Active Threats
Explore the latest active threats being deployed by malicious actors as of 2026. Each report may offer attack flows, actionable detection rules, and simulation instructions to help SOC teams stay ahead of evolving adversary techniques.
ConnectWise SkyKick Vendor Credentials Abused in Microsoft 365 Attacks
SOC Prime Bias: Critical
Huntress
UNC7017 Targets AOMEI Technology in Software Supply Chain Attack
SOC Prime Bias: Critical
Google Cloud Blog
Midnight Blizzard Linked to Large-Scale Espionage Campaign
SOC Prime Bias: Critical
ReversingLabs
CVE-2026-104935: Ivanti Connect Secure Zero-Day Exploited in Chained Attacks
SOC Prime Bias: Critical
SOCRadar
Help TDS Campaigns Use Hotejka and Cloudflare Pages for Traffic Redirection
SOC Prime Bias: High
Infoblox Blog
Web Systems Hit by Consecutive Information Leakage Incidents
SOC Prime Bias: High
セキュリティ研究センターブログ
AI-Driven Website Attacks Leverage Autonomous Agents
SOC Prime Bias: High
WAF Tech Blog
ARTEX AI-Driven Attack Campaign Hits Seven South Korean Financial Firms
SOC Prime Bias: High
Wisely Chen
Two Malware Loaders Compared: From ClickFix Delivery to C2
SOC Prime Bias: High
Forescout
Fake Purchase Order Emails Used in Malware Phishing Attacks
SOC Prime Bias: High
ASEC
