Skip to content

Smart Topics

Smart Topics group related clusters into the story arcs that actually matter this week, so instead of scrolling thirty headlines, you read one topic. ThreatCluster AI scans the feed, finds narratives that cut across actors and incidents, and curates them daily.

Live Smart Topics

26 topics
Drone warfare and counter-drone operations in Ukraine conflict
Live

Drone warfare and counter-drone operations in Ukraine conflict

Oct 4, 2026

Clusters highlight expanding drone capabilities, drone strikes in Ukraine, military drone acquisitions, and government counter-drone programs amid rising geopolitical tensions.

www.nas.gov.uawww.l3harris.comAljazeerakyivindependent.comGround.News138 sources 43 clusters
AI deepfake scams targeting elections and executives
Live

AI deepfake scams targeting elections and executives

Oct 4, 2026

Multiple clusters report AI deepfake misuse for election interference, executive impersonation, investment fraud, harassment, and legal challenges in victim justice.

Smestreet.InAmadeuscapitalwww.parool.nlTheguardianAu.Pcmag229 sources 57 clusters
Cryptocurrency theft, laundering, and sanctions evasion attacks
Live

Cryptocurrency theft, laundering, and sanctions evasion attacks

Oct 4, 2026

Multiple clusters describe large-scale crypto exchange hacks, token thefts, laundering via privacy tools, sanctions evasion using cryptocurrency, and post-hack social engineering scams.

ChainalysisNewsbook.MtTrendingtopics.EuCryptotickerct.com183 sources 41 clusters
AI-driven cyber threats: autonomous agents and prompt injection attacks
Live

AI-driven cyber threats: autonomous agents and prompt injection attacks

Oct 4, 2026

Clusters highlight AI-powered attacks, autonomous AI agents breaching systems, prompt injection risks, AI-accelerated vulnerability discovery, and AI-enabled social engineering challenging traditional defenses.

Asiae.Co.KrTrendingtopics.EuBlog.Malwarebyteswww.theinformation.comabnormal.ai493 sources 125 clusters
Active exploitation of critical RCE vulnerabilities in enterprise software
Live

Active exploitation of critical RCE vulnerabilities in enterprise software

Oct 4, 2026

Multiple clusters report urgent exploitation of critical RCE and zero-day vulnerabilities across enterprise platforms, web frameworks, open-source libraries, and security tools, requiring immediate patching.

Helpnetsecuritycve.mitre.orgpsirt.watchguard.comwww.sentinelone.comwww.thehackerwire.com224 sources 115 clusters
State-backed cyber espionage targeting governments and critical infrastructure
Live

State-backed cyber espionage targeting governments and critical infrastructure

Oct 4, 2026

Reports detail espionage arrests, surveillance using spyware, gray zone operations, and cyberattacks by China, Russia, and other state actors against political, academic, and infrastructure targets.

ManilatimesTheshillongtimesAmadeuscapitalTheguardianHeygotrade160 sources 32 clusters
Ransomware campaigns with public leaks and law enforcement crackdowns
Live

Ransomware campaigns with public leaks and law enforcement crackdowns

Oct 4, 2026

Multiple ransomware groups conduct attacks on healthcare, legal, real estate, municipal, and critical infrastructure sectors, with ongoing leak site activity and law enforcement interventions.

www.eurojust.europa.eunvd.nist.govRansomware.LiveHeise.DeIa.Acs.Au175 sources 50 clusters
AI-powered phishing and social engineering with novel evasion tactics
Live

AI-powered phishing and social engineering with novel evasion tactics

Oct 4, 2026

Clusters report phishing attacks abusing trusted software, OAuth token theft, AI-driven social engineering, homoglyph lures, and messaging app impersonation to compromise credentials and accounts.

www.kaspersky.comabnormal.aiwww.techbook-magazine.comSmestreet.InTech.Yahoo107 sources 24 clusters
Russian energy sector targeting and threats
Broad

Russian energy sector targeting and threats

May 29, 2026

Cyber activities and physical threats involving Russian actors targeting energy infrastructure and resources.

Kyivpostwww.cnn.comBusinessinsiderThehill112.Ua324 sources 48 clusters
Russian government targeting government sectors
Trending

Russian government targeting government sectors

May 29, 2026

Cyber activities by Russian state actors aimed at government entities across various regions and sectors.

En.Ara.CatPetriwww.reuters.comwww.cnn.comThehackernews339 sources 32 clusters
Iranian DDoS activity targeting regional services
Live

Iranian DDoS activity targeting regional services

May 29, 2026

This topic covers DDoS campaigns originating from Iran aimed at various sectors and infrastructure within the region.

