Smart Topics

Multiple clusters report urgent and active exploitation of critical remote code execution and privilege escalation vulnerabilities across widely used enterprise software, Linux distributions, and open-source libraries, including zero-days and rapid weaponization.

260 sources 125 clusters

Reports cover drone attacks on critical infrastructure, military drone deployments, counter-drone technologies, and related investments amid ongoing regional and maritime conflicts.

106 sources 39 clusters

Clusters describe AI-powered autonomous agents breaching government and healthcare systems, AI-driven cyberattacks, AI-enhanced phishing and scams, and the resulting regulatory and governance challenges.

445 sources 106 clusters

Multiple clusters highlight espionage campaigns, state-sponsored cyberattacks, surveillance activities, arrests, and law enforcement responses targeting governments, academia, critical infrastructure, and journalists.

241 sources 57 clusters

Multiple clusters report zero-day and critical vulnerabilities in enterprise network devices, security products, and virtualization software being actively exploited to gain unauthorized access and disrupt defenses.

234 sources 32 clusters

Clusters reveal cyberattacks, drone strikes, disinformation campaigns, sanctions, and military escalations linked to conflicts involving Russia, Ukraine, Iran, China, and other actors.

172 sources 53 clusters

Ongoing ransomware and malware campaigns target critical infrastructure, healthcare, government, legal, transportation, and other sectors, often combining extortion, data leaks, and destructive tactics.

238 sources 53 clusters

Multiple clusters describe phishing and social engineering attacks targeting healthcare, education, military, and AI sectors using AI-driven deepfakes, QR codes, OAuth flows, and impersonation scams.

168 sources 44 clusters

Clusters report large-scale cryptocurrency thefts, laundering through privacy-enhanced protocols, smart contract exploits, and related social engineering scams targeting crypto platforms and wallets.

201 sources 40 clusters

Cyber activities and physical threats involving Russian actors targeting energy infrastructure and resources.

324 sources 48 clusters

Cyber activities by Russian state actors aimed at government entities across various regions and sectors.

339 sources 32 clusters

This topic covers DDoS campaigns originating from Iran aimed at various sectors and infrastructure within the region.

149 sources 8 clusters

Cybersecurity stories involving German government entities facing or responding to cyber threats and attacks.

136 sources 14 clusters

Cybersecurity stories involving Canadian energy companies and infrastructure, highlighting threat actors and their targeting activities.

96 sources 11 clusters

Cyber threat activity involving Iranian entities targeting energy sector infrastructure and related systems.

292 sources 41 clusters

Cyber activities linked to Chinese government entities targeting global research projects and academic institutions.

338 sources 33 clusters

Cyber threat activities involving Chinese financial institutions, including targeted attacks, partnerships, and regulatory responses.

367 sources 27 clusters

Cyber threat activity involving North Korea's Lazarus Group focusing on cryptocurrency exchanges, wallets, and blockchain infrastructure.

93 sources 21 clusters

Cyber threat activities by actors targeting India's government digital infrastructure and online services.

176 sources 18 clusters

Monitoring cyber operations and vulnerabilities targeting China's transportation infrastructure and related entities.

160 sources 12 clusters

Cybersecurity stories involving Indian healthcare organizations facing attacks, vulnerabilities, or malware campaigns.

104 sources 11 clusters

Cyber threat actors are actively targeting Canada's financial industry through various attack vectors, impacting institutions and infrastructure.

206 sources 11 clusters

Analysis of distributed denial-of-service campaigns originating from Russia aimed at various sectors and services.

165 sources 8 clusters

Monitoring cyber operations and threats targeting India's financial industry, including malware, hacking groups, and defense efforts.

79 sources 6 clusters

Cyber threat activity involving German entities compromised through supply chain attacks on software and hardware components.

367 sources 10 clusters

Cyber threat groups are actively targeting financial institutions in Germany through various attack methods and malware campaigns.

370 sources 13 clusters

Analysis of supply chain attacks involving TeamPCP targeting software packages, cloud services, and development tools.

313 sources 8 clusters

Mercenary spyware campaigns and nation-state actors employ zero-click exploits, insider recruitment, covert communications, and telecom supply chain compromises to surveil political figures, activists, and support intelligence operations.

107 sources 20 clusters

Multiple clusters report critical remote code execution, privilege escalation, and zero-day vulnerabilities actively exploited in network and security appliances including SonicWall, Cisco, and others.

