[CLSTR]
API
< Back to situations

[ORGANIZATION]

Mandiant

Featured in 24 tracked stories · first seen

Situations

[ACTIVE] [TECHNOLOGY] [DE] [ES] [CH]

AI phishing evolution and AfD data breach fallout

36 clusters · 228 sources · last updated

Latest: AfD email leak reveals potential links to 2017 campaign funding

The cyber-threat landscape is undergoing a rapid transformation driven by ‘phishing 3.0’, where AI agents automate research and adaptation to conduct multi-channel attacks using deepfakes, manipulated voices, and videos.

[ACTIVE] [TECHNOLOGY] [US] [ES]

CISA vulnerability exploitation and patching directives

16 clusters · 57 sources · last updated

Latest: Cisco and Pulse Secure VPNs face active zero-day exploitation

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has continued issuing directives to federal agencies regarding multiple actively exploited software vulnerabilities. Following the September 9, 2026, addit

[QUIET] [TECHNOLOGY] [KP] [US]

Drift Protocol exploit fund laundering

2 clusters · 9 sources · last updated

Latest: Drift Protocol suspected exploiter moves $61.6M in ETH to Tornado Cash

Following an April exploit of the Solana-based perpetuals protocol Drift Protocol, which resulted in a total loss of approximately $296 million, funds linked to the incident have recently been moved to obscure their dest

[QUIET] [TECHNOLOGY] [DE]

Exploitation of remote support and network security software

3 clusters · 14 sources · last updated

Latest: Cisco and BeyondTrust patch critical security vulnerabilities

Security researchers have identified high-impact exploitation campaigns targeting critical software infrastructure, specifically focusing on remote support and network security tools. A zero-day vulnerability (CVE-2026-

[QUIET] [TECHNOLOGY] [AU] [BR] [HK]

AOMEI Backupper supply chain attack

2 clusters · 3 sources · last updated

Latest: AOMEI Backupper software compromised in supply chain attack

Between April and July 2026, a threat actor tracked as UNC7017 executed a supply chain campaign targeting AOMEI Backupper and AnyViewer software. Attackers utilized brief tampering windows of only five to ten minutes to

[QUIET] [TECHNOLOGY] [US] [NL] [CA]

ShinyHunters and Clop cybercrime conflict

13 clusters · 272 sources · last updated

Latest: FBI arrests Canadian negotiator in ShinyHunters hacking crackdown

A public confrontation has emerged between cybercrime syndicates ShinyHunters and Clop. In late September 2026, ShinyHunters reportedly hijacked Clop’s dark web leak site by exploiting an unauthenticated file upload vuln

[QUIET] [TECHNOLOGY] [US] [DE] [FI]

NetScaler product security vulnerabilities

7 clusters · 44 sources · last updated

Latest: Citrix patches critical NetScaler vulnerability

Cloud Software Group has released emergency security updates to address several vulnerabilities in NetScaler ADC and NetScaler Gateway products. Among the initial critical zero-day vulnerabilities were CVE-2026-88771, a

Also covered in