Smart Topics
Smart Topics group related clusters into the story arcs that actually matter this week, so instead of scrolling thirty headlines, you read one topic. ThreatCluster AI scans the feed, finds narratives that cut across actors and incidents, and curates them daily.
Live Smart Topics
26 topicsDrone warfare and counter-drone operations in Ukraine conflict
Oct 4, 2026Clusters highlight expanding drone capabilities, drone strikes in Ukraine, military drone acquisitions, and government counter-drone programs amid rising geopolitical tensions.
AI deepfake scams targeting elections and executives
Oct 4, 2026Multiple clusters report AI deepfake misuse for election interference, executive impersonation, investment fraud, harassment, and legal challenges in victim justice.
Cryptocurrency theft, laundering, and sanctions evasion attacks
Oct 4, 2026Multiple clusters describe large-scale crypto exchange hacks, token thefts, laundering via privacy tools, sanctions evasion using cryptocurrency, and post-hack social engineering scams.
AI-driven cyber threats: autonomous agents and prompt injection attacks
Oct 4, 2026Clusters highlight AI-powered attacks, autonomous AI agents breaching systems, prompt injection risks, AI-accelerated vulnerability discovery, and AI-enabled social engineering challenging traditional defenses.
Active exploitation of critical RCE vulnerabilities in enterprise software
Oct 4, 2026Multiple clusters report urgent exploitation of critical RCE and zero-day vulnerabilities across enterprise platforms, web frameworks, open-source libraries, and security tools, requiring immediate patching.
State-backed cyber espionage targeting governments and critical infrastructure
Oct 4, 2026Reports detail espionage arrests, surveillance using spyware, gray zone operations, and cyberattacks by China, Russia, and other state actors against political, academic, and infrastructure targets.
Ransomware campaigns with public leaks and law enforcement crackdowns
Oct 4, 2026Multiple ransomware groups conduct attacks on healthcare, legal, real estate, municipal, and critical infrastructure sectors, with ongoing leak site activity and law enforcement interventions.
AI-powered phishing and social engineering with novel evasion tactics
Oct 4, 2026Clusters report phishing attacks abusing trusted software, OAuth token theft, AI-driven social engineering, homoglyph lures, and messaging app impersonation to compromise credentials and accounts.
Russian energy sector targeting and threats
May 29, 2026Cyber activities and physical threats involving Russian actors targeting energy infrastructure and resources.
Russian government targeting government sectors
May 29, 2026Cyber activities by Russian state actors aimed at government entities across various regions and sectors.
Iranian DDoS activity targeting regional services
May 29, 2026This topic covers DDoS campaigns originating from Iran aimed at various sectors and infrastructure within the region.
German government targeting cyber threat actors
May 29, 2026Cybersecurity stories involving German government entities facing or responding to cyber threats and attacks.
Canadian energy sector targeted by cyber threats
May 29, 2026Cybersecurity stories involving Canadian energy companies and infrastructure, highlighting threat actors and their targeting activities.
Iranian actors targeting energy infrastructure
May 29, 2026Cyber threat activity involving Iranian entities targeting energy sector infrastructure and related systems.
Chinese government targeting international research institutions
May 29, 2026Cyber activities linked to Chinese government entities targeting global research projects and academic institutions.
Chinese financial sector targeting and defense activities
May 29, 2026Cyber threat activities involving Chinese financial institutions, including targeted attacks, partnerships, and regulatory responses.
North Korean Lazarus Group targeting cryptocurrency platforms
May 29, 2026Cyber threat activity involving North Korea's Lazarus Group focusing on cryptocurrency exchanges, wallets, and blockchain infrastructure.
Indian government targeting digital infrastructure
May 29, 2026Cyber threat activities by actors targeting India's government digital infrastructure and online services.
Chinese transportation sector cyber activities
May 29, 2026Monitoring cyber operations and vulnerabilities targeting China's transportation infrastructure and related entities.
Canadian financial sector targeted by cyber threats
May 29, 2026Cyber threat actors are actively targeting Canada's financial industry through various attack vectors, impacting institutions and infrastructure.
Indian healthcare sector targeted by cyber threat actors
May 29, 2026Cybersecurity stories involving Indian healthcare organizations facing attacks, vulnerabilities, or malware campaigns.
Russian DDoS activity targeting infrastructure
May 29, 2026Analysis of distributed denial-of-service campaigns originating from Russia aimed at various sectors and services.
Indian financial sector cybersecurity activity
May 29, 2026Monitoring cyber operations and threats targeting India's financial industry, including malware, hacking groups, and defense efforts.
German supply chain actors targeted by malicious packages
May 29, 2026Cyber threat activity involving German entities compromised through supply chain attacks on software and hardware components.
German financial sector targeted by cyber threat actors
May 29, 2026Cyber threat groups are actively targeting financial institutions in Germany through various attack methods and malware campaigns.
