Active Threats
Explore the latest active threats being deployed by malicious actors as of 2026. Each report may offer attack flows, actionable detection rules, and simulation instructions to help SOC teams stay ahead of evolving adversary techniques.
Fake Google Antigravity Pages Steal User Accounts in Minutes
SOC Prime Bias: Critical
Malwarebytes
Threat Advisory: Attackers Intensify Bomgar RMM Exploitation
SOC Prime Bias: Critical
Huntress
CVE-2026-33829: Snipping Tool NTLM Leak
SOC Prime Bias: Critical
GitHub
Remcos RAT Delivered Through a Deceptive Purchase Order
SOC Prime Bias: Medium
Hornetsecurity
Your shipment has arrived email hides remote access software
SOC Prime Bias: Середній
Malwarebytes
Not Just Annoying Ads: Adware Bundles Delivering Gh0st RAT
SOC Prime Bias: Середній
Splunk
Lumma Stealer infection with Sectop RAT (ArechClient2)
SOC Prime Bias: Medium
SANS Internet Storm Center
TeamPCP Gains Ground in Cloud-Native and Ransomware Campaigns
SOC Prime Bias: Critical
Flare
Dissecting Sapphire Sleet’s macOS intrusion from lure to compromise
SOC Prime Bias: Critical
Microsoft Security Blog
A fake Slack download is giving attackers a hidden desktop on your machine
SOC Prime Bias: Medium
Malwarebytes
