Construction

Reported Context (180)

According to Cato, healthcare organizations were targeted the most, followed by technology and security services, professional services, automotive, education and non-profit, and manufacturing, construction, and retail. PHP2Shell Exploitation Roots Palo Alto Firewalls; No WordPress Compromises Reported
receive by far the most security-forward and varied treatment, while traditional industries such as construction and agriculture mostly sit on a simple, shared template. Acronis Report Examines Security Policy Configurations Across 1.6 Million Endpoints
terms of email distribution, the DarkCloud infostealer was included in an email impersonating a Qatari construction company, while the AgentTesla infostealer was included in an email impersonating a well-known AhnLab’s September 2026 Infostealer Report Details Distribution and Lzveil Behavior
campaign dubbed Operation FlashHole targeting at least three organizations in South Korea spanning the construction, software, and wire-communication equipment manufacturing sectors. Lazarus Campaign Abuses South Korean INISAFE Software and Uses Post-Quantum Encryption
company in New York, a chemical company in Ohio, an insurance company in Illinois, a company in the construction industry in Texas, a pet care company in Missouri and an international eyewear company. Nefilim and Hive Affiliate Artem Stryzhak Sentenced to 70 Months

CVE (37)

Malware (117)

People (58)

Threat Actors (171)

MITRE ATT&CK (148)

Vendors (64)

Products (149)

Tools (81)

Industries (146)

Countries (58)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.