Threat Brief: Office Documents Can Be Dangerous (But We’ll Continue to Use Them Anyway)Palo Alto Unit 42·Sep 21, 18:41 UTC · Sep 21, 2020Ransomware in the wildCVE-2018-4878CVE-2017-11882CVE-2018-0802+4 CVEs160
Spear Phishing Attacks Target Organizations in Ukraine, Payloads Include the Document Stealer OutSteel and the Downloader SaintBotPalo Alto Unit 42·Jun 5, 23:28 UTC · Jun 5, 2024MalwareCVE-2017-1188260
PSA: Conference Invite used as a Lure by Operation Lotus Blossom ActorsPalo Alto Unit 42·Nov 1, 10:25 UTC · Nov 1, 2018VulnerabilityCVE-2012-015860
10 Things You Need To Know About 'Wikileaks CIA Leak'The Hacker News·Mar 8, 18:38 UTC · Mar 8, 2017Exploit / PoC in the wild60
Concentric launches with a deep learning approach to fixing broken file permissionsHelp Net Security·Jan 31, 00:00 UTC · Jan 31, 2020Data breach60
Where's Assange? Tech firms are still waiting to receive CIA documents from WikileaksCyberScoop·Mar 21, 22:10 UTC · Mar 21, 2017Exploit / PoC in the wild60
Top Secret documents show Cyber Command's growing pains in its mission against ISISCyberScoop·Jan 21, 11:00 UTC · Jan 21, 2020Exploit / PoC in the wild60
Let It Ride: The Sofacy Group’s DealersChoice Attacks ContinuePalo Alto Unit 42·Nov 1, 10:41 UTC · Nov 1, 2018Exploit / PoC in the wildCVE-2016-7855CVE-2016-7255CVE-2015-7645160
Leaked documents show how firm supports Chinese hacking operationsCyberScoop·Feb 21, 23:53 UTC · Feb 21, 2024Ransomware in the wild60
WikiLeaks publishes MacBook, iPhone hacking toolkit supposedly used by CIACyberScoop·Mar 24, 13:24 UTC · Mar 24, 2017Exploit / PoC in the wild60
Macro Intruders: Sneaking Past Office DefensesCisco Talos·Aug 2, 13:42 UTC · Aug 2, 2016Exploit / PoC in the wild60
Fancy Bear spotted using real Kazak government documents in spearpishing campaignCyberScoop·Jan 15, 15:14 UTC · Jan 15, 2025Threat actor in the wild60
Securing the digital future with Vera and Canon Solutions AmericaHelp Net Security·Jan 17, 10:14 UTC · Jan 17, 2023Data breach60
DOJ seizes dozens of domains used in Russian influence campaigns targeting swing statesThe Record·Sep 4, 20:34 UTC · Sep 4, 2024Threat actor60
Zero-day bug exploited by attackers via macro-less Office documents (CVE-2022-30190)Help Net Security·May 31, 00:00 UTC · May 31, 2022Exploit / PoC in the wildCVE-2022-30190CVE-2021-4044460
Symantec confirms that Longhorn group is tied to CIA operators detailed in Vault 7Security Affairs·Apr 29, 10:24 UTC · Apr 29, 2021Exploit / PoC60
Former NSA analyst charged in leak of classified documents to reporterCyberScoop·May 9, 20:32 UTC · May 9, 2019Policy & legal in the wild60
Lazarus APT hackers leverages HWP Documents in a recent string of attacksSecurity Affairs·Jun 26, 04:44 UTC · Jun 26, 2018Threat actor60
Risky business: Are mobile employees compromising business info?Help Net Security·May 8, 00:00 UTC · May 8, 2018Data breach60
Leaked documents from Russian firm NTC Vulkan show Sandworm cyberwarfare arsenalSecurity Affairs·Apr 2, 14:40 UTC · Apr 2, 2023Threat actor60
Stolen U.S. drone documents found for sale on dark webCyberScoop·Jul 11, 10:36 UTC · Jul 11, 2018Data breach in the wild60
WikiLeaks releases new round of CIA malware documents, this time with less supporting materialCyberScoop·Jun 2, 13:39 UTC · Jun 2, 2017Malware in the wild60
China’s PLA Unit 61419 Purchasing Foreign Antivirus Products, Likely for ExploitationRecorded Future·Nov 21, 00:00 UTC · Nov 21, 2025Data breach60
Ex-CIA Analyst Pleads Guilty to Sharing TopThe Hacker News·Jan 22, 04:14 UTC · Jan 22, 2025Threat actor60
The Discord servers at the center of a massive US intelligence leakCyberScoop·Apr 10, 19:59 UTC · Apr 10, 2023Exploit / PoC in the wild60
DOJ now relies on paper for its most sensitive court documents, official saysCyberScoop·Aug 5, 18:35 UTC · Aug 5, 2022Policy & legal in the wild60
APT trends report Q1 2021Kaspersky Securelist·Apr 27, 10:00 UTC · Apr 27, 2021Exploit / PoC in the wild60
WikiLeaks Releases CIA Hacking ToolsSchneier on Security·Jan 27, 14:17 UTC · Jan 27, 2020Exploit / PoC60
The Dark Overlord hackers release documents allegedly tied to 9/11 civil lawsuitsCyberScoop·Jan 2, 17:25 UTC · Jan 2, 2019Policy & legal in the wild60
Case against alleged hoarder of NSA documents gets tougher for federal prosecutorsCyberScoop·Feb 26, 22:48 UTC · Feb 26, 2018Exploit / PoC in the wild60
Shadow Brokers leak NSA documents that may reveal operation aimed at Middle Eastern banksCyberScoop·Apr 14, 16:02 UTC · Apr 14, 2017Exploit / PoC in the wild60
Nightfall’s AI File Classifier Detectors bring LLM intelligence to unstructured IP protectionHelp Net Security·Nov 19, 00:00 UTC · Nov 19, 2025Data breach60
Leicester City Council confirms ransomware attack after confidential documents leakedThe Record·Apr 4, 11:57 UTC · Apr 4, 2024Ransomware60
New 0-Day Attack Targeting Windows Users With Microsoft Office DocumentsThe Hacker News·Sep 8, 04:55 UTC · Sep 8, 2021Exploit / PoC in the wildCVE-2021-4044460
Cyber Command was worried that WikiLeaks dump would burn Operation Aurora intel, document showsCyberScoop·Mar 9, 14:09 UTC · Mar 9, 2020Exploit / PoC in the wild60
T9000: Advanced Modular Backdoor Uses Complex AntiPalo Alto Unit 42·Nov 1, 10:04 UTC · Nov 1, 2018MalwareCVE-2012-1856CVE-2015-164160
New ThreadKit exploit builder used to spread banking Trojan and RATsSecurity Affairs·Mar 28, 12:38 UTC · Mar 28, 2018MalwareCVE-2017-0199CVE-2017-8759CVE-2018-4878+2 CVEs60
Microsoft Patch TuesdayCisco Talos·Oct 10, 20:25 UTC · Oct 10, 2017VulnerabilityCVE-2017-11813CVE-2017-11822CVE-2017-11762+38 CVEs160