Smart Topics

Multiple clusters report urgent and active exploitation of critical remote code execution and privilege escalation vulnerabilities across widely used enterprise software, Linux distributions, and open-source libraries, including zero-days and rapid weaponization.

260 sources 125 clusters

Reports cover drone attacks on critical infrastructure, military drone deployments, counter-drone technologies, and related investments amid ongoing regional and maritime conflicts.

106 sources 39 clusters

Clusters describe AI-powered autonomous agents breaching government and healthcare systems, AI-driven cyberattacks, AI-enhanced phishing and scams, and the resulting regulatory and governance challenges.

447 sources 106 clusters

Multiple clusters highlight espionage campaigns, state-sponsored cyberattacks, surveillance activities, arrests, and law enforcement responses targeting governments, academia, critical infrastructure, and journalists.

241 sources 57 clusters

Multiple clusters report zero-day and critical vulnerabilities in enterprise network devices, security products, and virtualization software being actively exploited to gain unauthorized access and disrupt defenses.

234 sources 32 clusters

Clusters reveal cyberattacks, drone strikes, disinformation campaigns, sanctions, and military escalations linked to conflicts involving Russia, Ukraine, Iran, China, and other actors.

174 sources 53 clusters

Ongoing ransomware and malware campaigns target critical infrastructure, healthcare, government, legal, transportation, and other sectors, often combining extortion, data leaks, and destructive tactics.

238 sources 53 clusters

Multiple clusters describe phishing and social engineering attacks targeting healthcare, education, military, and AI sectors using AI-driven deepfakes, QR codes, OAuth flows, and impersonation scams.

169 sources 44 clusters

Clusters report large-scale cryptocurrency thefts, laundering through privacy-enhanced protocols, smart contract exploits, and related social engineering scams targeting crypto platforms and wallets.

202 sources 40 clusters

Cyber activities and physical threats involving Russian actors targeting energy infrastructure and resources.

324 sources 48 clusters

Cyber activities by Russian state actors aimed at government entities across various regions and sectors.

339 sources 32 clusters

This topic covers DDoS campaigns originating from Iran aimed at various sectors and infrastructure within the region.

149 sources 8 clusters

Cybersecurity stories involving German government entities facing or responding to cyber threats and attacks.

136 sources 14 clusters

Cybersecurity stories involving Canadian energy companies and infrastructure, highlighting threat actors and their targeting activities.

96 sources 11 clusters

Cyber threat activity involving Iranian entities targeting energy sector infrastructure and related systems.

292 sources 41 clusters

Cyber activities linked to Chinese government entities targeting global research projects and academic institutions.

338 sources 33 clusters

Cyber threat activities involving Chinese financial institutions, including targeted attacks, partnerships, and regulatory responses.

367 sources 27 clusters

Cyber threat activity involving North Korea's Lazarus Group focusing on cryptocurrency exchanges, wallets, and blockchain infrastructure.

93 sources 21 clusters

Cyber threat activities by actors targeting India's government digital infrastructure and online services.

176 sources 18 clusters

Monitoring cyber operations and vulnerabilities targeting China's transportation infrastructure and related entities.

160 sources 12 clusters

Cybersecurity stories involving Indian healthcare organizations facing attacks, vulnerabilities, or malware campaigns.

104 sources 11 clusters

Cyber threat actors are actively targeting Canada's financial industry through various attack vectors, impacting institutions and infrastructure.

206 sources 11 clusters

Analysis of distributed denial-of-service campaigns originating from Russia aimed at various sectors and services.

165 sources 8 clusters

Monitoring cyber operations and threats targeting India's financial industry, including malware, hacking groups, and defense efforts.

79 sources 6 clusters

Cyber threat activity involving German entities compromised through supply chain attacks on software and hardware components.

367 sources 10 clusters

Cyber threat groups are actively targeting financial institutions in Germany through various attack methods and malware campaigns.

370 sources 13 clusters

Analysis of supply chain attacks involving TeamPCP targeting software packages, cloud services, and development tools.

313 sources 8 clusters

State-linked actors conduct espionage against government, defense, and critical sectors using spear-phishing, fake personas, and insider infiltration to steal sensitive data.

55 sources 13 clusters

Nation-state actors conduct espionage campaigns using advanced malware, backdoors, SIM card trafficking, and fraudulent remote employment schemes to infiltrate government, defense, and critical infrastructure sectors.

