Four China-Aligned Threat Actors Used BlueMoon Exploits to Compromise Multiple Organisations in the United States and Southeast Asia Between 28 August and September 2026

INC Ransomware Group Exploited Zero-Day Vulnerability in Remote Access Gateway SonicWall SMA1000 Affecting Private and Governmental Organizations in Multiple Countries since 22 June 2026

Suspected Affiliate of The Gentlemen Ransomware-as-a-Service Operation Used Claude Sonnet 4.6 to Breach Organisations Across Africa, Oceania, Asia and North America Around June 2026

Unknown Threat Actor Exploited Zero-day Vulnerability in Web Hosting Software cPanel to Target Government and Military Organizations in Southeast Asia and Worldwide since May 2026

Unknown Threat Actors Compromised Daemon Tools Installers In Supply-Chain Attack On Users In Over 100 Countries On 8 April 2026

Iran-Nexus Threat Actor Mirage Kitten Used Spear-Phishing to Breach Critical Infrastructure In The Middle East, Africa, and Europe From April 2026