DarkreadingFeeds2.FeedburnerCloudsekPrnewswireIndustrialcyber.Co149 sources 8 clusters
German government targeting cyber threat actors
Broad

German government targeting cyber threat actors

May 29, 2026

Cybersecurity stories involving German government entities facing or responding to cyber threats and attacks.

En.Ara.CatEinpresswirewww.reuters.comThehackernewsSecurityaffairs.Co136 sources 14 clusters
Canadian energy sector targeted by cyber threats
Live

Canadian energy sector targeted by cyber threats

May 29, 2026

Cybersecurity stories involving Canadian energy companies and infrastructure, highlighting threat actors and their targeting activities.

Aninews.InBusinessinsiderLightreadingHeise.DeSg.Finance.Yahoo96 sources 11 clusters
Iranian actors targeting energy infrastructure
Broad

Iranian actors targeting energy infrastructure

May 29, 2026

Cyber threat activity involving Iranian entities targeting energy sector infrastructure and related systems.

www.cnn.comBusinessinsiderwww.gov.ukThehillapnews.com292 sources 41 clusters
Chinese government targeting international research institutions
Broad

Chinese government targeting international research institutions

May 29, 2026

Cyber activities linked to Chinese government entities targeting global research projects and academic institutions.

En.Ara.CatPetriEinpresswirewww.reuters.comwww.cnn.com338 sources 33 clusters
Chinese financial sector targeting and defense activities
Broad

Chinese financial sector targeting and defense activities

May 29, 2026

Cyber threat activities involving Chinese financial institutions, including targeted attacks, partnerships, and regulatory responses.

En.Ara.CatEinpresswirewww.reuters.comRss.SlashdotIconnect007367 sources 27 clusters
North Korean Lazarus Group targeting cryptocurrency platforms
Live

North Korean Lazarus Group targeting cryptocurrency platforms

May 29, 2026

Cyber threat activity involving North Korea's Lazarus Group focusing on cryptocurrency exchanges, wallets, and blockchain infrastructure.

Mexc.CoBitgetTheblock.Colayerzero.networkCryptopolitan93 sources 21 clusters
Indian government targeting digital infrastructure
Broad

Indian government targeting digital infrastructure

May 29, 2026

Cyber threat activities by actors targeting India's government digital infrastructure and online services.

Einpresswirewww.cnn.comTribuneindiaSecurityaffairs.CoMillenniumpost.In176 sources 18 clusters
Chinese transportation sector cyber activities
Live

Chinese transportation sector cyber activities

May 29, 2026

Monitoring cyber operations and vulnerabilities targeting China's transportation infrastructure and related entities.

DarkreadingFeeds2.FeedburnerCloudsekPrnewswireapnews.com160 sources 12 clusters
Canadian financial sector targeted by cyber threats
Broad

Canadian financial sector targeted by cyber threats

May 29, 2026

Cyber threat actors are actively targeting Canada's financial industry through various attack vectors, impacting institutions and infrastructure.

En.Ara.Catwww.reuters.comSecurityaffairs.CoDarkreadingFeeds2.Feedburner206 sources 11 clusters
Indian healthcare sector targeted by cyber threat actors
Live

Indian healthcare sector targeted by cyber threat actors

May 29, 2026

Cybersecurity stories involving Indian healthcare organizations facing attacks, vulnerabilities, or malware campaigns.

Aninews.InEinpresswirewww.cnn.comSecurityaffairs.CoM.Economictimes104 sources 11 clusters
Russian DDoS activity targeting infrastructure
Live

Russian DDoS activity targeting infrastructure

May 29, 2026

Analysis of distributed denial-of-service campaigns originating from Russia aimed at various sectors and services.

ThehackernewsCybersecuritynewsDarkreadingFeeds2.FeedburnerCryptobriefing165 sources 8 clusters
Indian financial sector cybersecurity activity
New

Indian financial sector cybersecurity activity

May 29, 2026

Monitoring cyber operations and threats targeting India's financial industry, including malware, hacking groups, and defense efforts.

LbcSmestreet.InEtvbharatwww.reuters.comMondaq79 sources 6 clusters
German supply chain actors targeted by malicious packages
Broad

German supply chain actors targeted by malicious packages

May 29, 2026

Cyber threat activity involving German entities compromised through supply chain attacks on software and hardware components.

En.Ara.CatDigital.Nhs.Ukwww.reuters.comCsoonlineThehackernews367 sources 10 clusters
German financial sector targeted by cyber threat actors
Broad

German financial sector targeted by cyber threat actors

May 29, 2026

Cyber threat groups are actively targeting financial institutions in Germany through various attack methods and malware campaigns.

