Active Threats
Explore the latest active threats being deployed by malicious actors as of 2026. Each report may offer attack flows, actionable detection rules, and simulation instructions to help SOC teams stay ahead of evolving adversary techniques.
Inside a Threat Hunting Case Study on Scattered Spider
SOC Prime Bias: High
intel471.com
LegacyHive: The Windows User Profile Service Bug That Loads Another User’s Registry Hive Nightmare
SOC Prime Bias: Critical
core-jmp
Tracking a DoNot (APT-C-35) Intrusion Against Bangladesh Military Personnel
SOC Prime Bias: Critical
cyderes.com
Turla (Secret Blizzard): STOCKSTAY and Kazuar Backdoors Explained
SOC Prime Bias: Critical
picussecurity.com
Phishing Scam Trend: Fake Project Proposal Emails
SOC Prime Bias: High
ASEC
Multi-Stage LNK Attack Uses TON Blockchain to Deliver a Node.js Backdoor
SOC Prime Bias: High
levelbluecyber
CrashStealer: macOS Infostealer Masquerading as a Crash Reporter
SOC Prime Bias: High
jamfsoftware
APT-C-60 Attack Update for 2026
SOC Prime Bias: High
JPCERT/CC Eyes
Phishing Emails Masquerading as Money Transfer Confirmations
SOC Prime Bias: High
ASEC
GigaWiper and the Anatomy of a Multi-Source Destructive Backdoor
SOC Prime Bias: Critical
Microsoft Security Blog
