Active Threats
Explore the latest active threats being deployed by malicious actors as of 2026. Each report may offer attack flows, actionable detection rules, and simulation instructions to help SOC teams stay ahead of evolving adversary techniques.
VIP Keylogger and Its Multi-Layered Evasion Tactics
SOC Prime Bias: Medium
Splunk
PureLogs Delivered Through PawsRunner Steganography
SOC Prime Bias: Medium
Fortinet Blog
Investigating a Stealthy Intrusion Through Third-Party Compromise
SOC Prime Bias: Critical
Microsoft Security Blog
Hunting Chinese APTs Abusing Native Windows Tools
SOC Prime Bias: Критичний
hackers-arise.com
FrostyNeighbor: Fresh Mischief and Digital Threats
SOC Prime Bias: Critical
welivesecurity.com
Active Supply Chain Attack Compromises node-ipc Package
SOC Prime Bias: Critical
Socket
Dissecting a ModeloRAT Campaign from Teams Phishing to Domain Compromise
SOC Prime Bias: Critical
Rapid7
FamousSparrow Targets Azerbaijan’s Oil and Gas Sector
SOC Prime Bias: Critical
Bitdefender Blog
ClickFix Evolves with PySoxy Proxying
SOC Prime Bias: Critical
ReliaQuest
Shai-Hulud: Here We Go Again – Worm by TeamPCP Hits NPM and PyPI
SOC Prime Bias: Critical
JFrog Security Research
