Iran Expands Handala Brand to Physical ThreatsRecorded Future·Apr 26, 00:00 UTC · Apr 26, 2026Malware55
US Treasury sanctioned Iran ’s Ministry of Intelligence over Albania cyberattackSecurity Affairs·Sep 9, 19:48 UTC · Sep 9, 2022Policy & legal55
Iran-Linked Hackers Breach FBI Director’s Personal Email, Hit Stryker With Wiper AttackThe Hacker News·Mar 30, 09:39 UTC · Mar 30, 2026Malware55
U.S. Imposes New Sanctions on Iran Over Cyberattack on AlbaniaThe Hacker News·Sep 11, 04:05 UTC · Sep 11, 2022Policy & legalCVE-2019-060460
US sanctions Iran intelligence agency over Albania cyberattackThe Record·Jan 11, 00:00 UTC · Jan 11, 2023Policy & legal55
US Treasury Sanctions Iranian Minister Over Hacking of Govt and AlliesInfosecurity Magazine·Sep 12, 18:00 UTC · Sep 12, 2022Policy & legal55
Previously unreported Lebanon-based hacking group targeting Israel, Microsoft saysCyberScoop·Jun 2, 21:01 UTC · Jun 2, 2022Exploit / PoC in the wildCVE-2018-1337960
U.S. Cyber Command shares new samples of suspected Iranian hacking softwareCyberScoop·Jan 12, 20:41 UTC · Jan 12, 2022Exploit / PoC in the wild60
FBI takes down leak sites tied to Iran’s Ministry of Intelligence and SecurityThe Record·Mar 20, 17:25 UTC · Mar 20, 2026Ransomware60
Iranian intelligence used narco trafficker to recruit Hells Angel for planned assassinationThe Record·Jan 29, 18:16 UTC · Jan 29, 2024Vulnerability55
Cyber attacks hit the Assembly of the Republic of Albania and telecom company One AlbaniaSecurity Affairs·Dec 29, 22:41 UTC · Dec 29, 2023Malware55
U.S. sanctions two Iranian cyber operatives over crackdowns on Mahsa Amini protestsCyberScoop·Oct 27, 20:46 UTC · Oct 27, 2022Policy & legal in the wild60
U.S. Treasury Sanctions Hacking Group Backed by Iranian IntelligenceThe Hacker News·Sep 21, 06:10 UTC · Sep 21, 2020Policy & legal55
MuddyWater Uses DLL Side-Loading in Espionage Campaign Targeting 9 CountriesThe Hacker News·May 27, 09:52 UTC · May 27, 2026Threat actor60
Iran-Linked Hackers Disrupt U.S. Critical Infrastructure by Targeting InternetThe Hacker News·Apr 8, 11:44 UTC · Apr 8, 2026Malware in the wild60
Update, March 13: Talos on the developing situation in the Middle EastCisco Talos·Mar 3, 00:55 UTC · Mar 3, 2026Data breach160
⚡ Weekly Recap: Chrome 0-Day, Data Wipers, Misused Tools and ZeroThe Hacker News·Jul 25, 08:27 UTC · Jul 25, 2026Malware in the wildCVE-2025-20286CVE-2025-49113CVE-2025-5419+8 CVEs60
AI Has Enhanced Iran’s Asymmetric Playbook During the 2026 ConflictRecorded Future·Jul 16, 00:00 UTC · Jul 16, 2026Malware55
Fielding Threats: Cyber, Influence, and Physical Threats to the 2022 FIFA World Cup in QatarRecorded Future·Jun 23, 00:00 UTC · Jun 23, 2026Ransomware60
Microsoft Takes Down Group Operating RansomwareInfosecurity Magazine·May 19, 15:00 UTC · May 19, 2026Ransomware60
