Active Threats
Explore the latest active threats being deployed by malicious actors as of 2026. Each report may offer attack flows, actionable detection rules, and simulation instructions to help SOC teams stay ahead of evolving adversary techniques.
Kimsuky Expands Attack Operations with AI and Local LLMs
SOC Prime Bias: Critical
co.kr
ScreenConnect Spread at Scale Through App Store-Themed Phishing
SOC Prime Bias: High
levelbluecyber
CrowdStrike Hunts Shell Command Obfuscation on VMware ESXi
SOC Prime Bias: Critical
crowdstrike.com
How 2026’s Least-Prevented Ransomware Families Evade Defenses
SOC Prime Bias: Critical
picussecurity.com
Fake Zoom installer uses .NET downloader to deliver Overlord RAT on macOS
SOC Prime Bias: High
jamfsoftware
UAC-0145 Targets Victims Through Recruitment-Themed Social Engineering
SOC Prime Bias: Critical
cert.gov.ua
macOS Infostealer Targets Cryptocurrency Wallets
SOC Prime Bias: High
Huntress
Critical N-central Security Flaw Triggers Active Exploitation
SOC Prime Bias: Critical
Huntress
Larva-26005: Tracing Xctdoor’s Connection to CRAT Attacks
SOC Prime Bias: Critical
ASEC
Dropping Elephant APT: Patchwork’s Espionage Tactics and Toolset
SOC Prime Bias: Critical
picussecurity.com
