Tag: weekly threat advisory

54,763 unique indicators across 107 tracked clusters this cycle. Dominant signal: framework-C2 infrastructure surge with 25+ concentrated /24 subnet anchors. Emerging supply-chain wave — fake npm packages, fake installers, developer-ecosystem targeting. macOS malware surge across three concurrent families. Three ransomware operators active. Iranian-linked APT clusters continue. Full ATT&CK-per-tactic pressure roll-up, four production-ready Sigma rules, subnet anchors, top IOCs per type.

Weekly Threat Advisory · May 24 – 31, 2026 · 1.35M observations · 87 adversary clusters · CobaltStrike dominant · DPRK-linked activity (Kimsuky, Void Dokkaebi) · Cloud Atlas · AdaptixC2 / VShell emerging C2 frameworks · MITRE T1190 / T1105 / T1041 / T1082 pressure.

Weekly Threat Advisory | Supply Chain | INJ3CTOR3 | BadIIS | AMOS | Anatsa | SD-WAN CVE-2026-20182

Weekly Threat Advisory | DPRK | The Gentlemen Ransomware | FrostyNeighbor | FamousSparrow | CVE-2026-41940 | EtherRAT

Weekly threat intel for 04–10 May 2026: 9,366 IOCs, 114 adversaries — Mirai, Clearfake, DPRK, ScarCruft, Kimsuky, MuddyWater & more.