Technology ❯ Cybersecurity

Threat Actors

Exploitation Techniques Ransomware Advanced Persistent Threats Nation-State Actors Social Engineering Hacking Groups State-Sponsored Attacks Malware Attack Techniques Ransomware Groups Scattered Spider State-Sponsored Hacking Hacker Groups Hacking APT Groups Zero-Day Exploits North Korea Cybercriminal Groups Russian-speaking Threat Actors Data Theft UNC6148 Chinese Hackers Exploits Shiny Hunters ShinyHunters Data Access Cl0p Ransomware-as-a-Service Supply Chain Attacks Financially Motivated Threats China-linked Groups Malicious Scripts Brute Force Attacks Hacking Techniques Cybercrime Groups Espionage Midnight Blizzard Attack Methods APT29 Malicious Software State-Sponsored Cyber Attacks Attack Patterns Attack Vectors Phishing Private Sector Offensive Actors State-Sponsored Groups Cyber-Espionage Russian Hackers Data Protection Stargazers Ghost Network Remote Attacks Curly COMrades Espionage Groups TAG-150 Data Exfiltration VPN Security State-Sponsored Hackers Botnets China-based Groups Russian Threat Groups Impersonation Storm-2603 Financially Motivated Attacks State-sponsored Attacks Financial Cybercrime Chinese Cyber Threats Attacks Storm-2460 Exploitation Tactics DukeEugene Malware Developers Credential Stuffing Attacks Extortion Groups Glacial Panda ShadowSilk Genesis Panda Operational Tactics COOKIE SPIDER Chinese Cyber Actors GhostRedirector Multi-Stage Attacks AI in Cybersecurity Russian-speaking Cybercriminals APT41 Russian Cybercrime UNC5174 LockBit UNC5221 Model Resilience Chinese Hacking Groups State-sponsored Hackers State-Sponsored Actors State-linked Groups Exploitation Dark Web State-Sponsored Threats Storm-1175 GRACEFUL SPIDER SCATTERED LAPSUS$ CL0P Group

China-Linked Hackers Exploit Cisco Email Zero-Day With No Patch as CISA Flags Active Threat

Talos links the activity to UAT-9686, with Cisco urging restricted exposure pending rebuilds until a fix arrives.

React2Shell Attacks Escalate as Microsoft Confirms Hundreds of Compromised Systems

Fortinet SSO Bypass Actively Exploited as CISA Sets Dec. 23 Fix Deadline

Apple, Google Rush Patches as CISA Flags WebKit Zero‑Day Exploits

Hamas-Linked Ashen Lepus Revamps Espionage Toolkit, Extends Targeting Across Middle East

Unpatched Gogs Zero-Day Is Under Active Exploitation, 700+ Servers Compromised

React Issues New RSC Patches as React2Shell Attacks Escalate and EtherRAT Surfaces

React2Shell Exploited in the Wild as China-Linked Groups Target Unpatched React Server Components

React2Shell Exploited at Scale as CISA Sets Dec. 26 Patch Deadline and Breaches Mount

Microsoft Quietly Alters Windows to Expose Full .LNK Targets After Years of Real‑World Abuse

Researchers Expose Albiriox, an Android MaaS Enabling Live On‑Device Financial Fraud

Salesforce Revokes Gainsight Tokens as Breach Scope Disputed

‘HashJack’ Exposes AI Browser Weakness as Microsoft and Perplexity Patch, Google Declines

Fake Windows Update Screens Drive Ongoing ClickFix Malware Wave

Russian-Linked StealC V2 Campaign Weaponizes Blender Files on 3D Marketplaces

WhatsApp Worm in Brazil Delivers 'Eternidade Stealer' to Target Banking and Crypto

Sneaky 2FA Phishing Kit Adds BitB Pop-Ups to Steal Microsoft Credentials

Fortinet Confirms Second FortiWeb Flaw Under Active Attack as CISA Demands Rapid Fixes

Fortinet Confirms Critical FortiWeb Zero-Day Is Being Exploited as CISA Sets Nov. 21 Patch Deadline

Amazon Reveals Pre‑Disclosure Exploits of Citrix NetScaler and Cisco ISE to Plant Stealth Backdoor