Active Threats
Explore the latest active threats being deployed by malicious actors as of 2026. Each report may offer attack flows, actionable detection rules, and simulation instructions to help SOC teams stay ahead of evolving adversary techniques.
THREAT OF THE MONTH
StopRansomware: Gunra Ransomware Threat Analysis
SOC Prime Bias: Critical
CISA
Chinese State-Linked Hackers Blend Automated Tools With Hands-On Attacks
SOC Prime Bias: Critical
CISA
Dire Wolf Ransomware: How to Validate and Strengthen Defenses
SOC Prime Bias: High
picussecurity.com
TraderTraitor-Linked Attack Abuses Terraform Provider to Spread Cross-Platform Malware
SOC Prime Bias: Critical
zscaler.com
How BlueMoon Exploits Chrome CVE-2026-85046 and CVE-2026-87491
SOC Prime Bias: Critical
picussecurity.com
TensorLake npm SDK Used to Spread Credential-Stealing Malware
SOC Prime Bias: Critical
socket.dev
ClickFix Attack Delivers Payloads via Browser Cache
SOC Prime Bias: High
The Hacker News
Shai-Hulud Supply Chain Attack Targets TensorLake npm SDK
SOC Prime Bias: Critical
socket.dev
CVE-2026-88771 and CVE-2026-88772 Exploited in NetScaler Attacks
SOC Prime Bias: Critical
Unit 42
Citrix NetScaler Attacks Target ADC and Gateway Appliances
SOC Prime Bias: Critical
Google Cloud Blog
Blinder Tunnel Campaign Analysis: Tactics, Techniques, and Infrastructure
SOC Prime Bias: Critical
Unit 42
