mitre-ta0007
75 articles with this tag
HIGH
MEDIUM
HIGH
HIGH
MEDIUM
HIGH
HIGH
HIGH
HIGH
HIGH
CRITICAL
MEDIUM
HIGH
CRITICAL
HIGH
HIGH
CRITICAL
HIGH
HIGH
MEDIUM
CRITICAL
HIGH
HIGH
HIGH
HIGH
HIGH
HIGH
CRITICAL
CRITICAL
HIGH
HIGH
HIGH
HIGH
HIGH
HIGH
HIGH
HIGH
HIGH
HIGH
HIGH
HIGH
CRITICAL
HIGH
HIGH
HIGH
HIGH
HIGH
HIGH
CRITICAL
CRITICAL
HIGH
HIGH
MEDIUM
MEDIUM
MEDIUM
MEDIUM
HIGH
HIGH
MEDIUM
HIGH
MEDIUM
MEDIUM
MEDIUM
MEDIUM
MEDIUM
MEDIUM
MEDIUM
HIGH
HIGH
HIGH
HIGH
CRITICAL
CRITICAL
HIGH
HIGH
FBI warns US-based law firms to be on the lookout for cybercrime group that steals data in person
CrowdStrike disrupts Glassworm botnet that preyed on open-source supply chain
MuddyWater Uses DLL Side-Loading in Espionage Campaign Targeting 9 Countries
Tracking Iranian APT Screening Serpens’ 2026 Espionage Campaigns
Paved With Intent: ROADtools and Nation-State Tactics in the Cloud
Storm-2949 actor targets Microsoft 365 and Azure environments
Malaysian government-linked campaign used hidden infrastructure for years
Russian hackers turn Kazuar backdoor into modular P2P botnet
PCPJack Campaign Boots TeamPCP Off Compromised Machines
Small Defense Firms Lack Network Data to Stop Nation-State Hackers, Analyst Says
Weaver E-cology critical bug exploited in attacks since March
Alleged Chinese hacker extradited to US over cyberattacks targeting COVID-19 research
New BlackFile extortion group linked to surge of vishing attacks
Over 10,000 Zimbra servers vulnerable to ongoing XSS attacks
AI-driven attacks target governments, cloud agents, supply chains
North Korean Hackers Use AppleScript, ClickFix in Fresh macOS Attacks
Mustang Panda’s New LOTUSLITE Variant Targets India Banks, South Korea Policy Circles
Microsoft Teams, Quick Assist weaponized in helpdesk spoofing intrusions
‘Scattered Spider’ Member ‘Tylerb’ Pleads Guilty
SOHO router compromise leads to DNS hijacking and adversary-in-the-middle attacks
UAC-0247 Targets Ukrainian Clinics and Government in Data-Theft Malware Campaign
Renovate & Dependabot: The New Malware Delivery System
New ‘LucidRook’ malware used in targeted attacks on NGOs, universities
Hack-for-hire spyware campaign targets journalists in Middle East, North Africa
Feds quash widespread Russia-backed espionage network spanning 18,000 devices
Inside an AI‑enabled device code phishing campaign
European Commission Confirms Data Breach Linked to Trivy Supply Chain Attack
China-Linked TA416 Targets European Governments with PlugX and OAuth-Based Phishing
CERT-EU blames Trivy supply chain attack for Europa.eu data breach
European-Chinese geopolitical issues drive renewed cyberespionage campaign
TeamPCP Breaches Cloud, SaaS Instances With Stolen Credentials
TeamPCP Moves From OSS to AWS Environments
China-linked Red Menshen using BPFdoor kernel backdoor in telecom networks
PyPI warns developers after LiteLLM malware found stealing cloud and CI/CD credentials
Tycoon2FA phishing platform returns after recent police disruption
FBI: Iranian hackers targeting opponents with Telegram malware
Tycoon 2FA Fully Operational Despite Law Enforcement Takedown
China-Nexus Hackers Skulk in Southeast Asian Military Orgs for Years
Cybercrime has skyrocketed 245% since the start of the Iran war
Telus Digital hit with massive data breach
Salesforce issues new security alert tied to third customer attack spree in six months
Five Malicious Rust Crates and AI Bot Exploit CI/CD Pipelines to Steal Developer Secrets
Russian Threat Actor Sednit Resurfaces With Sophisticated Toolkit
Mobile spyware campaign impersonates Israel's Red Alert rocket warning system
Termite ransomware breaches linked to ClickFix CastleRAT attacks
Google says spyware makers and China-linked groups dominated zero-day attacks last year
State-affiliated hackers set up for critical OT attacks that operators may not detect
Global Takedown Neutralizes Tycoon2FA Phishing Service
Fake Laravel Packages on Packagist Deploy RAT on Windows, macOS, and Linux
they stole Claude’s brain 16 million times
NCSC-2026-0068 [1.00] [M/H] Kwetsbaarheden verholpen in Splunk Enterprise en Splunk Cloud Platform
Amazon: AI-assisted hacker breached 600 FortiGate firewalls in 5 weeks
Your Samsung Weather App Is a Fingerprint: How saved locations create a persistent cross-session tracking identifier
Dynamic Objects in Active Directory: The Stealthy Threat
What is UNC3886, the group that attacked Singapore’s telcos
VoidLink Framework Enables On-Demand Tool Generation with Windows Plugin Support - Dataproof Communications
VoidLink: A Cloud-Native Linux Framework Built for Stealth and Scale | Hive Pro
VoidLink: The Cloud-Native Malware Framework
New threat actor UAT-9921 deploys VoidLink against enterprise sectors
Notepad++ supply chain compromise: Trojanized updates used in suspected nation-state attack | ThreatLocker Blog
UAT-9921 Deploys VoidLink Malware to Target Technology and Financial Sectors
New threat actor, UAT-9921, leverages VoidLink framework in campaigns
Adbleed: partially de-anonymizing VPN users with adblock filter lists
Singapore spent 11 months booting China-linked snoops out of telco networks
[NEU] [mittel] IBM DB2: Mehrere Schwachstellen
The (!FALSE) Pattern: How SOAPHound Queries Disappear Before They Hit Your Logs
HoneyMyte updates CoolClient and deploys multiple stealers in recent campaigns
[UPDATE] [hoch] OpenVPN: Mehrere Schwachstellen
Asian State-Backed Group TGR-STA-1030 Breaches 70 Government, Infrastructure Entities
New APT group breached gov and critical infrastructure orgs in 37 countries
AI-Enabled Voice and Virtual Meeting Fraud Surges 1000%+
UAT-8837 Critical Infrastructure Attack
Zimbra Collaboration Local File Inclusion
Zimbra Collaboration Local File Inclusion
AppLocker Rules Abuse