Active Threats
Explore the latest active threats being deployed by malicious actors as of 2026. Each report may offer attack flows, actionable detection rules, and simulation instructions to help SOC teams stay ahead of evolving adversary techniques.
The extension you never installed: KREMLIN forges Chrome’s own integrity checks to steal banking sessions
SOC Prime Bias: High
elastic
Iranian cyber targeting of dissidents, activists and journalists
SOC Prime Bias: High
National Cyber Security Centre
Malicious Twitch Extension Steals OAuth Tokens from 30,000 Users
SOC Prime Bias: High
socket.dev
PAPERMILL Emerges as a Silver Fox-Like Threat Cluster
SOC Prime Bias: High
JUMPSEC
RUSTGate: A Drone-Swarm Lure Points to Potential Defence-Sector Targeting
SOC Prime Bias: High
Ctrl-Alt-Intel
AsyncRAT Campaign Uses AutoIt for Multi-Stage Malware Delivery
SOC Prime Bias: High
Point Wild
LiteLLM Hack Triggers One of 2026’s Largest AI Supply Chain Breaches
SOC Prime Bias: Critical
Hudson Rock
DPRK PolinRider Campaign Shows Hands-on-Keyboard Supply Chain Activity
SOC Prime Bias: Critical
Deception.Pro Blog
E4del and PINHOLE Abuse FTP Banner Dead Drops for C2
SOC Prime Bias: High
RST Cloud - Threat Intelligence Solutions
Browser-in-the-Browser Phishing Delivers Rogue RMM Tools for Persistence
SOC Prime Bias: High
Huntress
