Active Threats
Explore the latest active threats being deployed by malicious actors as of 2026. Each report may offer attack flows, actionable detection rules, and simulation instructions to help SOC teams stay ahead of evolving adversary techniques.
DragonForce Ransomware: Technical Analysis of Its Attack Methods
SOC Prime Bias: Critical
Seqrite Labs
TerminalFix Campaign Enables Network Pivoting Through Compromised Hosts
SOC Prime Bias: High
extrahop.com
Warlock Ransomware Attacks Critical Water and Telecom Infrastructure
SOC Prime Bias: Critical
security.com
ScreenConnect Client Misused to Enable Unauthorized Remote Access
SOC Prime Bias: Medium
SANS Internet Storm Center
CloudSyncD macOS Malware Conceals Phished Credentials with Zero-Width Unicode
SOC Prime Bias: High
jamfsoftware
Fake Quote Request Emails Used in Malware Phishing Attacks
SOC Prime Bias: High
ASEC
2CLoader: A New Malware Loader Delivering Vidar and Remus
SOC Prime Bias: High
zscaler.com
CVE-2026-82078 and CVE-2026-81578 Exploited in PaperCut MF Zero-Day Attacks
SOC Prime Bias: Critical
eSentire
South Korea APT Threat Report: August 2026 Attack Trends
SOC Prime Bias: Critical
ASEC
Citrix NetScaler PreAuth Command Injection CVE-2026-88771
SOC Prime Bias: Critical
watchTowr Labs
