Active Threats
Explore the latest active threats being deployed by malicious actors as of Q4 2025. Each report may offer attack flows, actionable detection rules, and simulation instructions to help SOC teams stay ahead of evolving adversary techniques.
CVE-2025-12036 Vulnerability: A New Critical Chrome V8 JavaScript Remote Code Exploit
SOC Prime Bias: Critical
Google Chrome
CVE-2025-61932 Exploitation: A New Critical Motex LANSCOPE Endpoint Manager Vulnerability Used in Real-World Attacks
SOC Prime Bias: Critical
nvd.nist.gov
CVE-2025-48593: The SOC Report On Critical Zero-Click Vulnerability in Android
SOC Prime Bias: Medium
Android
CVE-2024-1086: Critical Privilege Escalation Flaw in Linux Kernel
SOC Prime Bias: Critical
cve.org
CVE-2025-62215: The SOC Report on Windows Kernel Zero-Day Vulnerability
SOC Prime Bias: Medium
Microsoft
Anthropic Claude AI Attack: First AI-Orchestrated Cyber Espionage Campaign
SOC Prime Bias: Critical
Anthropic
CVE-2025-46817: The SOC Report on Hardening the Lua Engine Against Four Critical Vulnerabilities (Redis 8.2.2)
SOC Prime Bias: Medium
Seqrite
GreenCharlie: The SOC Report on PowerShell Exploits by Iran-backed APT
SOC Prime Bias: Critical
Picus Security
Coyote Banking Malware: SOC Threat Report
SOC Prime Bias: Medium
CyberProof
CVE-2025-20337: Actionable Report for SOC Teams
SOC Prime Bias: Critical
The Hacker News
