Active Threats
Explore the latest active threats being deployed by malicious actors as of 2026. Each report may offer attack flows, actionable detection rules, and simulation instructions to help SOC teams stay ahead of evolving adversary techniques.
Counterfeit Installers Drive a Multi-Stage System Compromise
SOC Prime Bias: High
Microsoft Security Blog
RMM Security for SMBs: A Remote Access Hardening Playbook
SOC Prime Bias: Critical
Acronis
Impersonating IT support: how threat actors turn a remote session into enterprise-wide access
SOC Prime Bias: High
Microsoft Security Blog
FalconFlank Exposes CrowdStrike Falcon Privilege Escalation Risk
SOC Prime Bias: Critical
The Hacker News
The Gentlemen Deploy TukTuk C2 to Evade and Disable EDR
SOC Prime Bias: Critical
oasis-security.io
ScreenConnect Appears Across Unrelated Hosts in Suspected Worm-Like Activity
SOC Prime Bias: High
Huntress
VShell Malware Delivered Through a Fake Resume Targeting China’s Defense Industry
SOC Prime Bias: High
Himanshu Anand :
Evasive Malware Techniques for Defense Bypass and Persistence
SOC Prime Bias: High
ASEC
Phishing Emails Impersonate Seafood Purchase Requests to Deliver Malware
SOC Prime Bias: High
ASEC
BREEZE COMET Launches Financially Motivated Attacks in Brazil
SOC Prime Bias: Critical
Google Cloud Blog
