Browse public community intelligence reports, source analysis, and threat research.
4 intel reports
Adversaries are exploiting CVE-2026-84869 and hijacked ScreenConnect sessions to deploy a multi-stage VBScript chain that enables worm-like propagation, credential theft, and cryptomining.
Unknown threat actors compromised ConnectWise Cloud Backup application identities to gain unauthorized access to Microsoft 365 tenants across multiple sectors.
China-nexus actors UAT-11587 and UNC6384 are targeting government, diplomatic, and policy organizations across Asia and Europe using the novel Rust-based Antino backdoor and PlugX RAT via complex multi-stage infection chains.
Russian-branded ClickFix campaigns are compromising Ukrainian websites to deliver the Psychedelic infostealer and persistent remote access tools using fake CAPTCHA lures.
