Active Threats
Explore the latest active threats being deployed by malicious actors as of 2026. Each report may offer attack flows, actionable detection rules, and simulation instructions to help SOC teams stay ahead of evolving adversary techniques.
CVE-2026-0257 Exploitation and the Path to Qilin Ransomware
SOC Prime Bias: Critical
Arctic Wolf
Fake Coding Interviews Used in a New North Korean Credential Theft Campaign
SOC Prime Bias: Critical
elastic.co
ChainVeil Returns to Target the Vite Ecosystem
SOC Prime Bias: Critical
Checkmarx
Behind the Refund: From GST Phishing to Remcos RAT Through a Multi-Stage .NET Infection Chain
SOC Prime Bias: High
Seqrite Labs
Inside TAG-150’s Evolving Tradecraft with DinDoor, DenoRAT, and NightshadeC2
SOC Prime Bias: High
eSentire
ACR Stealer: Two Observed Intrusion Chains During Increased Threat Activity
SOC Prime Bias: High
Microsoft Security Blog
LABUBARAT: Rust-Based RAT Posing as NVIDIA Software
SOC Prime Bias: High
Blackpoint Cyber
SharpViewStateKing and the Anatomy of a Stealthy Implant Framework
SOC Prime Bias: Critical
Canadian Centre for Cyber Security
Six Minutes to Compromise: AI-Built C2 Botnet Deployed by Patriot Bait
SOC Prime Bias: High
Trend Micro
Primary Compromise Vectors Used by UAC-0145 as of July 2026
SOC Prime Bias: Critical
cert.gov.ua
