense activities
Broad

Chinese financial sector targeting and defense activities

May 29, 2026

Cyber threat activities involving Chinese financial institutions, including targeted attacks, partnerships, and regulatory responses.

En.Ara.CatEinpresswirewww.reuters.comRss.SlashdotIconnect007367 sources 27 clusters
North Korean Lazarus Group targeting cryptocurrency platforms
Live

North Korean Lazarus Group targeting cryptocurrency platforms

May 29, 2026

Cyber threat activity involving North Korea's Lazarus Group focusing on cryptocurrency exchanges, wallets, and blockchain infrastructure.

Mexc.CoBitgetTheblock.Colayerzero.networkCryptopolitan93 sources 21 clusters
Indian government targeting digital infrastructure
Broad

Indian government targeting digital infrastructure

May 29, 2026

Cyber threat activities by actors targeting India's government digital infrastructure and online services.

Einpresswirewww.cnn.comTribuneindiaSecurityaffairs.CoMillenniumpost.In176 sources 18 clusters
Chinese transportation sector cyber activities
Live

Chinese transportation sector cyber activities

May 29, 2026

Monitoring cyber operations and vulnerabilities targeting China's transportation infrastructure and related entities.

DarkreadingFeeds2.FeedburnerCloudsekPrnewswireapnews.com160 sources 12 clusters
Canadian financial sector targeted by cyber threats
Broad

Canadian financial sector targeted by cyber threats

May 29, 2026

Cyber threat actors are actively targeting Canada's financial industry through various attack vectors, impacting institutions and infrastructure.

En.Ara.Catwww.reuters.comSecurityaffairs.CoDarkreadingFeeds2.Feedburner206 sources 11 clusters
Indian healthcare sector targeted by cyber threat actors
Live

Indian healthcare sector targeted by cyber threat actors

May 29, 2026

Cybersecurity stories involving Indian healthcare organizations facing attacks, vulnerabilities, or malware campaigns.

Aninews.InEinpresswirewww.cnn.comSecurityaffairs.CoM.Economictimes104 sources 11 clusters
Russian DDoS activity targeting infrastructure
Live

Russian DDoS activity targeting infrastructure

May 29, 2026

Analysis of distributed denial-of-service campaigns originating from Russia aimed at various sectors and services.

ThehackernewsCybersecuritynewsDarkreadingFeeds2.FeedburnerCryptobriefing165 sources 8 clusters
Indian financial sector cybersecurity activity
New

Indian financial sector cybersecurity activity

May 29, 2026

Monitoring cyber operations and threats targeting India's financial industry, including malware, hacking groups, and defense efforts.

LbcSmestreet.InEtvbharatwww.reuters.comMondaq79 sources 6 clusters
German supply chain actors targeted by malicious packages
Broad

German supply chain actors targeted by malicious packages

May 29, 2026

Cyber threat activity involving German entities compromised through supply chain attacks on software and hardware components.

En.Ara.CatDigital.Nhs.Ukwww.reuters.comCsoonlineThehackernews367 sources 10 clusters
German financial sector targeted by cyber threat actors
Broad

German financial sector targeted by cyber threat actors

May 29, 2026

Cyber threat groups are actively targeting financial institutions in Germany through various attack methods and malware campaigns.

En.Ara.CatDigital.Nhs.UkEinpresswirewww.reuters.comSonatype370 sources 13 clusters
TeamPCP supply chain activity
Broad

TeamPCP supply chain activity

May 29, 2026

Analysis of supply chain attacks involving TeamPCP targeting software packages, cloud services, and development tools.

Digital.Nhs.UkTechcrunchAppleinsiderItnews.AuTechnadu313 sources 8 clusters

Archived Smart Topics

647 topics

No longer detected as trending. Sorted newest archived first.

Recent State-Backed Espionage via Social Engineering and Cloud Abuse
Archived

Recent State-Backed Espionage via Social Engineering and Cloud Abuse

Jun 4, 2026

State-backed espionage campaigns exploit social engineering tactics, fake profiles, and cloud platforms to target governments, political figures, journalists, and critical sectors amid geopolitical tensions.

DailymailSocprimeIranwireReport.AzCaliber.Az171 sources 43 clusters
State-backed cyber espionage leveraging cloud and social engineering this week
Archived

State-backed cyber espionage leveraging cloud and social engineering this week

Jun 5, 2026

Nation-state actors conduct sophisticated cyber espionage campaigns using cloud platforms, social engineering, fake profiles, and spyware to target governments, military, journalists, and activists amid geopolitical tensions.

DailymailSocprimeLowyinstituteIranwireReport.Az167 sources 36 clusters
This Week’s Surge in AI-Powered Cyberattacks and Defenses
Archived

This Week’s Surge in AI-Powered Cyberattacks and Defenses

Jun 4, 2026

Emerging AI-powered attack techniques including prompt injection, AI-enabled phishing, deepfake fraud, and AI-driven malware are met with new AI-based security tools, governance efforts, and incident response platforms addressing vulnerabilities in AI agents and applications.

