UAT-7237 targets Taiwanese web hosting infrastructureCisco Talos·Aug 15, 10:00 UTC · Aug 15, 2025Vulnerability42
ToolShell: Details of CVEs affecting SharePoint serversCisco Talos·Jul 23, 15:32 UTC · Jul 23, 2025Exploit / PoC in the wildCVE-2025-53770CVE-2025-53771CVE-2025-49704+1 CVEs160
MaaS operation using Emmenhtal and Amadey linked to threats against Ukrainian entitiesCisco Talos·Jul 17, 10:00 UTC · Jul 17, 2025Malware30
Famous Chollima deploying Python version of GolangGhost RATCisco Talos·Jun 18, 10:00 UTC · Jun 18, 2025Malware130
Newly identified wiper malware “PathWiper” targets critical infrastructure in UkraineCisco Talos·Jun 5, 10:00 UTC · Jun 5, 2025Malware55
Cybercriminals camouflaging threats as AI tool installersCisco Talos·May 29, 10:00 UTC · May 29, 2025Ransomware57
UAT-6382 exploits Cityworks zeroCisco Talos·May 22, 10:00 UTC · May 22, 2025Vulnerability in the wildCVE-2025-0994CVE-2025-094460
Spam campaign targeting Brazil abuses Remote Monitoring and Management toolsCisco Talos·May 8, 10:00 UTC · May 8, 2025Threat actor57
Introducing ToyMaker, an initial access broker working in cahoots with double extortion gangsCisco Talos·Apr 23, 10:00 UTC · Apr 23, 2025Ransomware60
Unmasking the new XorDDoS controller and infrastructureCisco Talos·Apr 17, 10:00 UTC · Apr 17, 2025Malware30
Unraveling the U.S. toll road smishing scamsCisco Talos·Apr 10, 14:30 UTC · Apr 10, 2025Phishing & fraud30
Gamaredon campaign abuses LNK files to distribute Remcos backdoorCisco Talos·Mar 28, 10:00 UTC · Mar 28, 2025Malware42
UAT-5918 targets critical infrastructure entities in TaiwanCisco Talos·Mar 20, 10:00 UTC · Mar 20, 2025Exploit / PoC60
Unmasking the new persistent attacks on JapanCisco Talos·Mar 6, 11:00 UTC · Mar 6, 2025VulnerabilityCVE-2024-4577160
Lotus Blossom espionage group targets multiple industries with different versions of Sagerunex and hacking toolsCisco Talos·Feb 27, 11:00 UTC · Feb 27, 2025Threat actor57
Your item has sold! Avoiding scams targeting online sellersCisco Talos·Feb 25, 11:17 UTC · Feb 25, 2025Phishing & fraud30
Unwrapping the emerging Interlock ransomware attackCisco Talos·Nov 7, 11:00 UTC · Nov 7, 2024Ransomware57
Threat actors use copyright infringement phishing lure to deploy infostealersCisco Talos·Oct 31, 13:37 UTC · Oct 31, 2024Malware30
Threat actor abuses Gophish to deliver new PowerRAT and DCRATCisco Talos·Oct 22, 10:00 UTC · Oct 22, 2024Malware30
Akira ransomware continues to evolveCisco Talos·Oct 21, 16:50 UTC · Oct 21, 2024Ransomware in the wildCVE-2024-40766CVE-2020-3259CVE-2023-20263+5 CVEs60
UAT-5647 targets Ukrainian and Polish entities with RomCom malware variantsCisco Talos·Oct 17, 10:00 UTC · Oct 17, 2024Malware42
Threat actor believed to be spreading new MedusaLocker variant since 2022Cisco Talos·Oct 3, 10:00 UTC · Oct 3, 2024Threat actor57
Threat actors using MacroPack to deploy Brute Ratel, Havoc and PhantomCore payloadsCisco Talos·Sep 3, 13:14 UTC · Sep 3, 2024Threat actor45
APT41 likely compromised Taiwanese government-affiliated research institute with ShadowPad and Cobalt StrikeCisco Talos·Aug 1, 12:00 UTC · Aug 1, 2024Threat actorCVE-2018-0824160
Unveiling SpiceRAT: SneakyChef's latest tool targeting EMEA and AsiaCisco Talos·Jun 21, 12:00 UTC · Jun 21, 2024Malware30
SneakyChef espionage group targets government agencies with SugarGh0st and more infection techniquesCisco Talos·Jun 21, 12:00 UTC · Jun 21, 2024Threat actor45
Operation Celestial Force employs mobile and desktop malware to target Indian entitiesCisco Talos·Jun 13, 10:00 UTC · Jun 13, 2024Malware42
DarkGate switches up its tactics with new payload, email templatesCisco Talos·Jun 5, 12:00 UTC · Jun 5, 2024Malware30
LilacSquid: The stealthy trilogy of PurpleInk, InkBox and InkLoaderCisco Talos·May 30, 12:01 UTC · May 30, 2024Malware42
ArcaneDoor - New espionage-focused campaign found targeting perimeter network devicesCisco Talos·Apr 24, 15:54 UTC · Apr 24, 2024Threat actorCVE-2025-20333CVE-2025-20362CVE-2025-20363+3 CVEs60
Suspected CoralRaider continues to expand victimology using three information stealersCisco Talos·Apr 23, 12:42 UTC · Apr 23, 2024Malware30
OfflRouter virus causes Ukrainian users to upload confidential documents to VirusTotalCisco Talos·Apr 17, 12:54 UTC · Apr 17, 2024Malware30
Starry Addax targets human rights defenders in North Africa with new malwareCisco Talos·Apr 9, 12:02 UTC · Apr 9, 2024Malware30
CoralRaider targets victims’ data and social media accountsCisco Talos·Apr 4, 12:00 UTC · Apr 4, 2024Malware30
New details on TinyTurla’s post-compromise activity reveal full kill chainCisco Talos·Mar 21, 13:08 UTC · Mar 21, 2024Threat actor57
GhostSec’s joint ransomware operation and evolution of their arsenalCisco Talos·Mar 5, 13:00 UTC · Mar 5, 2024Ransomware60
TinyTurla-NG in-depth tooling and command and control analysisCisco Talos·Feb 22, 13:00 UTC · Feb 22, 2024Threat actor157