When Your $2M Security Detection Fails: Can your SOC Save You?The Hacker News·Nov 26, 11:55 UTC · Nov 26, 2025Threat actor60
Threat Actors Favor Rclone, WinSCP and cURL as Data Exfiltration ToolsInfosecurity Magazine·Aug 9, 10:00 UTC · Aug 9, 2024Threat actor60
FireEye breach: State-sponsored attackers stole hacking toolsHelp Net Security·Dec 9, 00:00 UTC · Dec 9, 2020Threat actor60
SOC files: an APT41 attack on government IT services in AfricaKaspersky Securelist·Jul 21, 08:00 UTC · Jul 21, 2025Threat actor60
Proofpoint DLP Transform secures data moving to ChatGPT, copilots, and other GenAI toolsHelp Net Security·May 2, 00:00 UTC · May 2, 2024Threat actor60
Wild Neutron – Economic espionage threat actor returns with new tricksKaspersky Securelist·Jul 8, 13:04 UTC · Jul 8, 2015Threat actorCVE-2012-321360
Week in review: Fortibleed campaign’s impact on orgs, Cisco Unified CM flaw exploitedHelp Net Security·Jun 28, 00:00 UTC · Jun 28, 2026Threat actor in the wildCVE-2026-2023060
Detections in the Sky: Sigma Rules to Enhance Cloud Security for the Big ThreeRecorded Future·Aug 21, 00:00 UTC · Aug 21, 2025Threat actor160
AI tools are everywhere, and most are off your radarHelp Net Security·Jul 3, 00:00 UTC · Jul 3, 2025Threat actor60
Hacking tools in Vault 7 data dump linked to prolific cyber espionage groupHelp Net Security·Apr 11, 00:00 UTC · Apr 11, 2017Threat actor60
Russian Cyber Threat Actor Uses GenAI to Compromise Fortinet FirewallsInfosecurity Magazine·Feb 23, 12:30 UTC · Feb 23, 2026Threat actor in the wildCVE-2019-7192CVE-2023-27532CVE-2024-40711160
WEF: Deepfake Face-Swapping Tools Are Creating Critical RisksInfosecurity Magazine·Jan 9, 12:34 UTC · Jan 9, 2026Threat actor60
Secrets Exposed: Why Your CISO Should Worry About SlackThe Hacker News·Sep 3, 07:30 UTC · Sep 3, 2024Threat actor60
OpenAI: Threat actors use us to be efficient, not make new toolsCyberScoop·Oct 7, 19:56 UTC · Oct 7, 2025Threat actor60
How North Korea Revolutionized the Internet as a Tool for Rogue RegimesRecorded Future·Apr 23, 00:00 UTC · Apr 23, 2019Threat actor60
TrueMedia.org introduces deepfake detection toolHelp Net Security·Apr 3, 00:00 UTC · Apr 3, 2024Threat actor60
Microsoft builds deepfakes detection tool to combat election disinformationHelp Net Security·Sep 2, 00:00 UTC · Sep 2, 2020Threat actor160
APT review: what the world’s threat actors got up to in 2019Kaspersky Securelist·Dec 4, 10:00 UTC · Dec 4, 2019Threat actor60
State-sponsored actors, better known as the friends you don’t wantCisco Talos·May 12, 10:00 UTC · May 12, 2026Threat actor60
ImmuniWeb offers free tool to test quantum resilience of TLS stacksHelp Net Security·Sep 19, 00:00 UTC · Sep 19, 2025Threat actor60
Lazarus APT updates its toolset in watering hole attacksKaspersky Securelist·Apr 24, 05:00 UTC · Apr 24, 2025Threat actor60
Billbug Espionage Group Deploys New Tools in Southeast AsiaInfosecurity Magazine·Apr 22, 16:00 UTC · Apr 22, 2025Threat actor60
Criminal campaign uses leaked NSA tools to set up cryptomining scheme, Trend Micro saysCyberScoop·Jun 14, 21:20 UTC · Jun 14, 2019Threat actor60
'Amateurish' espionage campaign launched with leaked Hacking Team toolsCyberScoop·Apr 13, 22:03 UTC · Apr 13, 2017Threat actor in the wild60
Threat Actors Weaponize HexStrike AI to Exploit Citrix Flaws Within a Week of DisclosureThe Hacker News·Sep 10, 09:41 UTC · Sep 10, 2025Threat actor in the wild160
The Crowded Battle: Key Insights from the 2025 State of Pentesting ReportThe Hacker News·May 26, 04:08 UTC · May 26, 2025Threat actor60
SaaS Security Posture Management (SSPM) as a Layer in Your Identity FabricThe Hacker News·Jan 23, 11:39 UTC · Jan 23, 2023Threat actor60
FSB's Fronton DDoS tool was actually designed for 'massive' fake info campaigns, researchers sayCyberScoop·May 19, 13:43 UTC · May 19, 2022Threat actor in the wild60
UNC1945, a threat actor used Oracle Solaris ZeroSecurity Affairs·Nov 4, 00:32 UTC · Nov 4, 2020Threat actorCVE-2020-1487160
China-linked APT3 was able to modify stolen NSA cyberweaponsSecurity Affairs·Sep 9, 06:52 UTC · Sep 9, 2019Threat actorCVE-2019-070360
Developer Workstations Are Now Part of the Software Supply ChainThe Hacker News·May 18, 11:23 UTC · May 18, 2026Threat actor160
New Threat Actor “Grayling” Blamed For Espionage CampaignInfosecurity Magazine·Oct 10, 11:00 UTC · Oct 10, 2023Threat actorCVE-2019-080360
TAG-100 Uses Open-Source Tools in Suspected Global Espionage Campaign, Compromising Two Asia-Pacific Intergovernmental BodiesRecorded Future·Aug 22, 00:00 UTC · Aug 22, 2025Threat actor in the wildCVE-2024-340060
Turla living off other cybercriminals’ tools in order to attack Ukrainian targetsCyberScoop·Dec 11, 17:00 UTC · Dec 11, 2024Threat actor60
U.S. Government Neutralizes Russia's Most Sophisticated Snake Cyber Espionage ToolThe Hacker News·May 10, 08:44 UTC · May 10, 2023Threat actor60
Symantec connects another hacking tool to SolarWinds campaignCyberScoop·Jan 19, 12:36 UTC · Jan 19, 2021Threat actor in the wild60
Hacking tools used by North Korea's Lazarus Group aimed at Russian targetsCyberScoop·Feb 19, 21:42 UTC · Feb 19, 2019Threat actor in the wild60
The Back Door Attackers Know About — and Most Security Teams Still Haven’t ClosedThe Hacker News·May 5, 11:58 UTC · May 5, 2026Threat actor60
AI-powered campaign compromises 600 FortiGate systems worldwideSecurity Affairs·Feb 23, 10:39 UTC · Feb 23, 2026Threat actor in the wildCVE-2019-7192CVE-2023-27532CVE-2024-40711160
⚡ Weekly Recap: Lazarus Hits Web3, Intel/AMD TEEs Cracked, Dark Web Leak Tool & MoreThe Hacker News·Nov 3, 17:59 UTC · Nov 3, 2025Threat actorCVE-2025-61932CVE-2025-55315CVE-2025-10680+18 CVEs160