Kickstart Threat Actor Research with Threat Actor CardsRecorded Future·Jun 27, 00:00 UTC · Jun 27, 2025Threat actorCVE-2016-417160
Chinese Threat Actor TEMP.Periscope Targets UK-Based Engineering Company Using Russian APT TechniquesRecorded Future·Nov 21, 00:00 UTC · Nov 21, 2025Threat actor60
Talos uncovers espionage campaigns targeting CIS countries, embassies and EU health care agencyCisco Talos·Mar 14, 11:00 UTC · Mar 14, 2023Threat actor60
APT review: what the world’s threat actors got up to in 2019Kaspersky Securelist·Dec 4, 10:00 UTC · Dec 4, 2019Threat actor60
Threat actors exploited Palo Alto PanSecurity Affairs·Apr 15, 11:34 UTC · Apr 15, 2024Threat actorCVE-2024-3400160
Threat actors target WordPress sites using vulnerable File Manager installsSecurity Affairs·Sep 11, 21:01 UTC · Sep 11, 2020Threat actor60
Iranian threat actors exploit MS MSHTML bug to steal Google and Instagram credentialsSecurity Affairs·Dec 22, 10:44 UTC · Dec 22, 2025Threat actorCVE-2021-4044460
Russian Cyber Threat Actor Uses GenAI to Compromise Fortinet FirewallsInfosecurity Magazine·Feb 23, 12:30 UTC · Feb 23, 2026Threat actor in the wildCVE-2019-7192CVE-2023-27532CVE-2024-40711160
Threat actors exploit Atlassian Confluence bug in cryptomining campaignsSecurity Affairs·Aug 30, 08:12 UTC · Aug 30, 2024Threat actor in the wildCVE-2023-2252760
Iran War’s Secondary Effects Shape 2026 US Violent ExtremismRecorded Future·Jul 29, 00:00 UTC · Jul 29, 2026Threat actor60
UNC1945, a threat actor used Oracle Solaris ZeroSecurity Affairs·Nov 4, 00:32 UTC · Nov 4, 2020Threat actorCVE-2020-1487160
Ten most mysterious APT campaigns that remain unattributedKaspersky Securelist·Oct 7, 10:00 UTC · Oct 7, 2022Threat actorCVE-2021-21224CVE-2021-31955CVE-2021-31956160
Threat Actors Favor Rclone, WinSCP and cURL as Data Exfiltration ToolsInfosecurity Magazine·Aug 9, 10:00 UTC · Aug 9, 2024Threat actor60
OpenAI: Threat actors use us to be efficient, not make new toolsCyberScoop·Oct 7, 19:56 UTC · Oct 7, 2025Threat actor60
China-linked threat actors stole 10% of Belgian State Security Service (VSSE)'s staff emailsSecurity Affairs·Feb 28, 07:54 UTC · Feb 28, 2025Threat actorCVE-2023-286860
China-linked threat actor targeted +70 orgs worldwide, SentinelOne warnsSecurity Affairs·Jun 10, 07:00 UTC · Jun 10, 2025Threat actor60
China-linked threat actors compromised multiple telecos and spied on a limited number of U.S. government officialsSecurity Affairs·Nov 14, 23:46 UTC · Nov 14, 2024Threat actor60
Pandabuy was extorted twice by the same threat actorSecurity Affairs·Jun 7, 13:26 UTC · Jun 7, 2024Threat actor60
Threat Actor Mimo Targets Magento and Docker to Deploy Crypto Miners and ProxywareThe Hacker News·Jul 23, 17:15 UTC · Jul 23, 2025Threat actorCVE-2025-32432160
Compromised SAP NetWeaver instances are ushering in opportunistic threat actorsHelp Net Security·May 15, 11:51 UTC · May 15, 2025Threat actor in the wildCVE-2025-31324CVE-2025-4299960
MITRE December 2023 attack: threat actors created rogue VMs to evade detectionSecurity Affairs·May 25, 09:51 UTC · May 25, 2024Threat actor60
UNC4841 threat actors hacked US government email servers exploiting Barracuda ESG flawSecurity Affairs·Aug 29, 20:15 UTC · Aug 29, 2023Threat actorCVE-2023-286860
Allanite threat actor focused on critical infrastructure is targeting electric utilities and ICS networksSecurity Affairs·May 11, 06:42 UTC · May 11, 2018Threat actor60
Sophos details five years of China-linked threat actors' activity targeting network devices worldwideSecurity Affairs·Nov 2, 16:18 UTC · Nov 2, 2024Threat actor60
Multiple threat actors exploited Progress Telerik bug to breach U.S. federal agencySecurity Affairs·Mar 16, 10:58 UTC · Mar 16, 2023Threat actorCVE-2019-1893560
Week in review: MUT-1244 targets both security workers and threat actors, Kali Linux 2024.4 releasedHelp Net Security·Dec 22, 00:00 UTC · Dec 22, 2024Threat actorCVE-2024-1235660
SentinelOne warns of threat actors targeting its systems and highSecurity Affairs·Apr 29, 18:49 UTC · Apr 29, 2025Threat actor60
Multiple threat actors exploit PHP flaw CVE-2024Security Affairs·Jul 11, 14:31 UTC · Jul 11, 2024Threat actor in the wildCVE-2024-4577CVE-2012-182360
Iran-linked threat actors compromise US Federal NetworkSecurity Affairs·Nov 17, 07:58 UTC · Nov 17, 2022Threat actor in the wildCVE-2021-4422860
Threat Actors Uses Agentic AI to Rapidly Compromise Cloud TargetInfosecurity Magazine·Jul 8, 12:30 UTC · Jul 8, 2026Threat actor60
Threat actors are offering access to corporate networks via unauthorized Fortinet VPN accessSecurity Affairs·Nov 29, 22:22 UTC · Nov 29, 2022Threat actor in the wildCVE-2022-4068460
China-linked threat actors target Indian Power Grid organizationsSecurity Affairs·Apr 9, 12:06 UTC · Apr 9, 2022Threat actor60
Threat actors are adapting and switching their operations strategically and technicallyHelp Net Security·Aug 16, 00:00 UTC · Aug 16, 2019Threat actor60
Threat actors are stealing funds from General Bytes Bitcoin ATMSecurity Affairs·Aug 21, 17:40 UTC · Aug 21, 2022Threat actor in the wild60
Wild Neutron – Economic espionage threat actor returns with new tricksKaspersky Securelist·Jul 8, 13:04 UTC · Jul 8, 2015Threat actorCVE-2012-321360
Russia-linked threat actors launched hundreds of cyberattacks on UkraineSecurity Affairs·Apr 28, 04:36 UTC · Apr 28, 2022Threat actor60
What’s the point of press releases from threat actors?Cisco Talos·Sep 21, 18:00 UTC · Sep 21, 2023Threat actor60
Data from 5.4M Twitter users obtained from multiple threat actorsSecurity Affairs·Jan 5, 00:30 UTC · Jan 5, 2023Threat actor60
Threat actors intensify focus on NATO member statesHelp Net Security·Feb 14, 00:00 UTC · Feb 14, 2024Threat actor60
Threat actors continue to exploit Log4Shell in VMware Horizon SystemsSecurity Affairs·Jun 24, 15:08 UTC · Jun 24, 2022Threat actorCVE-2021-44228CVE-2022-2295460