Smart Topics

Multiple clusters report urgent and active exploitation of critical remote code execution and privilege escalation vulnerabilities across widely used enterprise software, Linux distributions, and open-source libraries, including zero-days and rapid weaponization.

260 sources 125 clusters

Reports cover drone attacks on critical infrastructure, military drone deployments, counter-drone technologies, and related investments amid ongoing regional and maritime conflicts.

106 sources 39 clusters

Clusters describe AI-powered autonomous agents breaching government and healthcare systems, AI-driven cyberattacks, AI-enhanced phishing and scams, and the resulting regulatory and governance challenges.

445 sources 106 clusters

Multiple clusters highlight espionage campaigns, state-sponsored cyberattacks, surveillance activities, arrests, and law enforcement responses targeting governments, academia, critical infrastructure, and journalists.

241 sources 57 clusters

Multiple clusters report zero-day and critical vulnerabilities in enterprise network devices, security products, and virtualization software being actively exploited to gain unauthorized access and disrupt defenses.

234 sources 32 clusters

Clusters reveal cyberattacks, drone strikes, disinformation campaigns, sanctions, and military escalations linked to conflicts involving Russia, Ukraine, Iran, China, and other actors.

172 sources 53 clusters

Ongoing ransomware and malware campaigns target critical infrastructure, healthcare, government, legal, transportation, and other sectors, often combining extortion, data leaks, and destructive tactics.

238 sources 53 clusters

Multiple clusters describe phishing and social engineering attacks targeting healthcare, education, military, and AI sectors using AI-driven deepfakes, QR codes, OAuth flows, and impersonation scams.

168 sources 44 clusters

Clusters report large-scale cryptocurrency thefts, laundering through privacy-enhanced protocols, smart contract exploits, and related social engineering scams targeting crypto platforms and wallets.

201 sources 40 clusters

Cyber activities and physical threats involving Russian actors targeting energy infrastructure and resources.

324 sources 48 clusters

Cyber activities by Russian state actors aimed at government entities across various regions and sectors.

339 sources 32 clusters

This topic covers DDoS campaigns originating from Iran aimed at various sectors and infrastructure within the region.

149 sources 8 clusters

Cybersecurity stories involving German government entities facing or responding to cyber threats and attacks.

136 sources 14 clusters

Cybersecurity stories involving Canadian energy companies and infrastructure, highlighting threat actors and their targeting activities.

96 sources 11 clusters

Cyber threat activity involving Iranian entities targeting energy sector infrastructure and related systems.

292 sources 41 clusters

Cyber activities linked to Chinese government entities targeting global research projects and academic institutions.

338 sources 33 clusters

Cyber threat activities involving Chinese financial institutions, including targeted attacks, partnerships, and regulatory responses.

367 sources 27 clusters

Cyber threat activity involving North Korea's Lazarus Group focusing on cryptocurrency exchanges, wallets, and blockchain infrastructure.

93 sources 21 clusters

Cyber threat activities by actors targeting India's government digital infrastructure and online services.

176 sources 18 clusters

Monitoring cyber operations and vulnerabilities targeting China's transportation infrastructure and related entities.

160 sources 12 clusters

Cybersecurity stories involving Indian healthcare organizations facing attacks, vulnerabilities, or malware campaigns.

104 sources 11 clusters

Cyber threat actors are actively targeting Canada's financial industry through various attack vectors, impacting institutions and infrastructure.

206 sources 11 clusters

Analysis of distributed denial-of-service campaigns originating from Russia aimed at various sectors and services.

165 sources 8 clusters

Monitoring cyber operations and threats targeting India's financial industry, including malware, hacking groups, and defense efforts.

79 sources 6 clusters

Cyber threat activity involving German entities compromised through supply chain attacks on software and hardware components.

367 sources 10 clusters

Cyber threat groups are actively targeting financial institutions in Germany through various attack methods and malware campaigns.

370 sources 13 clusters

Analysis of supply chain attacks involving TeamPCP targeting software packages, cloud services, and development tools.

313 sources 8 clusters

Multiple clusters report critical remote code execution (RCE) vulnerabilities across Linux distributions, enterprise platforms, and open-source software that are currently under active exploitation by threat actors.

178 sources 59 clusters

Attackers actively exploit critical vulnerabilities in web platforms, CMSs, and Node.js runtimes to execute remote code, hijack sessions, and steal credentials.