Iran-Linked Hackers Hit Israeli Sectors with New MuddyViper Backdoor in Targeted AttacksThe Hacker News·May 6, 12:11 UTC · May 6, 2026Malware55
ThreatsDay Bulletin: $290M DeFi Hack, macOS LotL Abuse, ProxySmart SIM Farms +25 New StoriesThe Hacker News·Apr 24, 04:36 UTC · Apr 24, 2026Exploit / PoCCVE-2026-27175CVE-2026-27174CVE-2025-22952+1 CVEs60
State-sponsored threats: Different objectives, similar access pathsCisco Talos·Apr 14, 13:49 UTC · Apr 14, 2026Threat actor in the wild60
U.S. CISA adds Apple, Laravel Livewire and Craft CMS flaws to its Known Exploited Vulnerabilities catalogSecurity Affairs·Mar 22, 14:40 UTC · Mar 22, 2026Exploit / PoC in the wildCVE-2025-31277CVE-2025-32432CVE-2025-43510+3 CVEs60
CISA Flags Apple, Craft CMS, Laravel Bugs in KEV, Orders Patching by April 3, 2026The Hacker News·Mar 21, 08:25 UTC · Mar 21, 2026Exploit / PoC in the wildCVE-2025-31277CVE-2025-43510CVE-2025-43520+2 CVEs160
Iran-Linked MuddyWater Hackers Target U.S. Networks With New Dindoor BackdoorThe Hacker News·Mar 9, 06:40 UTC · Mar 9, 2026Malware in the wildCVE-2017-7921CVE-2023-6895CVE-2021-36260+2 CVEs60
Iran-linked MuddyWater deploys Dindoor malware against U.S. organizationsSecurity Affairs·Mar 6, 20:05 UTC · Mar 6, 2026Malware55
Iran-linked APT targets US critical sectors with new backdoorsHelp Net Security·Mar 6, 00:00 UTC · Mar 6, 2026Malware55
Iran-Linked Hackers Mapped Ship AIS Data Days Before RealThe Hacker News·Nov 20, 07:35 UTC · Nov 20, 2025Threat actor60
⚡ Weekly Recap: WSUS Exploited, LockBit 5.0 Returns, Telegram Backdoor, F5 Breach WidensThe Hacker News·Oct 27, 14:16 UTC · Oct 27, 2025Ransomware in the wildCVE-2025-59287CVE-2025-54957CVE-2025-6950+21 CVEs60
UNC1549 Hacks 34 Devices in 11 Telecom Firms via LinkedIn Job Lures and MINIBIKE MalwareThe Hacker News·Sep 22, 15:20 UTC · Sep 22, 2025Malware55
31 New Ransomware Groups Join the Ecosystem in 12 MonthsInfosecurity Magazine·Oct 8, 14:30 UTC · Oct 8, 2024Ransomware60
Are hardware supply chain attacks “cyber attacks?”Cisco Talos·Sep 26, 18:01 UTC · Sep 26, 2024Ransomware60
THN Cybersecurity Recap: Last Week's Top Threats and Trends (September 16The Hacker News·Sep 24, 04:12 UTC · Sep 24, 2024Ransomware60
It's best to just assume you’ve been involved in a data breach somehowCisco Talos·Jul 18, 18:00 UTC · Jul 18, 2024Data breachCVE-2024-3811260
Microsoft: Iran is refining its cyber operationsCyberScoop·Feb 7, 05:00 UTC · Feb 7, 2024Ransomware in the wild60
Albanian Parliament and One Albania Telecom Hit by Cyber AttacksThe Hacker News·Dec 30, 09:11 UTC · Dec 30, 2023Policy & legal55
Iranian Cyber Espionage Group Targets Financial and Government Sectors in Middle EastThe Hacker News·Nov 3, 04:45 UTC · Nov 3, 2023Threat actor60
Microsoft Warns of State-Sponsored Attacks Exploiting Critical PaperCut VulnerabilityThe Hacker News·May 9, 16:24 UTC · May 9, 2023VulnerabilityCVE-2023-2735060