Decrypt.CoSg.Finance.YahooMarkets.FtReinsurancene.WsMorningstar216 sources 76 clusters
Supply chain attacks targeting developer tools and open-source packages
Archived

Supply chain attacks targeting developer tools and open-source packages

Jun 3, 2026

Attackers compromise developer environments, GitHub accounts, npm packages, and third-party modules to inject malicious code, steal credentials, and facilitate large-scale crypto thefts.

IrishtimesCybersecuritynewsThehackernewsVoi.IdFeeds.Trendmicro65 sources 26 clusters
Crypto Ecosystem Under Siege: Exploits, Phishing, and Laundering This Week
Archived

Crypto Ecosystem Under Siege: Exploits, Phishing, and Laundering This Week

Jun 4, 2026

Sophisticated malware campaigns, bridge and smart contract exploits, phishing scams, multisig tampering, and money laundering networks are causing significant financial losses and prompting law enforcement actions in the crypto space.

DailymailIrishtimesBitgetbeincrypto.comStraitstimes160 sources 44 clusters
AI-enhanced phishing campaigns targeting financial services
Archived

AI-enhanced phishing campaigns targeting financial services

Jun 3, 2026

Sophisticated phishing and social engineering attacks leverage AI enhancements and impersonation of trusted brands to steal credentials and defraud users across financial and corporate sectors.

DailymailThehillany.runCybernewsIsland.Lk201 sources 40 clusters
Critical Linux kernel vulnerabilities enabling remote exploitation
Archived

Critical Linux kernel vulnerabilities enabling remote exploitation

Jun 3, 2026

Multiple critical vulnerabilities affecting Linux kernels and distributions including Ubuntu, Fedora, SUSE, and Oracle allow remote code execution, denial of service, and privilege escalation, prompting urgent patches.

Linuxsecuritylaunchpad.netUbuntuHkcertcve.mitre.org9 sources 38 clusters
Emerging OT Attacks Target Physical Processes and Defensive Advances
Archived

Emerging OT Attacks Target Physical Processes and Defensive Advances

Jun 4, 2026

Industrial control systems face new vulnerabilities and exploits, with cyberattacks shifting from reconnaissance to physical process manipulation, while market growth and strategic acquisitions drive improved OT security frameworks.

Markets.Ftwww.hbs.eduIndustrialcyber.Cocts.businesswire.comSnort51 sources 20 clusters
Russia-Ukraine and Iran-related cyber and military operations impacting infrastructure
Archived

Russia-Ukraine and Iran-related cyber and military operations impacting infrastructure

Jun 3, 2026

Ongoing geopolitical conflicts, including the Russia-Ukraine and Iran-related tensions, fuel cyberattacks, sanctions, military escalations, and international defense partnerships affecting critical infrastructure and regional stability.

SocprimeLowyinstituteYasstribune.AuUkrinformInternazionale.It203 sources 84 clusters
Drone warfare and counter-drone operations in Ukraine and regional conflicts
Archived

Drone warfare and counter-drone operations in Ukraine and regional conflicts

Jun 3, 2026

Advancements in drone technologies, including weaponized drones and electronic countermeasures, are prominently featured in the Ukraine conflict and other regional military operations.

En.Defence-UaBbcKyivpostInterestingengineeringThemoscowtimes39 sources 21 clusters
Cryptocurrency ecosystem attacks: exploits, scams, and laundering
Archived

Cryptocurrency ecosystem attacks: exploits, scams, and laundering

Jun 3, 2026

Cryptocurrency platforms face threats from private key compromises, multisig tampering, smart contract exploits, laundering networks, and emerging quantum risks leading to multimillion-dollar losses.

DailymailIverifyattack.mitre.orgBitgetHackernoon154 sources 32 clusters
Cryptocurrency wallet and smart contract exploits surge this week
Archived

Cryptocurrency wallet and smart contract exploits surge this week

Jun 5, 2026

Financial losses mount from exploits targeting cryptocurrency wallets, smart contracts, cross-chain bridges, and third-party modules, alongside money laundering and kidnapping schemes involving crypto assets.

DailymailBitgetbeincrypto.comStraitstimesThehackernews167 sources 40 clusters
This Week’s Cryptocurrency Exploits and Wallet Thefts
Archived

This Week’s Cryptocurrency Exploits and Wallet Thefts

Jun 7, 2026

Significant financial losses arise from crypto bridge exploits, smart contract vulnerabilities, phishing, laundering networks, and multisig wallet security incidents targeting high-value cryptocurrency holders.

beincrypto.comStraitstimesBitgetvertexaisearch.cloud.google.comAnalyticsinsight117 sources 28 clusters
Drone Warfare and Counter-Drone Tech in Ongoing Conflicts
Archived

Drone Warfare and Counter-Drone Tech in Ongoing Conflicts

Jun 4, 2026

The evolving use of weaponized drones and electronic countermeasures, including interceptor drones, plays a significant role in ongoing military engagements, particularly in the Ukraine conflict.

