Before the vulnerability record
Track reported campaigns, active threat actors and targeted sectors, including activity described before a CVE is named.
Updated 21 Aug 2026 · 17:06 UTC
Pre-CVE means a trusted source has described malicious activity or a previously unknown weakness without naming a CVE. ATT&CK mappings marked Explicit were stated by the source. Inferred mappings are conservative interpretations of source wording and must be verified against the original report.
Target-sector mentions · 30 days
Counts reflect explicit sector mentions in collected reports. One report may mention several sectors, so this is a comparison of evidence coverage rather than a share of all attacks.
Retail is included. A zero means no qualifying report in the current 30-day evidence window named the sector, not that retail faces no threat.
5 of 5 reports shown
Key Points Introduction Since early 2026, Check Point Research has tracked a wave of the Operation Dream Job campaign. This wave primarily targeted the defense sector worldwide, with a particular emphasis on companies operating in the aerospace and aviation industries.…
Threat IntelligenceGoing with the Flow(s): Distinct Clusters Target Individuals of Interest to RussiaAugust 20, 2026Google Threat Intelligence Group Google Threat IntelligenceVisibility and context on the threats that matter most.Contact Us & Get a Demo Written by: Gabby Roncone,…
Update (July 30): A table listing the new names of select prominent threat actors was appended to this post. Introduction Today, Google Threat Intelligence Group (GTIG) will begin rolling out a unified naming schema for tracking threat actors.…
Threat IntelligenceStaying Ahead of Adversarial AI Through Agentic Source Code ReviewAugust 18, 2026Google Threat Intelligence Group Google Threat IntelligenceVisibility and context on the threats that matter most.Contact Us & Get a Demo Written by: Alex Tselevich, Michael Maturi…
Threat Research CenterThreat ResearchMalware Malware Identity Abuse Through Trusted Communication Channels 12 min read Related ProductsCortexCortex XDRCortex XSIAMIdiraUnit 42 Incident Response By:Bill Batchelor Published:August 20, 2026 Categories:MalwareThreat Research Tags:AuthenticationIdentity theftMalwareMFARemote access softwareSocial engineering Share Executive Summary Identity has…
Provenance and freshness
The dashboard currently uses freely available government, vendor and vendor-research reporting. A source problem is shown here instead of silently hiding stale data.
Last successful collection 21 Aug 2026 · 16:33 UTC
Last successful collection 21 Aug 2026 · 16:33 UTC
Last successful collection 21 Aug 2026 · 16:33 UTC
Last successful collection 21 Aug 2026 · 16:33 UTC
Last successful collection 21 Aug 2026 · 16:33 UTC
Last successful collection 21 Aug 2026 · 16:33 UTC
Last successful collection 21 Aug 2026 · 16:33 UTC
Last successful collection 21 Aug 2026 · 16:33 UTC
Last successful collection 21 Aug 2026 · 16:33 UTC
Last successful collection 21 Aug 2026 · 16:33 UTC
Last successful collection 21 Aug 2026 · 16:33 UTC
Last successful collection 21 Aug 2026 · 16:33 UTC