En.Ara.CatDigital.Nhs.UkEinpresswirewww.reuters.comSonatype370 sources 13 clusters
TeamPCP supply chain activity
Broad

TeamPCP supply chain activity

May 29, 2026

Analysis of supply chain attacks involving TeamPCP targeting software packages, cloud services, and development tools.

Digital.Nhs.UkTechcrunchAppleinsiderItnews.AuTechnadu313 sources 8 clusters

Archived Smart Topics

647 topics

No longer detected as trending. Sorted newest archived first.

Ransomware and malware campaigns exploiting credential theft and evasion
Archived

Ransomware and malware campaigns exploiting credential theft and evasion

Jun 3, 2026

New ransomware strains and malware use stolen credentials, browser-based attack vectors, and obfuscation techniques to infiltrate healthcare, critical infrastructure, and enterprise environments.

Feeds.FeedburnerGbhackersCybersecuritynewsFeeds2.FeedburnerBreitbart25 sources 16 clusters
OT and critical infrastructure cyberattacks shift toward physical disruption
Archived

OT and critical infrastructure cyberattacks shift toward physical disruption

May 28, 2026

Cyber threats against OT and critical infrastructure are shifting from reconnaissance to active physical process manipulation, prompting new defense centers and AI-powered security solutions.

Dvidshubwww.theregister.comCybersecuritynewsGbhackerswww.tenable.com74 sources 24 clusters
Sophisticated exploits and malware targeting cryptocurrency ecosystem
Archived

Sophisticated exploits and malware targeting cryptocurrency ecosystem

May 28, 2026

The cryptocurrency sector faces multi-million dollar thefts and scams through blockchain and smart contract exploits, novel malware, social engineering, and AI-enhanced phishing campaigns.

CryptonewsThehillSecurityaffairs.Cowww.biocatch.comBitget203 sources 45 clusters
Emerging AI-driven cyber threats: phishing, prompt injection, and autonomous agent exploits
Archived

Emerging AI-driven cyber threats: phishing, prompt injection, and autonomous agent exploits

May 28, 2026

AI technologies are increasingly exploited for malicious purposes such as AI-powered phishing, prompt injection attacks, autonomous AI agent vulnerabilities, and AI-generated non-consensual content.

Decrypt.CoTweaktownQuiverquantInklZscaler149 sources 23 clusters
State-linked cyber espionage and influence operations amid Ukraine and Asia-Pacific tensions
Archived

State-linked cyber espionage and influence operations amid Ukraine and Asia-Pacific tensions

May 28, 2026

Nation-state actors conduct sustained cyber espionage, disinformation, hybrid warfare, and influence campaigns targeting critical infrastructure, regional adversaries, and geopolitical hotspots including Ukraine and Asia-Pacific.

En.Ara.CatPetriwww.reuters.comNews.Inbox.LvUk.News.Yahoo184 sources 48 clusters
Supply chain attacks targeting open-source and developer ecosystems
Archived

Supply chain attacks targeting open-source and developer ecosystems

May 28, 2026

Attackers increasingly compromise open-source packages, developer tools, CI/CD pipelines, and software repositories to deliver malware and steal credentials.

Csa.SgSecurityaffairs.CoCybersecuritynewsCryptobriefingCyberscoop120 sources 28 clusters
Supply chain attacks targeting Ukraine
Archived

Supply chain attacks targeting Ukraine

May 27, 2026

Analysis of supply chain compromises involving Ukrainian entities and the methods used to target critical infrastructure and software providers.

En.Ara.CatDigital.Nhs.Ukwww.reuters.comSonatypeThenextweb326 sources 10 clusters
New Zero-Click Spyware Campaigns Targeting Journalists and Activists
Archived

New Zero-Click Spyware Campaigns Targeting Journalists and Activists

Jun 4, 2026

Advanced spyware leveraging zero-click exploits is actively used in targeted surveillance and hacking campaigns against journalists and activists, prompting enhanced device security measures.

DailymailPerspectivemediaNews.Laodong.VnTheregisterDissmercury41 sources 8 clusters
Ransomware campaigns exploiting remote access protocols and network edge devices
Archived

Ransomware campaigns exploiting remote access protocols and network edge devices

May 28, 2026

Ransomware-as-a-Service groups increasingly leverage vulnerabilities in Remote Desktop Protocol and network edge devices to conduct widespread double-extortion attacks and expand victim counts.

www.fox7austin.comBleepingcomputerCybersecuritynewswww.cve.orgRescana79 sources 16 clusters
Indian manufacturing sector targeted by cyber actors
Archived

Indian manufacturing sector targeted by cyber actors

May 26, 2026

Cybersecurity stories involving threat actors targeting manufacturing companies and infrastructure within India.

