Active Threats
Explore the latest active threats being deployed by malicious actors as of Q4 2025. Each report may offer attack flows, actionable detection rules, and simulation instructions to help SOC teams stay ahead of evolving adversary techniques.
Maverick Malware: Actionable Report for SOC Teams
SOC Prime Bias: Medium
CyberProof
CVE-2025-12480: The SOC Report on Unauthenticated Access Control Vulnerability in Gladinet’s Triofox
SOC Prime Bias: Critical
Google Cloud Blog
Ferocious Kitten APT Exposed: Inside the Iran-Focused Espionage Campaign
SOC Prime Bias: Critical
Picus Security
China-linked Actors Maintain Focus on Organizations Influencing U.S. Policy
SOC Prime Bias: Critical
Security.com
“EndClient RAT” – New Kimsuky APT Malware
SOC Prime Bias: Critical
0x0v1
Curly COMrades: Abnormal Hyper-V Activation
SOC Prime Bias: Critical
Bitdefender
SesameOp Backdoor Detection: Microsoft Discovers New Malware Abusing OpenAI Assistants API in Cyber-Attacks
SOC Prime Bias: Critical
Microsoft
Remote Access, Real cargo: Cybercriminals Targeting Trucking and Logistics
SOC Prime Bias: Medium
Proofpoint
CVE-2025-59287: Windows Server Update Services Remote Code Execution Vulnerability
SOC Prime Bias: Critical
Huntress