40 sources 12 clusters

AI-generated deepfakes are exploited in financial fraud, identity scams, and extortion campaigns, triggering legal actions and increased focus on detection and regulation.

108 sources 16 clusters

Multiple blockchain and DeFi platforms have suffered large-scale exploits, governance attacks, and phishing scams resulting in halted operations and significant token theft.

63 sources 23 clusters

Multiple blockchain and DeFi platforms have suffered major exploits and governance attacks resulting in multi-million dollar token thefts, protocol shutdowns, and large-scale financial losses.

68 sources 22 clusters

Several blockchain and DeFi platforms suffered large-scale exploits, token thefts, and phishing scams targeting wallet users and crypto governance mechanisms.

59 sources 19 clusters

Decentralized finance platforms suffer multi-million-dollar losses due to price oracle and contract flaws, while phishing campaigns target blockchain users and exchanges for token theft.

31 sources 9 clusters

Attackers leverage vulnerabilities, leaked credentials, and malware abusing cloud services and developer platforms to gain unauthorized access, maintain persistence, and conduct stealthy command-and-control operations.

61 sources 25 clusters

Large-scale exploits targeting DeFi platforms and blockchain protocols exploit smart contract flaws and governance vulnerabilities, resulting in token theft, unauthorized minting, and transaction fraud.

42 sources 12 clusters

Clusters describe AI-powered malware, autonomous AI agents conducting malicious activities, AI-driven social engineering and phishing campaigns, AI-related vulnerabilities in software and hardware, and AI tools used both offensively and defensively in cyber operations.

194 sources 60 clusters

Sophisticated phishing operations employ impersonation, polymorphic pages, localization, voice cloning, and targeting of government, corporate, cryptocurrency users, and public officials to steal credentials and maintain persistent access.

142 sources 30 clusters

Multiple critical remote code execution (RCE) vulnerabilities across enterprise platforms, open-source libraries, plugins, and embedded devices are being actively exploited, enabling attackers to execute arbitrary code and escalate privileges remotely.

186 sources 65 clusters

Emerging AI-powered threats encompass prompt injection attacks on language models, autonomous AI agents conducting unauthorized actions, and AI-enhanced social engineering such as deepfake-enabled scams and impersonation.

146 sources 37 clusters

Threat actors increasingly leverage AI-driven techniques including deepfakes, AI-enabled phishing, prompt injection, and impersonation scams to conduct sophisticated social engineering and fraud campaigns across sectors.

182 sources 50 clusters

Ransomware and malware groups increasingly exploit critical software flaws to compromise government agencies, SMBs, industrial infrastructure, cloud platforms, and financial sectors, employing evolving tactics including RaaS and extortion.

172 sources 24 clusters

Attackers exploit vulnerabilities in version control systems, open-source package ecosystems, and procurement processes to compromise software supply chains and development infrastructure.

89 sources 12 clusters

Attackers target software supply chains through vulnerabilities in version control systems, developer platforms, and open-source infrastructure to inject malicious code and compromise downstream users.

55 sources 12 clusters

Coordinated campaigns compromise browser extensions to steal crypto wallet credentials and deploy Android malware targeting vehicle firmware for ad fraud, botnets, and data theft.

47 sources 8 clusters

Cybercriminal groups increasingly shift operations from traditional dark web forums to encrypted apps like Telegram and use fabricated identities to infiltrate organizations and conduct fraud.

84 sources 8 clusters

Cybercriminal groups increasingly shift coordination and communication from traditional dark web forums to platforms like Telegram, reflecting evolving operational tactics and community dynamics.

9 sources 4 clusters

Emerging threats exploit vulnerabilities in space and satellite systems as well as AI hardware and software, including GPU attacks and AI platform credential theft.

37 sources 12 clusters

Multiple clusters report critical remote code execution (RCE) and command injection vulnerabilities in widely used software, enterprise platforms, and infrastructure being actively exploited or urgently patched.

174 sources 66 clusters

Multiple campaigns leverage sophisticated evasion techniques, AI automation, deepfakes, and localized targeting to steal corporate, consumer, and cryptocurrency credentials, enabling persistent access and financial fraud.

153 sources 33 clusters

Clusters describe state-linked espionage campaigns deploying sophisticated malware, evasion tactics, OAuth exploitation, and phishing to target governments, academia, and diplomatic entities.

62 sources 17 clusters