42 sources 8 clusters

Sophisticated spyware operations employing zero-click exploits and direct user notifications continue to target activists, opposition figures, journalists, and vulnerable device users for surveillance and political control.

44 sources 8 clusters

Focused campaigns target Brazilian users, Southeast Asia, journalists, activists, and political groups with spyware, malware, and social engineering tailored to local contexts.

69 sources 16 clusters

Emerging AI-powered cyberattacks include autonomous AI agents conducting intrusions, AI-enhanced ransomware campaigns, AI-enabled malware evasion, and AI-driven offensive operations accelerating attack sophistication across sectors.

317 sources 53 clusters

Multiple critical vulnerabilities affecting Linux distributions such as Ubuntu, Fedora, SUSE, and related open-source libraries and packages have been discovered, patched, and actively exploited, impacting core system components and utilities.

6 sources 43 clusters

Advanced spyware campaigns employ zero-click exploits and mercenary tools to surveil journalists, activists, immigration groups, and mobile device users, raising significant privacy and security concerns.

57 sources 8 clusters

Ransomware groups increasingly focus on disabling backup and recovery systems, targeting municipal, government, healthcare, and SMB sectors while employing new command-and-control frameworks and evasion techniques to hinder detection and restoration.

144 sources 20 clusters

Advanced spyware employing zero-click exploits and sophisticated surveillance techniques target journalists, activists, and mobile device users, prompting vendor alerts and security advisories.

11 sources 4 clusters

State-affiliated actors and intelligence agencies deploy sophisticated malware frameworks, zero-click spyware, and covert communication methods to conduct espionage against journalists, activists, governments, and intelligence operations.

139 sources 33 clusters

Advanced spyware campaigns using zero-click vulnerabilities have targeted journalists and activists across multiple platforms and regions for covert surveillance.

15 sources 4 clusters

Sophisticated phishing and social engineering attacks use polymorphic pages, session hijacking, OAuth consent phishing, impersonation of trusted entities, and AI techniques to steal credentials and enable persistent unauthorized access across multiple sectors.

266 sources 45 clusters

Critical zero-day flaws, backdoors, and authentication bypass vulnerabilities in network devices, VPN appliances, and enterprise software are actively exploited by threat actors.

122 sources 12 clusters

Ransomware groups focus on disrupting backup and recovery systems while using social engineering and phishing to gain initial access, impacting healthcare, small organizations, and public sectors.

214 sources 24 clusters

Malware distribution increasingly exploits tampered installers, fake game clients, developer and AI tools, and impersonation of popular AI brands to infect users and steal credentials.

98 sources 27 clusters

Malware campaigns targeting cryptocurrency wallets, smart contracts, and financial ecosystems are accompanied by law enforcement seizures of illicit crypto assets linked to darknet markets.

65 sources 16 clusters

Recent phishing and social engineering attacks increasingly use voice phishing, impersonation of trusted entities, AI-driven automation, multi-stage malware, and targeted campaigns to steal credentials and deliver ransomware or infostealers.

231 sources 48 clusters

Sophisticated malware and fraud campaigns employ geofencing, compiled bytecode, AI-driven automation, and evasion methods to steal cryptocurrency, target financial institutions, and exploit blockchain platforms.

129 sources 35 clusters

DeFi and blockchain platforms suffer multi-million dollar thefts and network disruptions due to smart contract flaws and protocol vulnerabilities.

57 sources 14 clusters

Multiple clusters report critical remote code execution (RCE) vulnerabilities in widely used enterprise, open-source, and infrastructure software actively exploited by attackers to gain unauthorized control.

155 sources 59 clusters

Ransomware campaigns and supply chain compromises continue to disrupt healthcare, education, government, and enterprise organizations, often leveraging identity theft and software supply chain vulnerabilities.

122 sources 16 clusters

Recent phishing operations employ polymorphic and localized lures, voice phishing via collaboration platforms, AI-enabled fraud, and impersonation of officials or trusted brands to steal credentials, enable persistent access, and cause financial losses.

211 sources 42 clusters

Exploits targeting cryptocurrency exchanges, DeFi protocols, and blockchain infrastructure involve price manipulation, smart contract flaws, malware, and token theft leading to significant financial damage.

65 sources 23 clusters

Clusters cover AI-driven phishing, autonomous attacks, deepfake misinformation and extortion, AI-enabled social engineering and impersonation scams, and prompt injection vulnerabilities exploited for unauthorized access and fraud.

214 sources 57 clusters