En.Defence-UaKyivpostPravda.UaDefensenewsYle.Fi22 sources 12 clusters
Escalating Russia-China-Iran cyber espionage and influence amid geopolitical tensions
Archived

Escalating Russia-China-Iran cyber espionage and influence amid geopolitical tensions

May 31, 2026

Clusters highlight escalating geopolitical conflicts driving cyber espionage, military modernization, election interference, sanctions enforcement, and cyber influence operations involving Russia, China, Iran, North Korea, and regional actors.

GbhackersPoliticoLowyinstituteIranwireJalopnik335 sources 104 clusters
Weaponized drone strikes and countermeasures in Ukraine conflict
Archived

Weaponized drone strikes and countermeasures in Ukraine conflict

May 31, 2026

Reports cover the development, deployment, and countermeasures of weaponized drones in military and border security contexts, including drone strikes disrupting logistics in conflicts such as Ukraine.

En.Defence-UaInterestingengineeringEn.Apa.AzDefensenewsUnited24Media50 sources 19 clusters
Surge in smart contract exploits and wallet thefts in cryptocurrency ecosystem
Archived

Surge in smart contract exploits and wallet thefts in cryptocurrency ecosystem

May 31, 2026

Clusters describe attacks exploiting smart contract vulnerabilities, third-party module flaws, key compromises, and social engineering scams leading to large-scale crypto theft, fraud, and illicit finance including terrorism and drug trafficking.

IrishtimesStraitstimesBlockchain.NewsFeeds.Trendmicrocointelegraph.com115 sources 44 clusters
Supply chain attacks hit developer tools and open-source ecosystems
Archived

Supply chain attacks hit developer tools and open-source ecosystems

May 31, 2026

Recent supply chain compromises focus on developer environments, open-source package repositories, and CI/CD workflows to infiltrate software development pipelines and steal cloud and infrastructure credentials.

ThecyberexpressScworldThehackernewswww.x41-dsec.deSecurityaffairs.Co90 sources 20 clusters
Supply chain attacks hit developer tools and open-source ecosystems this week
Archived

Supply chain attacks hit developer tools and open-source ecosystems this week

Jun 5, 2026

Attackers exploit trusted developer environments and open-source package repositories through malicious versions and compromised components to infiltrate software supply chains and developer credentials.

ThehackernewsFeeds.TrendmicroSecurityaffairs.CoNeowinGbhackers47 sources 16 clusters
Spike in Supply Chain Attacks Targeting Developer Tools and Open Source
Archived

Spike in Supply Chain Attacks Targeting Developer Tools and Open Source

Jun 4, 2026

Attackers increasingly compromise developer environments and open-source software dependencies, including package repositories like npm, to infiltrate software supply chains and steal developer credentials.

Feeds.TrendmicroNeowinLinuxsecurityNvd.NistBlog.Knowbe431 sources 12 clusters
Supply Chain Attacks Targeting Developer Tools and Software Ecosystems
Archived

Supply Chain Attacks Targeting Developer Tools and Software Ecosystems

Jun 7, 2026

Attackers increasingly compromise developer tools, third-party modules, and npm typosquatting to infiltrate software builds and steal credentials, impacting software supply chains.

Feeds.TrendmicroNeowinBlog.Knowbe4TrendmicroPhiliphall27 sources 7 clusters
Advanced spyware targeting journalists and activists
Archived

Advanced spyware targeting journalists and activists

Jun 3, 2026

State-linked spyware firms deploy zero-click exploits and human intelligence operations to surveil journalists and activists, raising significant privacy and security concerns.

DailymailPerspectivemediaFtWashingtonpostTheregister40 sources 8 clusters
State spyware campaigns targeting journalists and activists exposed
Archived

State spyware campaigns targeting journalists and activists exposed

May 31, 2026

State-linked spyware campaigns and intelligence operations focus on journalists, activists, and academic communities, prompting enhanced anti-spyware defenses and revealing covert influence and recruitment efforts.

DailymailGigazinePerspectivemediaRescanaGbhackers80 sources 22 clusters
Spike in critical infrastructure cyberattacks triggers national security responses
Archived

Spike in critical infrastructure cyberattacks triggers national security responses

May 31, 2026

Rising cyberattacks and vulnerabilities in critical infrastructure sectors including energy, water, and military networks prompt government initiatives, strategic partnerships, and policy shifts to enhance cybersecurity and resilience.

GbhackersInterpol.IntCybernewscts.businesswire.comBuddlefindlay168 sources 36 clusters