mitre-ta0007
108 articles with this tag
HIGH
HIGH
HIGH
HIGH
HIGH
HIGH
HIGH
MEDIUM
MEDIUM
HIGH
CRITICAL
HIGH
HIGH
HIGH
HIGH
CRITICAL
CRITICAL
HIGH
HIGH
MEDIUM
CRITICAL
HIGH
HIGH
HIGH
CRITICAL
MEDIUM
CRITICAL
CRITICAL
HIGH
HIGH
HIGH
MEDIUM
CRITICAL
HIGH
MEDIUM
HIGH
HIGH
MEDIUM
HIGH
HIGH
HIGH
HIGH
HIGH
CRITICAL
MEDIUM
HIGH
CRITICAL
HIGH
HIGH
CRITICAL
HIGH
HIGH
MEDIUM
CRITICAL
HIGH
HIGH
HIGH
HIGH
HIGH
HIGH
CRITICAL
CRITICAL
HIGH
HIGH
HIGH
HIGH
HIGH
HIGH
HIGH
HIGH
HIGH
HIGH
HIGH
HIGH
CRITICAL
HIGH
HIGH
HIGH
HIGH
HIGH
HIGH
CRITICAL
CRITICAL
HIGH
HIGH
MEDIUM
MEDIUM
MEDIUM
MEDIUM
HIGH
HIGH
MEDIUM
HIGH
MEDIUM
MEDIUM
MEDIUM
MEDIUM
MEDIUM
HIGH
MEDIUM
Tycoon2FA takedown reshapes the phishing landscape
AgentForger proves AI agents can become persistent insider threats
HOLLOWGRAPH malware turns Microsoft 365 calendars into an espionage channel
New GoSerpent Malware Targets Southeast Asian Governments and Diplomats for Espionage
Attacker Uses Suspected AI-Generated PowerShell Script to Map Active Directory
Ciblage et compromission d’entités françaises au moyen du mode opératoire d’attaque Turla (13 juillet 2026)
Targeting and Compromise of French Entities Using the Turla Intrusion Set (13 juillet 2026)
Hackers Weaponize Balochistan Police Portal in Multi-Group Espionage Campaigns
China, India-Linked Hackers Both Targeted Same Pakistani Police Force
Threat actor uses AI-generated malware in network intrusion
AI-Coded Malware | Analyzing Vibe-Coded AD Enumeration | Huntress
'BusySnake' Infostealer Slithers into Critical Infrastructure Networks
ARToken: Inside an EvilTokens affiliate panel targeting Microsoft 365
The Gentlemen are knocking: сustom backdoors and evolving tactics
Chinese Framework Powers 200,000 Scam Sites
Russian APT Deploys ‘StockStay’ Backdoor Against Ukrainian Targets
Google Details Turla's New STOCKSTAY Backdoor Used in Ukraine Espionage Attacks
StealC and Amadey: Breaking down infostealers and the cybercrime services that deliver them
StealC and Amadey: Breaking down infostealers and the cybercrime services that deliver them
FishMonger’s arsenal upgraded: SprySOCKS for Windows
China-Linked SprySOCKS Backdoor Expands to Windows with Driver-Based Stealth
Chinese Hackers Target Medical, Military, and AI Research in North America
Russian national charged in connection with Void Blizzard cyberespionage campaign
Russian national charged in connection with Void Blizzard espionage campaign
OceanLotus Hits Vietnam Investors With SPECTRALVIPER in FireAnt Attack
JDY botnet expands, enabling rapid exploitation of disclosed vulnerabilities
China-linked JDY botnet expands targeting of U.S. military networks
Russian Attackers Weaponize WinRAR Flaw Against Ukrainian Orgs
New Shai-Hulud attack trojanizes 19 science-focused PyPI packages
AI accelerates development of ransomware toolkit with EDR evasion capabilities
Four coordinated npm supply chain campaigns active in May–June 2026 — TTPs, IOCs, and detection notes
A week after Dutch FIOD seized 800+ servers, the hosting network's ASN (AS209847) is still scanning at its normal daily rate
Supply Chain Compromises Impact Nx Console and GitHub Repositories
FBI warns US-based law firms to be on the lookout for cybercrime group that steals data in person
CrowdStrike disrupts Glassworm botnet that preyed on open-source supply chain
MuddyWater Uses DLL Side-Loading in Espionage Campaign Targeting 9 Countries
Tracking Iranian APT Screening Serpens’ 2026 Espionage Campaigns
Paved With Intent: ROADtools and Nation-State Tactics in the Cloud
Storm-2949 actor targets Microsoft 365 and Azure environments
Malaysian government-linked campaign used hidden infrastructure for years
Russian hackers turn Kazuar backdoor into modular P2P botnet
PCPJack Campaign Boots TeamPCP Off Compromised Machines
Small Defense Firms Lack Network Data to Stop Nation-State Hackers, Analyst Says
Weaver E-cology critical bug exploited in attacks since March
