Active Threats
Explore the latest active threats being deployed by malicious actors as of 2026. Each report may offer attack flows, actionable detection rules, and simulation instructions to help SOC teams stay ahead of evolving adversary techniques.
Medusa Ransomware Detection: Key Behaviors Across Intrusions
SOC Prime Bias: Critical
extrahop.com
BlueDelta Deploys HOOKEDGE in Espionage Operations Across Europe
SOC Prime Bias: Critical
PolySwarm
Kimsuky Adopts OpenCode AI for Decoys in GitHub PAT-Based LNK Campaigns
SOC Prime Bias: Critical
co.kr
Panzer ransomware: a new RaaS hits Italian manufacturers and telecom providers
SOC Prime Bias: High
Andrea Fortuna
ClearFake WebDAV infection chain delivers Amatera stealer, ZigCryptoStealer, and NetSupport Manager
SOC Prime Bias: High
Cisco Talos Blog
MacSync macOS Stealer Uses ClickFix Lures to Evade Detectio
SOC Prime Bias: High
Seqrite Labs
GetSystem Explained: Paths to SYSTEM-Level Access
SOC Prime Bias: Critical
GitHub
Inside the XLoader Infection Chain
SOC Prime Bias: High
d01a
Contagious Interview Moves Outside Traditional Developer Workflows
SOC Prime Bias: High
jamfsoftware
Malware Attack Cases in Korea Involving the Installation of Radmin and UltraVNC
SOC Prime Bias: High
ASEC