Aninews.InIconnect007economictimes.indiatimes.comDigitimesGround.News106 sources 8 clusters
Iranian government cyber activities
Archived

Iranian government cyber activities

May 28, 2026

Tracking cyber operations and espionage activities conducted by Iran against government entities and regional targets.

www.cnn.comDarkreadingFeeds2.FeedburnerM.EconomictimesCloudsek246 sources 23 clusters
Emerging drone threats and countermeasures in military and public event contexts
Archived

Emerging drone threats and countermeasures in military and public event contexts

May 28, 2026

Recent incidents include drone attacks, crashes, GPS and satellite signal interference, and deployment of anti-drone systems in conflict zones and large public venues.

DailymailJalopnikGadgetreviewEn.Defence-UaNews.Err.Ee128 sources 23 clusters
Taiwanese technology sector targeted by cyber actors
Archived

Taiwanese technology sector targeted by cyber actors

May 26, 2026

Cyber threat activity involving Taiwanese technology companies, supply chains, and infrastructure, highlighting regional cyber operations.

Iconnect007economictimes.indiatimes.comAolDigitimesGround.News90 sources 8 clusters
Australian energy sector targeted by cyber actors
Archived

Australian energy sector targeted by cyber actors

May 26, 2026

Cyber threat activity involving Australian energy companies and infrastructure, highlighting sector-specific cyber operations.

Aninews.InLightreadingSg.Finance.YahooTelecomtvurl.us.m.mimecastprotect.com25 sources 5 clusters
Ukraine-related financial sector cyber activities
Archived

Ukraine-related financial sector cyber activities

May 26, 2026

Analysis of cyber operations and threats targeting Ukraine's financial industry by various actors and regions.

Digital.Nhs.UkSonatypeThenextwebsocket.devCybersecuritynews293 sources 10 clusters
UK energy sector targeted by cyber actors
Archived

UK energy sector targeted by cyber actors

May 26, 2026

Cyber threat activity involving actors targeting the United Kingdom's energy infrastructure through various attack vectors and tactics.

ThehillIndependentBusinessday.NgUndrrwar-sanctions.gur.gov.ua52 sources 9 clusters
Japanese supply chain actors targeted by cyber attacks
Archived

Japanese supply chain actors targeted by cyber attacks

May 26, 2026

Cyber threat activity involving Japanese entities and supply chain infrastructure, highlighting targeted attacks and vulnerabilities.

CsoonlineWww2.FundsforngosEn.Vietnamplus.VnSecurityaffairs.CoAu.Finance.Yahoo65 sources 8 clusters
Chinese actors conducting DDoS attacks
Archived

Chinese actors conducting DDoS attacks

May 26, 2026

Analysis of cyber threat activity involving DDoS campaigns orchestrated by Chinese entities targeting various sectors and regions.

ThehackernewsDarkreadingFeeds2.FeedburnerCloudsekPrnewswire130 sources 9 clusters
Law enforcement takedowns and controversies involving cybercrime infrastructure and spyware tools
Archived

Law enforcement takedowns and controversies involving cybercrime infrastructure and spyware tools

May 28, 2026

International law enforcement operations disrupt cybercrime enablers such as VPN services and cryptocurrency networks, while the deployment of advanced spyware tools by authorities faces political and legal scrutiny.

windscribe.comAwazthevoice.InCryptopotatoDevdiscoursecensys.com62 sources 8 clusters
Chinese manufacturing sector targeted by cyber threats
Archived

Chinese manufacturing sector targeted by cyber threats

May 26, 2026

Cyber threat actors focus on Chinese manufacturing companies, aiming to disrupt operations, steal intellectual property, or conduct espionage.

ThehackernewsIconnect007economictimes.indiatimes.comDigitimesGround.News115 sources 13 clusters
Supply chain attackers deploying Shai-hulud malware
Archived

Supply chain attackers deploying Shai-hulud malware

May 26, 2026

Cyber threat actors leveraging supply chain methods to distribute Shai-hulud malware across software ecosystems.

Digital.Nhs.UkTechcrunchAppleinsiderTechnaduSonatype340 sources 10 clusters
Ethereum and DeFi platform exploits and recovery efforts
Archived

Ethereum and DeFi platform exploits and recovery efforts

May 27, 2026

Monitoring cyber incidents involving Ethereum and DeFi projects, including exploits, asset recoveries, and related threat actor activity.

Mexc.CoBitgetTheblock.Colayerzero.networkCryptopolitan61 sources 12 clusters
Iranian cyber activities targeting healthcare sector
Archived

Iranian cyber activities targeting healthcare sector

May 27, 2026

Monitoring cyber espionage and attack campaigns by Iranian actors against healthcare organizations and infrastructure.

www.cnn.comBusinessday.NgM.EconomictimesCybernewsUk.Investing80 sources 8 clusters