Alleged Chinese hacker extradited to US over cyberattacks targeting COVID-19 research
New BlackFile extortion group linked to surge of vishing attacks
Over 10,000 Zimbra servers vulnerable to ongoing XSS attacks
AI-driven attacks target governments, cloud agents, supply chains
North Korean Hackers Use AppleScript, ClickFix in Fresh macOS Attacks
Mustang Panda’s New LOTUSLITE Variant Targets India Banks, South Korea Policy Circles
Microsoft Teams, Quick Assist weaponized in helpdesk spoofing intrusions
‘Scattered Spider’ Member ‘Tylerb’ Pleads Guilty
SOHO router compromise leads to DNS hijacking and adversary-in-the-middle attacks
UAC-0247 Targets Ukrainian Clinics and Government in Data-Theft Malware Campaign
Renovate & Dependabot: The New Malware Delivery System
New ‘LucidRook’ malware used in targeted attacks on NGOs, universities
Hack-for-hire spyware campaign targets journalists in Middle East, North Africa
Feds quash widespread Russia-backed espionage network spanning 18,000 devices
Inside an AI‑enabled device code phishing campaign
European Commission Confirms Data Breach Linked to Trivy Supply Chain Attack
China-Linked TA416 Targets European Governments with PlugX and OAuth-Based Phishing
CERT-EU blames Trivy supply chain attack for Europa.eu data breach
European-Chinese geopolitical issues drive renewed cyberespionage campaign
TeamPCP Breaches Cloud, SaaS Instances With Stolen Credentials
TeamPCP Moves From OSS to AWS Environments
China-linked Red Menshen using BPFdoor kernel backdoor in telecom networks
PyPI warns developers after LiteLLM malware found stealing cloud and CI/CD credentials
Tycoon2FA phishing platform returns after recent police disruption
FBI: Iranian hackers targeting opponents with Telegram malware
Tycoon 2FA Fully Operational Despite Law Enforcement Takedown
China-Nexus Hackers Skulk in Southeast Asian Military Orgs for Years
Cybercrime has skyrocketed 245% since the start of the Iran war
Telus Digital hit with massive data breach
Salesforce issues new security alert tied to third customer attack spree in six months
Five Malicious Rust Crates and AI Bot Exploit CI/CD Pipelines to Steal Developer Secrets
Russian Threat Actor Sednit Resurfaces With Sophisticated Toolkit
Mobile spyware campaign impersonates Israel's Red Alert rocket warning system
Termite ransomware breaches linked to ClickFix CastleRAT attacks
Google says spyware makers and China-linked groups dominated zero-day attacks last year
State-affiliated hackers set up for critical OT attacks that operators may not detect
Global Takedown Neutralizes Tycoon2FA Phishing Service
Fake Laravel Packages on Packagist Deploy RAT on Windows, macOS, and Linux
they stole Claude’s brain 16 million times
NCSC-2026-0068 [1.00] [M/H] Kwetsbaarheden verholpen in Splunk Enterprise en Splunk Cloud Platform
Amazon: AI-assisted hacker breached 600 FortiGate firewalls in 5 weeks
Your Samsung Weather App Is a Fingerprint: How saved locations create a persistent cross-session tracking identifier
Dynamic Objects in Active Directory: The Stealthy Threat
What is UNC3886, the group that attacked Singapore’s telcos
VoidLink Framework Enables On-Demand Tool Generation with Windows Plugin Support - Dataproof Communications
VoidLink: A Cloud-Native Linux Framework Built for Stealth and Scale | Hive Pro
VoidLink: The Cloud-Native Malware Framework
New threat actor UAT-9921 deploys VoidLink against enterprise sectors
Notepad++ supply chain compromise: Trojanized updates used in suspected nation-state attack | ThreatLocker Blog
UAT-9921 Deploys VoidLink Malware to Target Technology and Financial Sectors
New threat actor, UAT-9921, leverages VoidLink framework in campaigns
Adbleed: partially de-anonymizing VPN users with adblock filter lists
Singapore spent 11 months booting China-linked snoops out of telco networks
[NEU] [mittel] IBM DB2: Mehrere Schwachstellen
[UPDATE] [hoch] OpenVPN: Mehrere Schwachstellen
HoneyMyte updates CoolClient and deploys multiple stealers in recent campaigns