Threat Reports
SOC
Reports Today
128
↑ 18% vs yesterday
Critical Threats
17
↑ 6 last 24h
New IOCs
3,842
↑ 12.4% detected
Active Campaigns
31
8 targeting enterprise
CVE Alerts
64
11 actively exploited
Threat Activity — 24 Hours
Intelligence events received across monitored feeds
HIGH
Elevated Global Threat Level
Increased ransomware and credential-theft activity
00:00
04:00
08:00
12:00
16:00
20:00
24:00
Threat Distribution
Reports classified by severity
128
REPORTS
Critical
17
High
29
Medium
32
Low
25
Informational
25
Active Threat Campaigns
Campaigns currently monitored by intelligence analysts
BlackLock Ransomware Expansion
Credential Harvesting Infrastructure
Remote Access Trojan Campaign
Supply Chain Dependency Attack
Latest Intelligence Reports
Analyst-reviewed intelligence received today
| Report | Severity | Source | Published | Confidence | Status | |
|---|---|---|---|---|---|---|
|
Ransomware Infrastructure Expansion
RTI-2026-0904-001
|
Critical | Internal CTI | 13:32 | 96% | Reviewed | |
|
Microsoft 365 Phishing Infrastructure
RTI-2026-0904-002
|
High | External Feed | 12:48 | 91% | Reviewed | |
|
Actively Exploited Authentication Vulnerability
CVE-2026-48192
|
Critical | Vulnerability Intel | 11:27 | 98% | Action Required | |
|
Android Spyware Distribution Campaign
Mobile Threat Research
|
Medium | Research Lab | 10:54 | 87% | Monitoring | |
|
Cloud Credential Theft Operation
RTI-2026-0904-005
|
High | Cloud Intelligence | 09:36 | 93% | Monitoring |
Priority Indicators
Recently observed indicators requiring review
Domain
secure-auth-update[.]net
IPv4
185.XX.XX.91
SHA256
8c7d...9a41
URL
hxxps://cdn-update[.]example/path
MITRE ATT&CK Techniques
Techniques observed in today's reporting
T1566
Phishing
42
T1486
Data Encrypted for Impact
31
T1059
Command & Scripting
27
T1078
Valid Accounts
21
T1219
Remote Access Software
16
Threat Report
Threat Intelligence
Intelligence Summary
