Active Threats
Explore the latest active threats being deployed by malicious actors as of 2026. Each report may offer attack flows, actionable detection rules, and simulation instructions to help SOC teams stay ahead of evolving adversary techniques.
Python Backdoor Threat Analysis Following an AI Deepfake Impersonation Campaign
SOC Prime Bias: Critical
co.kr
Gamaredon Uses Spoofed Emails, GammaDrop, and GammaLoad
SOC Prime Bias: Critical
HarfangLab
Malware Found in Trending Hugging Face Repository
SOC Prime Bias: Critical
hiddenlayer.com
Lazarus Group Uses Git Hooks To Hide Malware DPRK’s Contagious Interview and TaskJacker campaign is now hiding its second‑stage loader inside git hooks that download InvisibleFerret and Beavertail malware
SOC Prime Bias: Critical
6lowecase6
MacSync Stealer Uses Rotating C2 Infrastructure
SOC Prime Bias: Medium
RST Cloud
Five Fake NuGet UI Packages Deliver Crypto Wallet and Credential Stealers
SOC Prime Bias: Critical
Socket
OPERATION SILENTCANVAS : JPEG BASED MULTISTAGE POWERSHELL INTRUSION
SOC Prime Bias: Critical
CYFIRMA
Shub Stealer Infection Notice for macOS
SOC Prime Bias: Medium
malware-traffic-analysis.net
OpenClaw’s Hologram Delivers a Fake Installer and Rust Infostealer
SOC Prime Bias: Medium
Netskope
Dirty Frag Linux Flaw Raises Post-Compromise Risk
SOC Prime Bias: Critical
Microsoft Security Blog