83 sources 12 clusters

Clusters describe significant data breaches involving millions of records caused by unauthorized API access, internal system exploitation, and credential theft across media, healthcare, government, and consumer platforms.

39 sources 12 clusters

Widespread phishing and social engineering operations leverage automation, voice phishing, trusted platforms, and advanced evasion techniques to deliver ransomware, steal credentials, bypass MFA, and compromise enterprise and targeted sectors.

197 sources 59 clusters

Multiple critical remote code execution and privilege escalation vulnerabilities have been disclosed and actively exploited across Linux distributions, open-source software, and network infrastructure, prompting urgent patching efforts.

245 sources 108 clusters

Multiple cyber incidents impact water utilities, local governments, schools, law firms, and critical infrastructure sectors causing operational disruptions and highlighting the need for enhanced protection and legislative measures.

124 sources 21 clusters

Phishing and social engineering campaigns increasingly use AI-generated content, voice phishing, brand impersonation, and targeted tactics to compromise high-value users, bypass MFA, and steal financial, corporate, and government credentials.

211 sources 48 clusters

Recent cyber operations, including ransomware and AI-powered attacks, have caused outages and operational impacts across critical infrastructure sectors such as energy, water, manufacturing, and government services.

161 sources 33 clusters

Cyber operations cause operational disruptions in power grids, manufacturing, healthcare, and other critical infrastructure sectors amid geopolitical tensions and national security initiatives.

137 sources 25 clusters

Multiple critical security flaws affecting Linux distributions and core open-source system components have been disclosed and actively exploited, prompting urgent patching efforts.

8 sources 59 clusters

Reports detail cyberattacks causing outages and risks in water utilities, local governments, schools, energy, and other essential infrastructure sectors, including lessons from nation-state operations.

82 sources 21 clusters

Emerging AI-powered cyber threats encompass autonomous AI agents conducting full kill chains, prompt injection attacks, AI malware frameworks, botnets leveraging LLMs, and AI model poisoning, alongside new AI-enabled defense platforms.

412 sources 48 clusters

Multiple critical RCE vulnerabilities affecting Linux distributions, open-source libraries, and widely used software components have been disclosed, patched, and actively exploited, including kernel, system tools, and cloud plugins.

175 sources 115 clusters

Clusters report multiple critical RCE and zero-day vulnerabilities in browsers, open-source projects, enterprise software, network devices, and industrial platforms actively exploited in the wild.

207 sources 46 clusters

Multiple campaigns use evolving phishing, vishing, fake recruiters, MFA bypass, impersonation, and social engineering tactics to steal credentials from individuals, corporations, governments, and public sectors.

219 sources 42 clusters

State-sponsored actors conduct advanced malware and espionage operations against developers, government, critical infrastructure, and use fake identities and insider recruitment for infiltration.

119 sources 24 clusters

Sophisticated spyware campaigns focus on activists, opposition figures, and critical government and infrastructure targets, with nation-state actors conducting espionage and insider threats.

77 sources 12 clusters

New malware strains employ innovative C2 methods via messaging platforms and fake or disguised apps to evade detection and target diverse user bases including developers and consumers.

165 sources 20 clusters

Ransomware groups increasingly focus on government agencies, municipal entities, and critical infrastructure, often disrupting backup systems and leveraging identity theft and social engineering.

195 sources 29 clusters

Coordinated law enforcement actions have disrupted cyber fraud rings and phishing campaigns across multiple regions, resulting in arrests and infrastructure takedowns.

16 sources 4 clusters

Multiple incidents involve large-scale thefts, DDoS attacks, and customized phishing campaigns targeting cryptocurrency exchanges, DeFi lending platforms, and crypto users via platform-specific scams.

49 sources 13 clusters

The dismantling of a long-standing botnet through multinational collaboration marks a significant milestone in disrupting cybercrime infrastructure.

25 sources 4 clusters

Ransomware groups are adopting new command-and-control frameworks, targeting backup systems to hinder recovery, and leveraging identity theft and social engineering to disrupt diverse sectors including public services and education.

134 sources 20 clusters

Multiple critical vulnerabilities affecting Linux kernels, distributions, and open-source libraries have been disclosed with active exploitation observed, requiring urgent patching.

32 sources 77 clusters