Click here to download all references as Bib-File.•
| 2026-10-29
⋅
The Hacker News
⋅
Hackers Exploited Cisco SD-WAN Flaw to Plant Malware Built to Steal Encryption Keys |
| 2026-10-28
⋅
Cisco Talos
⋅
Inside KeyDrift: Analyzing historical UAT-11473 activity on Cisco SD-WAN |
| 2026-10-14
⋅
Cisco Talos
⋅
Break the silence: Kazakhstan-nexus UAT-6275 targets CIS government organizations |
| 2026-09-22
⋅
Cisco Talos
⋅
The Closed Quorum: Inside the first reported autonomous AI C2 implant CLOSEDQUORUM |
| 2026-08-20
⋅
Cisco Talos
⋅
UAT-10147 deploys SPECTRE: A cross-platform implant with Linux rootkit and BYOVD capabilities Meterpreter Havoc IISpy JuicyPotato Meterpreter Quasar RAT |
| 2026-08-20
⋅
Cisco Talos
⋅
UAT-10147: Chinese-speaking adversary integrates agentic AI into post-compromise operations Meterpreter IISpy Meterpreter Quasar RAT |
| 2026-07-16
⋅
Cisco Talos
⋅
UAT-11795 deploys novel Starland RAT and bespoke WLDR C2 implant in financially motivated campaign CASTLESTEALER Remcos UAT-11795 |
| 2026-07-14
⋅
PICUS Security
⋅
FSB Center 16: How Russian hackers exploit routers via SNMP and Cisco Smart Install |
| 2026-07-07
⋅
Cisco Talos
⋅
UAT-7810 continues building ORB networks using new malware DOGLEASH LONGLEASH JARLEASH UAT-7810 |
| 2026-05-05
⋅
Cisco Talos
⋅
UAT-8302 and its box full of malware SNOWLIGHT DracuLoader FINALDRAFT SNAPPYBEE STOWAWAY VShell UAT-8302 |
| 2026-04-02
⋅
Cisco Talos
⋅
UAT-10608: Inside a large-scale automated credential harvesting operation targeting web applications UAT-10608 |
| 2026-03-05
⋅
Cisco Talos
⋅
UAT-9244 targets South American telecommunication providers with three new malware implants BruteEntry PeerTime TernDoor UAT-9244 |
| 2026-03-02
⋅
Talos
⋅
Update, March 13: Talos on the developing situation in the Middle East Tsundere APTIran |
| 2026-02-26
⋅
Cisco Talos
⋅
New Dohdoor malware campaign targets education and health care DohDoor |
| 2026-02-25
⋅
Cisco Talos
⋅
Active exploitation of Cisco Catalyst SD-WAN by UAT-8616 UAT-8616 |
| 2026-02-10
⋅
Cisco Talos
⋅
New threat actor, UAT-9921, leverages VoidLink framework in campaigns VoidLink UAT-9921 |
| 2026-01-29
⋅
Cisco Talos
⋅
Dissecting UAT-8099: New persistence mechanisms and regional focus UAT-8099 |
| 2026-01-15
⋅
Cisco Talos
⋅
UAT-8837 targets critical infrastructure sectors in North America Earthworm Rubeus SharpHound SharpWMI UAT-8837 |
| 2026-01-08
⋅
Cisco Talos
⋅
UAT-7290 targets high value telecommunications infrastructure in South Asia DriveSwitch RushDrop SilentRaid DAGGER PANDA |
| 2025-12-23
⋅
secpod
⋅
Zero-Day Crisis: CVE-2025-20393 Unpatched on Cisco Email Gateways, Exploited by China-Linked Hackers UAT-9686 |