Tag: MITRE ATTACK

54,763 unique indicators across 107 tracked clusters this cycle. Dominant signal: framework-C2 infrastructure surge with 25+ concentrated /24 subnet anchors. Emerging supply-chain wave — fake npm packages, fake installers, developer-ecosystem targeting. macOS malware surge across three concurrent families. Three ransomware operators active. Iranian-linked APT clusters continue. Full ATT&CK-per-tactic pressure roll-up, four production-ready Sigma rules, subnet anchors, top IOCs per type.

Weekly Threat Advisory · May 24 – 31, 2026 · 1.35M observations · 87 adversary clusters · CobaltStrike dominant · DPRK-linked activity (Kimsuky, Void Dokkaebi) · Cloud Atlas · AdaptixC2 / VShell emerging C2 frameworks · MITRE T1190 / T1105 / T1041 / T1082 pressure.

Weekly Threat Advisory | Supply Chain | INJ3CTOR3 | BadIIS | AMOS | Anatsa | SD-WAN CVE-2026-20182