Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2026-10-29 ⋅ The Hacker News ⋅ Swati Khandelwal
Hackers Exploited Cisco SD-WAN Flaw to Plant Malware Built to Steal Encryption Keys
2026-10-28 ⋅ Cisco Talos ⋅ Cisco Talos
Inside KeyDrift: Analyzing historical UAT-11473 activity on Cisco SD-WAN
2026-10-14 ⋅ Cisco Talos ⋅ Ashley Shen
Break the silence: Kazakhstan-nexus UAT-6275 targets CIS government organizations
2026-09-22 ⋅ Cisco Talos ⋅ Ryan Fetterman
The Closed Quorum: Inside the first reported autonomous AI C2 implant
CLOSEDQUORUM
2026-08-20 ⋅ Cisco Talos ⋅ Joey Chen
UAT-10147 deploys SPECTRE: A cross-platform implant with Linux rootkit and BYOVD capabilities
Meterpreter Havoc IISpy JuicyPotato Meterpreter Quasar RAT
2026-08-20 ⋅ Cisco Talos ⋅ Joey Chen
UAT-10147: Chinese-speaking adversary integrates agentic AI into post-compromise operations
Meterpreter IISpy Meterpreter Quasar RAT
2026-07-16 ⋅ Cisco Talos ⋅ Alex Karkins, Chetan Raghuprasad
UAT-11795 deploys novel Starland RAT and bespoke WLDR C2 implant in financially motivated campaign
CASTLESTEALER Remcos UAT-11795
2026-07-14 ⋅ PICUS Security ⋅ Sıla Özeren Hacıoğlu
FSB Center 16: How Russian hackers exploit routers via SNMP and Cisco Smart Install
2026-07-07 ⋅ Cisco Talos ⋅ Asheer Malhotra, Brandon White, Jungsoo An, Vanja Svajcer
UAT-7810 continues building ORB networks using new malware
DOGLEASH LONGLEASH JARLEASH UAT-7810
2026-05-05 ⋅ ANY.RUN ⋅ ANY.RUN
New Phishing Campaign Targets US with Credential Theft: What CISOs Need to Know
2026-05-05 ⋅ Cisco Talos ⋅ Asheer Malhotra, Brandon White, Jungsoo An
UAT-8302 and its box full of malware
SNOWLIGHT DracuLoader FINALDRAFT SNAPPYBEE STOWAWAY VShell UAT-8302
2026-04-23 ⋅ Sentinel LABS ⋅ Juan Andrés Guerrero-Saade, Vitaly Kamluk
fast16 | Mystery ShadowBrokers Reference Reveals High-Precision Software Sabotage 5 Years Before Stuxnet
fast16
2026-04-07 ⋅ CISA ⋅ CISA
AA26-097A: Iranian-Affiliated Cyber Actors Exploit Programmable Logic Controllers Across US Critical Infrastructure
Cyber Av3ngers
2026-04-07 ⋅ IC3 ⋅ CISA, CNMF, Department of Energy (DOE), EPA, FBI, NSA
AA26-097A: Iranian-Affiliated Cyber Actors Exploit Programmable Logic Controllers Across US Critical Infrastructure
2026-04-03 ⋅ Trend Micro ⋅ Jacob Santos, Jeffrey Francis Bonaobra, Sophia Nilette Robles
Weaponizing Trust Signals: Claude Code Lures and GitHub Release Payloads
GhostSocks Vidar
2026-04-02 ⋅ Cisco Talos ⋅ Asheer Malhotra, Brandon White
UAT-10608: Inside a large-scale automated credential harvesting operation targeting web applications
UAT-10608
2026-03-05 ⋅ Cisco Talos ⋅ Asheer Malhotra, Brandon White
UAT-9244 targets South American telecommunication providers with three new malware implants
BruteEntry PeerTime TernDoor UAT-9244
2026-03-02 ⋅ Talos ⋅ Cisco Talos
Update, March 13: Talos on the developing situation in the Middle East
Tsundere APTIran
2026-02-26 ⋅ Cisco Talos ⋅ Alex Karkins, Chetan Raghuprasad
New Dohdoor malware campaign targets education and health care
DohDoor
2026-02-25 ⋅ Cisco Talos ⋅ Cisco Talos
Active exploitation of Cisco Catalyst SD-WAN by UAT-8616
UAT-8616