Active Threats
Explore the latest active threats being deployed by malicious actors as of Q4 2025. Each report may offer attack flows, actionable detection rules, and simulation instructions to help SOC teams stay ahead of evolving adversary techniques.
Massive PyPI Supply Chain Attack Harvests Cloud Credentials via Python Startup Hooks
SOC Prime Bias: Critical
Orca Security
Technical Analysis of Suspicious Emails Targeting the Hotel Industry
SOC Prime Bias: High
ITOCHU Cyber & Intelligence Inc.
AsyncRAT Delivered Through AI-Themed Threat Campaigns
SOC Prime Bias: High
Fortinet Blog
RoguePlanet Exploits a Windows Zero-Day Through Defender’s Quarantine Pipeline
SOC Prime Bias: Critical
cyderes.com
Analysis of Suspicious Emails Targeting the Hotel Industry
SOC Prime Bias: Medium
ITOCHU Cyber & Intelligence Inc.
Khmer Shadow Targets Cambodian Government Entities in Espionage Campaign
SOC Prime Bias: High
Acronis
JDY Botnet Growth Enables Faster Exploitation of IoT and SOHO Flaws
SOC Prime Bias: Critical
lumen.com
Technical Analysis of MLTBackdoor
SOC Prime Bias: High
zscaler.com
PoisonX Driver-Based Attack Campaign Targets Japanese Organizations
SOC Prime Bias: Critical
株式会社ラック
From Fake Amazon Security Alert to HarborWatch Agent Delivery
SOC Prime Bias: Medium
cofense.com
