Cyber Threat Intelligence

Market Exchange bank claims join 59 alleged exposures as active WebLogic and WordPress flaws raise patching and identity risks.

GrayscaleInsight cyber threat intelligence brief for 2026-08-23: tracked incidents, threat actor activity, and external analysis.

GrayscaleInsight cyber threat intelligence brief for 2026-08-22: tracked incidents, threat actor activity, and external analysis.

GrayscaleInsight cyber threat intelligence brief for 2026-08-21: tracked incidents, threat actor activity, and external analysis.

UNC7005 and GARUDA claims coincide with 192 incidents, while CVE-2026-73570 exploitation and a Rust supply-chain attack sharpen response priorities.

220 events included 60 breach or leak claims; DarkMafiaX and BLACK HAT HACKERS FORCE appeared as CISA flagged four actively exploited flaws.

Exchange Markets claims HSBC and Manulife data sales as 53 critical exposures coincide with Medusa passing 500 victims and active Ray exploitation.

Trenggalek Cyber Army led 252 alleged events; 64 breach or leak claims hit government, telecom and healthcare as GitLab and Forminator flaws emerged.

Shadow Protocol and Qilin feature in 346 alleged incidents, including 93 exposure claims across government, education, and major brands.

X0Frankenstein, TeamPrabal and ZoneX404 drove 76 alleged exposures among 178 events, spanning banks, government and identity systems.

ShipMonk exposure affected 14,000 Trezor customers as alleged finance breaches and GeoServer exploitation shaped a 184-event CTI day.

DeepCore Network led 170 events as 67 alleged exposures hit public and financial targets while two critical CVEs drew active exploitation.

Sophia and Sophia01 claim 14 breaches, mostly in France; Lazarus exploits a Windows zero-day as 231 events include 69 breach or leak exposures.

301 events included 151 exposure claims; kyoshin33 targeted Indian defense data as Kimwolf v7 and an exploited Windows flaw raised urgency.

Across 362 events, 175 alleged exposures joined Gunra ransomware, Polish energy sabotage, and public-sector breach claims.

Disrupt0r claims OKX and Binance; Evilx targets six Syrian institutions as 90 breach and leak claims span finance, government and education.

ShinyHunt, K3LLLEAKERS and Iron Atlas appear among 56 alleged exposure events as Metabase, Rovo AI and LoadMaster flaws draw urgent action.

HELIX claims breaches at Uber Freight, Westland, Morguard. Indonesia hit by 32 events. WordPress XSS, Linux SCTP flaws patched. UNC6671 vishing expands.

Exchange Markets claims four Saudi financial-sector data sales as UNC6671 expands vishing extortion; 4,400 Rockwell PLCs remain exposed.

Dark Project led 19 events as 46 ransomware cases and 45 initial-access listings drove a 194-incident day led by US and Indonesian targets.

CL0P led 251 tracked events with 52 exposure claims, as a 440-package npm worm, Greatness phishing and SonicWall exploitation raised technical risk.

INC Ransomware exploits SonicWall SMA 1000 as alleged breaches hit defense, banking and crypto targets across a broad multi-sector campaign.

TheHatman and other actors drove 58 alleged breaches and leaks across government, hospitality, and finance, with Mexico and Pakistan heavily targeted.

Global cyberattacks spike with 45 data exposures, targeting banking, government, and healthcare sectors across 20+ countries, plus critical software flaws.

Midnight Blizzard targets hotel portals as 201 incidents include 71 breach or leak claims; Arcepah hits Mexico and Chrome fixes 1,442 flaws.

Ransomware and hacktivist groups target healthcare, government, and finance across 20+ countries; Qilin and CoupDeGrace each tied to 10 events.

177 events include 54 critical exposures, 30+ water utilities hit, and alleged breaches claimed against NYC Health + Hospitals and Spain's Guardia Civil.

AI-assisted cryptanalysis targets post-quantum and AES schemes as 30+ water plants face disruption and 75 critical exposures span key sectors.

Rogue AI agent incident, alleged data sales from CIA/DRDO, and public vBulletin exploit released. Ransomware and data breach events surge, targeting healthcare, government, and telecom sectors.

Exfilsquad claims 12 breaches, Ecuador municipal attacks add 10, and 60 breach or leak claims push government exposure to the top.