Smart Topics

Multiple clusters report urgent and active exploitation of critical remote code execution and privilege escalation vulnerabilities across widely used enterprise software, Linux distributions, and open-source libraries, including zero-days and rapid weaponization.

260 sources 125 clusters

Reports cover drone attacks on critical infrastructure, military drone deployments, counter-drone technologies, and related investments amid ongoing regional and maritime conflicts.

105 sources 39 clusters

Clusters describe AI-powered autonomous agents breaching government and healthcare systems, AI-driven cyberattacks, AI-enhanced phishing and scams, and the resulting regulatory and governance challenges.

445 sources 106 clusters

Multiple clusters highlight espionage campaigns, state-sponsored cyberattacks, surveillance activities, arrests, and law enforcement responses targeting governments, academia, critical infrastructure, and journalists.

237 sources 57 clusters

Multiple clusters report zero-day and critical vulnerabilities in enterprise network devices, security products, and virtualization software being actively exploited to gain unauthorized access and disrupt defenses.

234 sources 32 clusters

Clusters reveal cyberattacks, drone strikes, disinformation campaigns, sanctions, and military escalations linked to conflicts involving Russia, Ukraine, Iran, China, and other actors.

172 sources 53 clusters

Ongoing ransomware and malware campaigns target critical infrastructure, healthcare, government, legal, transportation, and other sectors, often combining extortion, data leaks, and destructive tactics.

237 sources 53 clusters

Multiple clusters describe phishing and social engineering attacks targeting healthcare, education, military, and AI sectors using AI-driven deepfakes, QR codes, OAuth flows, and impersonation scams.

168 sources 44 clusters

Clusters report large-scale cryptocurrency thefts, laundering through privacy-enhanced protocols, smart contract exploits, and related social engineering scams targeting crypto platforms and wallets.

201 sources 40 clusters

Cyber activities and physical threats involving Russian actors targeting energy infrastructure and resources.

324 sources 48 clusters

Cyber activities by Russian state actors aimed at government entities across various regions and sectors.

339 sources 32 clusters

This topic covers DDoS campaigns originating from Iran aimed at various sectors and infrastructure within the region.

149 sources 8 clusters

Cybersecurity stories involving German government entities facing or responding to cyber threats and attacks.

136 sources 14 clusters

Cybersecurity stories involving Canadian energy companies and infrastructure, highlighting threat actors and their targeting activities.

96 sources 11 clusters

Cyber threat activity involving Iranian entities targeting energy sector infrastructure and related systems.

292 sources 41 clusters

Cyber activities linked to Chinese government entities targeting global research projects and academic institutions.

338 sources 33 clusters

Cyber threat activities involving Chinese financial institutions, including targeted attacks, partnerships, and regulatory responses.

367 sources 27 clusters

Cyber threat activity involving North Korea's Lazarus Group focusing on cryptocurrency exchanges, wallets, and blockchain infrastructure.

93 sources 21 clusters

Cyber threat activities by actors targeting India's government digital infrastructure and online services.

176 sources 18 clusters

Monitoring cyber operations and vulnerabilities targeting China's transportation infrastructure and related entities.

160 sources 12 clusters

Cybersecurity stories involving Indian healthcare organizations facing attacks, vulnerabilities, or malware campaigns.

104 sources 11 clusters

Cyber threat actors are actively targeting Canada's financial industry through various attack vectors, impacting institutions and infrastructure.

206 sources 11 clusters

Analysis of distributed denial-of-service campaigns originating from Russia aimed at various sectors and services.

165 sources 8 clusters

Monitoring cyber operations and threats targeting India's financial industry, including malware, hacking groups, and defense efforts.

79 sources 6 clusters

Cyber threat activity involving German entities compromised through supply chain attacks on software and hardware components.

367 sources 10 clusters

Cyber threat groups are actively targeting financial institutions in Germany through various attack methods and malware campaigns.

370 sources 13 clusters

Analysis of supply chain attacks involving TeamPCP targeting software packages, cloud services, and development tools.

313 sources 8 clusters

Several clusters detail critical RCE vulnerabilities in enterprise, cloud, and open-source software platforms including Microsoft products, developer tools, and network devices, with active exploitation by threat actors.

220 sources 65 clusters

Critical vulnerabilities in developer tools and cloud platforms like GitLab, Okta, Microsoft SQL Server, and Azure have been actively exploited or rapidly patched.

