Curated Cyber Threat Intelligence
Threat Feed
Daily intelligence on vulnerabilities, threat actors and geopolitical context — distilled from primary sources.
scheduleUpdated 2026-10-28 · 04:17 UTC
articleTotal: 1890 reports
Filtered Reports
3 / 3 results
highperson_alertThreat Actorperson_alertThreat Actor
UNC6671 Conducts Vishing Attacks to Steal SaaS Credentials
UNC6671 is a financially motivated data extortion group that emerged in early January 2026. The actor operates multiple extortion brands including Redact, Pink (CL-CRI-1147), Helix, and Falcon (CL-CRI-1182), and previously operated under the BlackFil…
The Hacker News7 Aug · 16:16 UTC
highperson_alertThreat Actorperson_alertThreat Actor
UNC3753 Conducts Data Theft Extortion via Vishing and Physical Intrusion
UNC3753 is a financially motivated threat actor attributed by Mandiant. The group conducted a data theft extortion campaign targeting dozens of organizations in the United States between January and May 2026.
The Hacker News8 Jun · 05:39 UTC
highperson_alertThreat Actorperson_alertThreat Actor
Silent Ransom Group targets U.S. legal sector via fake IT support
Silent Ransom Group is a threat actor conducting social engineering-driven intrusions against U.S. legal services and professional services organizations.
BleepingComputer7 Jun · 12:09 UTC