Active Threats
Explore the latest active threats being deployed by malicious actors as of Q4 2025. Each report may offer attack flows, actionable detection rules, and simulation instructions to help SOC teams stay ahead of evolving adversary techniques.
CVE-2025-62215: The SOC Report on Windows Kernel Zero-Day Vulnerability
SOC Prime Bias: Medium
Microsoft
Anthropic Claude AI Attack: First AI-Orchestrated Cyber Espionage Campaign
SOC Prime Bias: Critical
Anthropic
CVE-2025-46817: The SOC Report on Hardening the Lua Engine Against Four Critical Vulnerabilities (Redis 8.2.2)
SOC Prime Bias: Medium
Seqrite
GreenCharlie: The SOC Report on PowerShell Exploits by Iran-backed APT
SOC Prime Bias: Critical
Picus Security
Coyote Banking Malware: SOC Threat Report
SOC Prime Bias: Medium
CyberProof
CVE-2025-20337: Actionable Report for SOC Teams
SOC Prime Bias: Critical
The Hacker News
Maverick Malware: Actionable Report for SOC Teams
SOC Prime Bias: Medium
CyberProof
CVE-2025-12480: The SOC Report on Unauthenticated Access Control Vulnerability in Gladinet’s Triofox
SOC Prime Bias: Critical
Google Cloud Blog
Ferocious Kitten APT Exposed: Inside the Iran-Focused Espionage Campaign
SOC Prime Bias: Critical
Picus Security
China-linked Actors Maintain Focus on Organizations Influencing U.S. Policy
SOC Prime Bias: Critical
Security.com