68 sources 8 clusters

Clusters cover ransomware campaigns focusing on negotiation tactics, backup and recovery weaknesses, identity-based access exploits, novel command-and-control frameworks, and attacks disrupting critical infrastructure, public services, and education.

179 sources 41 clusters

DeFi and blockchain platforms suffer large-scale token thefts, network halts, and fraud through vulnerabilities, price manipulation, and malware targeting crypto infrastructure and users.

69 sources 18 clusters

New attack methods exploit large language models through covert prompt injection and AI model security breaches, posing novel risks to AI-powered applications.

76 sources 4 clusters

Clusters highlight AI-powered attacks including autonomous AI agents conducting cyber intrusions, AI-enhanced phishing and social engineering, AI-driven ransomware, and AI-enabled cybersecurity tools and vulnerabilities.

477 sources 61 clusters

Multiple clusters describe evolving phishing and social engineering attacks enhanced by AI, targeting sectors including education, cryptocurrency users, enterprises, and executives via email, voice phishing, and session hijacking.

222 sources 50 clusters

Phishing and social engineering attacks increasingly use AI-driven techniques, voice phishing, automation, MFA bypass, and sophisticated lures targeting sectors such as education, cryptocurrency users, executives, and enterprise cloud services.

222 sources 55 clusters

Sophisticated phishing and social engineering attacks increasingly exploit MFA bypass, vishing, session hijacking, and impersonation to compromise Microsoft 365, cloud services, and enterprise SaaS accounts.

238 sources 54 clusters

Multiple campaigns use sophisticated phishing, vishing, MFA bypass, OAuth abuse, and social engineering techniques to compromise Microsoft 365, government, public sector, and hardware wallet users.

199 sources 39 clusters

Clusters reveal critical flaws in web and cloud platforms including OAuth and token management vulnerabilities, enabling unauthorized access, credential theft, and token minting.

48 sources 17 clusters

Clusters highlight espionage activities by nation-state and state-linked actors using exploit kits, fraudulent identities, SIM supply chain infiltration, and advanced tactics against government, military, and critical infrastructure sectors.

172 sources 24 clusters

Clusters highlight AI agents autonomously conducting cyber intrusions, accelerating vulnerability discovery and exploitation, and enabling new attack vectors including prompt injection and malware delivery, complicating defense and remediation efforts.

393 sources 49 clusters

Threat actors are actively exploiting zero-day and critical vulnerabilities in widely used software and security products to deploy advanced malware and post-exploitation frameworks, prompting urgent patching and alerts.

78 sources 13 clusters

Ransomware groups continue evolving tactics by exploiting identity and access vectors, deploying new command-and-control frameworks, focusing on healthcare, public sector, education, and critical infrastructure, and increasingly targeting backup and recovery systems.

158 sources 36 clusters

Microsoft has released unprecedented large-scale patches addressing nearly 1,000 vulnerabilities, including multiple zero-days actively exploited in the wild, reflecting a record-breaking vulnerability management effort.

95 sources 15 clusters

Microsoft released an unprecedented volume of patches in September 2026 addressing hundreds of vulnerabilities, including multiple actively exploited zero-days affecting Windows and enterprise software.

92 sources 13 clusters

Ransomware groups are intensifying attacks with fragmentation, refined negotiation strategies, and targeting of healthcare, critical infrastructure, municipal, government, and SMB sectors, often leveraging phishing and identity-based access.

323 sources 36 clusters

Numerous critical vulnerabilities including local privilege escalation and remote code execution flaws have been disclosed and patched in Microsoft Windows components, with record-breaking patch releases and active exploitation.

93 sources 16 clusters

Microsoft's September 2026 Patch Tuesday addressed nearly 1,000 vulnerabilities, including multiple critical and zero-day flaws with active exploitation observed.

90 sources 11 clusters

Critical Windows vulnerabilities, privilege escalations, and record-breaking patch releases addressing active exploits have been reported.

94 sources 12 clusters

Phishing and social engineering attacks increasingly leverage advanced evasion techniques, MFA bypass, vishing, session hijacking, and trusted platforms to compromise enterprise, education, government, and financial accounts.

193 sources 49 clusters

Multiple incidents involve large-scale data breaches caused by unauthorized API access, web vulnerabilities, and supply chain compromises impacting healthcare, logistics, and other sectors.

62 sources 16 clusters

Ransomware groups continue to impact government, financial, healthcare, SMBs, and public sectors, increasingly focusing on backup infrastructure disruption and using novel command-and-control frameworks.

233 sources 36 clusters