Active Threats
Explore the latest active threats being deployed by malicious actors as of 2026. Each report may offer attack flows, actionable detection rules, and simulation instructions to help SOC teams stay ahead of evolving adversary techniques.
THREAT OF THE MONTH
StopRansomware: Gunra Ransomware Threat Analysis
SOC Prime Bias: Critical
CISA
Attackers Exploit CVE-2026-42016, CVE-2026-42018, and CVE-2026-82329 in Artifactory
SOC Prime Bias: Critical
wiz.io
Redtail Malware Payload: Technical Analysis and Behavior
SOC Prime Bias: High
SANS Internet Storm Center
Agents Gone Wild: An AI-Orchestrated Global Campaign Against PaperCut NG/MF
SOC Prime Bias: Critical
greynoise.io
GTA VI-Themed Lures Lead Users to Malware
SOC Prime Bias: High
Huntress
Job Offer Lures Hide Two Sophisticated Multi-Stage Attack Chains
SOC Prime Bias: High
cyderes.com
Chrome and Windows Zero-Days Fuel Rapid Adoption by State-Aligned Threat Actors
SOC Prime Bias: Critical
Proofpoint
Chinese Threat Actors Chain Browser and Windows Zero-Days
SOC Prime Bias: Critical
Volexity
New Kimsuky LNK Malware Using Multi-Channel C2 Infrastructure
SOC Prime Bias: Critical
이스트시큐리티 알약 블로그
Google Infrastructure Abused to Hide a Global Phishing Campaign
SOC Prime Bias: High
KnowBe4
Mirage Kitten Deploys NodeRabbit and PollCat Through Job Offer Lures
SOC Prime Bias: Critical
PolySwarm
