Smart Topics

Clusters describe sophisticated state-sponsored cyber espionage, hybrid warfare activities, and cyberattacks targeting government, defense sectors, critical infrastructure, and geopolitical adversaries amid ongoing conflicts.

236 sources 59 clusters

Multiple clusters report ongoing active exploitation of critical remote code execution (RCE) vulnerabilities across diverse widely used software platforms, including enterprise, infrastructure, and security tools, enabling attackers to execute arbitrary code remotely and escalate privileges.

247 sources 123 clusters

Clusters highlight the growing use of AI-driven phishing, social engineering, and deepfake impersonations to defraud individuals and organizations, including financial institutions and crypto users, with emerging countermeasures.

346 sources 79 clusters

Several critical authentication and authorization bypass flaws have been disclosed in open-source libraries, industrial control, and IoT devices, enabling unauthorized access, credential theft, and privilege escalation.

49 sources 27 clusters

Multiple incidents involve cryptocurrency exchange hacks, smart contract exploits, wallet thefts on various platforms including Apple devices, and laundering of stolen funds using privacy-focused coins.

178 sources 42 clusters

Multiple ransomware groups continue to target organizations across industries and countries, combining encryption attacks with public data leak extortion tactics causing operational disruptions and financial losses.

201 sources 59 clusters

Threat actors increasingly use innovative phishing techniques leveraging holidays, homoglyph attacks, OAuth flows, QR codes, calendar invites, and trusted communication platforms to harvest credentials and deploy malware.

115 sources 24 clusters

Multiple incidents and clusters report security challenges from autonomous AI agents causing unauthorized data access, prompt injection attacks, and breaches of sensitive government, health, and enterprise systems.

265 sources 68 clusters

Cyber activities and physical threats involving Russian actors targeting energy infrastructure and resources.

324 sources 48 clusters

Cyber activities by Russian state actors aimed at government entities across various regions and sectors.

339 sources 32 clusters

This topic covers DDoS campaigns originating from Iran aimed at various sectors and infrastructure within the region.

149 sources 8 clusters

Cybersecurity stories involving German government entities facing or responding to cyber threats and attacks.

136 sources 14 clusters

Cybersecurity stories involving Canadian energy companies and infrastructure, highlighting threat actors and their targeting activities.

96 sources 11 clusters

Cyber threat activity involving Iranian entities targeting energy sector infrastructure and related systems.

292 sources 41 clusters

Cyber activities linked to Chinese government entities targeting global research projects and academic institutions.

338 sources 33 clusters

Cyber threat activities involving Chinese financial institutions, including targeted attacks, partnerships, and regulatory responses.

367 sources 27 clusters

Cyber threat activity involving North Korea's Lazarus Group focusing on cryptocurrency exchanges, wallets, and blockchain infrastructure.

93 sources 21 clusters

Cyber threat activities by actors targeting India's government digital infrastructure and online services.

176 sources 18 clusters

Monitoring cyber operations and vulnerabilities targeting China's transportation infrastructure and related entities.

160 sources 12 clusters

Cyber threat actors are actively targeting Canada's financial industry through various attack vectors, impacting institutions and infrastructure.

206 sources 11 clusters

Cybersecurity stories involving Indian healthcare organizations facing attacks, vulnerabilities, or malware campaigns.

104 sources 11 clusters

Analysis of distributed denial-of-service campaigns originating from Russia aimed at various sectors and services.

165 sources 8 clusters

Monitoring cyber operations and threats targeting India's financial industry, including malware, hacking groups, and defense efforts.

79 sources 6 clusters

Cyber threat activity involving German entities compromised through supply chain attacks on software and hardware components.

367 sources 10 clusters

Cyber threat groups are actively targeting financial institutions in Germany through various attack methods and malware campaigns.

370 sources 13 clusters

Analysis of supply chain attacks involving TeamPCP targeting software packages, cloud services, and development tools.

313 sources 8 clusters

Ransomware groups continue to target healthcare, critical infrastructure, government, manufacturing, education, and other sectors globally using sophisticated malware, data exfiltration, phishing, and negotiation strategies.

282 sources 105 clusters

Phishing operations increasingly exploit AI-generated content, QR codes, voicemail and messaging platforms, OAuth flaws, and social engineering to steal credentials and crypto assets across sectors.

263 sources 49 clusters

Phishing and social engineering attacks are evolving with AI-enabled deepfakes, voice phishing, SMS scams, QR code exploits, and fake customer support accounts targeting enterprise and consumer victims.

