Active Threats
Explore the latest active threats being deployed by malicious actors as of Q4 2025. Each report may offer attack flows, actionable detection rules, and simulation instructions to help SOC teams stay ahead of evolving adversary techniques.
Is Babuk Back? Uncovering the Truth Behind Babuk Locker 2.0
SOC Prime Bias: High
picussecurity.com
Infostealers without borders: macOS, Python stealers, and platform abuse
SOC Prime Bias: Medium
Microsoft Security Blog
ESET Research DynoWiper update: Technical analysis and attribution
SOC Prime Bias: Critical
welivesecurity.com
From Automation to Infection: How OpenClaw AI Agent Skills Are Being Weaponized
SOC Prime Bias: Critical
virustotal.com
Inside a Multi-Stage Windows Malware Operation
SOC Prime Bias: High
Fortinet Blog
Swarmer Tool Evading EDR With a Stealthy Modification on Windows Registry for Persistence
SOC Prime Bias: Medium
Cyber Security News
DE&TH to Vulnerabilities: Huntress Catches SmarterMail Account Takeover Leading to RCE
SOC Prime Bias: Critical
Huntress
Meet IClickFix: a widespread WordPress-targeting framework using the ClickFix tactic
SOC Prime Bias: Medium
Sekoia.io Blog
When Malware Strikes Back
SOC Prime Bias: Medium
Point Wild
EncystPHP: Weaponized FreePBX Web Shell for Persistent Admin Compromise
SOC Prime Bias: Critical
Fortinet Blog