TeamPCP supply chain activity
May 29, 2026Analysis of supply chain attacks involving TeamPCP targeting software packages, cloud services, and development tools.
Archived Smart Topics
647 topicsNo longer detected as trending. Sorted newest archived first.
Ransomware and malware campaigns exploiting credential theft and evasion
Jun 3, 2026New ransomware strains and malware use stolen credentials, browser-based attack vectors, and obfuscation techniques to infiltrate healthcare, critical infrastructure, and enterprise environments.
OT and critical infrastructure cyberattacks shift toward physical disruption
May 28, 2026Cyber threats against OT and critical infrastructure are shifting from reconnaissance to active physical process manipulation, prompting new defense centers and AI-powered security solutions.
Sophisticated exploits and malware targeting cryptocurrency ecosystem
May 28, 2026The cryptocurrency sector faces multi-million dollar thefts and scams through blockchain and smart contract exploits, novel malware, social engineering, and AI-enhanced phishing campaigns.
Emerging AI-driven cyber threats: phishing, prompt injection, and autonomous agent exploits
May 28, 2026AI technologies are increasingly exploited for malicious purposes such as AI-powered phishing, prompt injection attacks, autonomous AI agent vulnerabilities, and AI-generated non-consensual content.
State-linked cyber espionage and influence operations amid Ukraine and Asia-Pacific tensions
May 28, 2026Nation-state actors conduct sustained cyber espionage, disinformation, hybrid warfare, and influence campaigns targeting critical infrastructure, regional adversaries, and geopolitical hotspots including Ukraine and Asia-Pacific.
Supply chain attacks targeting open-source and developer ecosystems
May 28, 2026Attackers increasingly compromise open-source packages, developer tools, CI/CD pipelines, and software repositories to deliver malware and steal credentials.
Supply chain attacks targeting Ukraine
May 27, 2026Analysis of supply chain compromises involving Ukrainian entities and the methods used to target critical infrastructure and software providers.
New Zero-Click Spyware Campaigns Targeting Journalists and Activists
Jun 4, 2026Advanced spyware leveraging zero-click exploits is actively used in targeted surveillance and hacking campaigns against journalists and activists, prompting enhanced device security measures.
Ransomware campaigns exploiting remote access protocols and network edge devices
May 28, 2026Ransomware-as-a-Service groups increasingly leverage vulnerabilities in Remote Desktop Protocol and network edge devices to conduct widespread double-extortion attacks and expand victim counts.
Indian manufacturing sector targeted by cyber actors
May 26, 2026Cybersecurity stories involving threat actors targeting manufacturing companies and infrastructure within India.
Iranian government cyber activities
May 28, 2026Tracking cyber operations and espionage activities conducted by Iran against government entities and regional targets.
Emerging drone threats and countermeasures in military and public event contexts
May 28, 2026Recent incidents include drone attacks, crashes, GPS and satellite signal interference, and deployment of anti-drone systems in conflict zones and large public venues.
Taiwanese technology sector targeted by cyber actors
May 26, 2026Cyber threat activity involving Taiwanese technology companies, supply chains, and infrastructure, highlighting regional cyber operations.
Australian energy sector targeted by cyber actors
May 26, 2026Cyber threat activity involving Australian energy companies and infrastructure, highlighting sector-specific cyber operations.
Ukraine-related financial sector cyber activities
May 26, 2026Analysis of cyber operations and threats targeting Ukraine's financial industry by various actors and regions.
UK energy sector targeted by cyber actors
May 26, 2026Cyber threat activity involving actors targeting the United Kingdom's energy infrastructure through various attack vectors and tactics.
Japanese supply chain actors targeted by cyber attacks
May 26, 2026Cyber threat activity involving Japanese entities and supply chain infrastructure, highlighting targeted attacks and vulnerabilities.
Chinese actors conducting DDoS attacks
May 26, 2026Analysis of cyber threat activity involving DDoS campaigns orchestrated by Chinese entities targeting various sectors and regions.
Law enforcement takedowns and controversies involving cybercrime infrastructure and spyware tools
May 28, 2026International law enforcement operations disrupt cybercrime enablers such as VPN services and cryptocurrency networks, while the deployment of advanced spyware tools by authorities faces political and legal scrutiny.
Chinese manufacturing sector targeted by cyber threats
May 26, 2026Cyber threat actors focus on Chinese manufacturing companies, aiming to disrupt operations, steal intellectual property, or conduct espionage.
Supply chain attackers deploying Shai-hulud malware
May 26, 2026Cyber threat actors leveraging supply chain methods to distribute Shai-hulud malware across software ecosystems.
Ethereum and DeFi platform exploits and recovery efforts
May 27, 2026Monitoring cyber incidents involving Ethereum and DeFi projects, including exploits, asset recoveries, and related threat actor activity.
Iranian cyber activities targeting healthcare sector
May 27, 2026Monitoring cyber espionage and attack campaigns by Iranian actors against healthcare organizations and infrastructure.