Active Threats
Explore the latest active threats being deployed by malicious actors as of 2026. Each report may offer attack flows, actionable detection rules, and simulation instructions to help SOC teams stay ahead of evolving adversary techniques.
ChainScript: Tracing a Node.js RAT Through the Blockchain
SOC Prime Bias: High
Blackpoint Cyber
SmartApeSG Attack Chain Moves from ClickFix to RAT and MeshAgent
SOC Prime Bias: High
malware-traffic-analysis.net
Registry-Stored PowerShell Launches In-Memory Cryptocurrency Mining
SOC Prime Bias: High
K7 Labs
ScreenConnect Backdoor Deployed Through Malicious Email
SOC Prime Bias: High
malware-traffic-analysis.net
CVE-2026-45659: SharePoint Deserialization Flaw Enables RCE
SOC Prime Bias: High
SecureLayer7
Ready, Settra, Go: New Settra Ransomware Variant Deploys MeshAgent RMM
SOC Prime Bias: High
Huntress
Ransomware in Japan: The Gentlemen Infrastructure and Qilin’s AI Use
SOC Prime Bias: High
Cisco Talos Blog
APT36 Launches Operation RapidRust with RUSTYSHADE and RUSTYMOVE
SOC Prime Bias: Critical
zscaler.com
Beware the SparroWock: The backdoor that bites, the commands that catch
SOC Prime Bias: Critical
welivesecurity.com
LausivLoader Analysis: Tracking Data Across Multi-Stage Malware Execution
SOC Prime Bias: High
SANS Internet Storm Center