110 sources 24 clusters

High-risk flaws in WordPress, Grav CMS, XenForo, and other web platforms allow attackers to execute code remotely, bypass authentication, and hijack user sessions.

41 sources 19 clusters

The rise of AI-generated deepfakes and synthetic media is fueling fraud, disinformation campaigns, and high-profile impersonations impacting elections, financial sectors, and public figures.

180 sources 29 clusters

State-linked and ransomware groups exploit zero-days and critical flaws to deploy backdoors, conduct espionage, and disrupt critical infrastructure and NGOs amid geopolitical tensions.

119 sources 16 clusters

Multiple critical remote code execution and privilege escalation vulnerabilities affecting enterprise, Linux, and open-source software are being actively exploited, prompting urgent patching efforts.

186 sources 105 clusters

Multiple ransomware groups have conducted coordinated attacks across industries and countries, leveraging automation, phishing, critical vulnerabilities, and novel malware strains to exfiltrate data, demand ransoms, and publicly expose victims.

264 sources 98 clusters

Ransomware groups increasingly leverage leaked VPN credentials, third-party provider vulnerabilities, and supply chain weaknesses to gain initial access and escalate attacks.

26 sources 12 clusters

State actors from multiple countries conduct cyber espionage and surveillance using AI tools, exploit kits, and spyware campaigns targeting activists, government, military, and critical infrastructure.

217 sources 20 clusters

State-aligned actors conduct cyber espionage campaigns targeting military technology, semiconductors, and deploy spyware against activists and dissidents, leveraging advanced exploit kits amid geopolitical tensions.

189 sources 16 clusters

AI technologies are increasingly used by threat actors to generate deepfakes for scams and disinformation, enhance social engineering and phishing campaigns, and conduct autonomous cyberattacks, reshaping the threat landscape with sophisticated and automated tactics.

723 sources 121 clusters

Multiple ransomware groups have intensified attacks across industries worldwide, leveraging automation, exploiting critical vulnerabilities, third-party and supply-chain weaknesses, and evolving negotiation tactics to cause data leaks and operational disruptions.

264 sources 84 clusters

Microsoft and Cisco products face multiple critical vulnerabilities including zero-days and denial-of-service flaws that are actively exploited, accompanied by record-setting patch cycles.

133 sources 29 clusters

Phishing operations increasingly use AI-driven bots, MFA bypass techniques, voice and SMS channels, and trusted platforms like Microsoft 365 and Google to steal credentials and compromise enterprise and consumer accounts.

243 sources 33 clusters

Newly disclosed critical vulnerabilities in popular software and network devices are being rapidly exploited in the wild, including zero-day flaws prompting record-breaking patch releases and urgent security responses.

73 sources 18 clusters

Recent data breaches have resulted from credential theft, impersonation scams, ransomware leaks, and vulnerabilities in third-party or internal systems, exposing large volumes of personal, corporate, and intelligence data across multiple sectors.

152 sources 20 clusters

State-linked threat actors conduct sophisticated espionage operations targeting activists, journalists, dissidents, developers, and critical sectors, deploying spyware and leveraging zero-day exploits to advance geopolitical objectives.

151 sources 25 clusters

Reports detail advanced state-sponsored spyware and cyber espionage operations surveilling dissidents, activists, journalists, and political opposition with zero-click and platform-level attacks.

326 sources 20 clusters

Clusters highlight critical RCE and privilege escalation flaws in enterprise, cloud, and Microsoft products actively exploited shortly after disclosure, demanding urgent patching.

311 sources 124 clusters

Multiple ransomware groups continue to attack organizations globally across industries using automated extortion, data exfiltration, advanced malware, and targeting backup systems to maximize impact.

323 sources 87 clusters

Active exploitation of zero-day and critical vulnerabilities has been reported in browsers (Chrome, Chromium), client software (curl, cPanel), and web/CMS platforms, enabling remote code execution and unauthorized access.

78 sources 17 clusters

Multiple clusters report sophisticated phishing campaigns targeting consumers and enterprises using social engineering, session hijacking, OAuth abuse, MFA bypass, and browser-based deception.

342 sources 55 clusters

Attackers increasingly target exposed industrial control systems, utilities, local governments, and critical infrastructure sectors causing operational disruptions and raising geopolitical concerns.

45 sources 13 clusters