Active Threats
Explore the latest active threats being deployed by malicious actors as of 2026. Each report may offer attack flows, actionable detection rules, and simulation instructions to help SOC teams stay ahead of evolving adversary techniques.
INC Ransomware Explained: Tactics, Targets, and Impact
SOC Prime Bias: Critical
picussecurity.com
MS SQL Server Intrusion Uses GoToHTTP and SoftEther VPN for Remote Access
SOC Prime Bias: High
ASEC
MedusaHVNC Steals Live Windows Sessions Through a Hidden Desktop
SOC Prime Bias: High
BlackFog
Operation BlueDash: Multi-RMM Workplace Phishing By ZeroBEC Team
SOC Prime Bias: High
ZeroBEC
Vidar Malware Explained: Inside the Multithreaded Windows Stealer
SOC Prime Bias: High
picussecurity.com
New Castle Campaigns Reveal Evolving Tooling and NeedleStealer Ties
SOC Prime Bias: High
Arctic Wolf
Helpdesk Hijackers Use Teams Vishing to Deliver GoGRPC Backdoor
SOC Prime Bias: High
zscaler.com
SourTrade Campaign Delivers Browser-Assembled Malware
SOC Prime Bias: High
confiant.com
Certighost – Active Directory Certificate Services (ADCS) vulnerability (CVE-2026-54121)
SOC Prime Bias: Critical
GitHub
Q2 2026 Email Threat Landscape: Emerging Trends and Tactics
SOC Prime Bias: High
Microsoft Security Blog
