Cyber Reports

Weekly cybersecurity threat intelligence and research.

  1. WEEKLY · THREAT RESEARCH

    2026-W44

    26 October – 1 November 2026 (UTC)

    • T1105 Ingress Tool Transfer 27 supporting articles
    • T1027 Obfuscated Files or Information 16 supporting articles
    • Microsoft 16 supporting articles
    • T1190 Exploit Public-Facing Application 15 supporting articles
    • T1059.001 PowerShell 14 supporting articles
    • T1071.001 Web Protocols 14 supporting articles
    • T1041 Exfiltration Over C2 Channel 11 supporting articles
    • T1059.004 Unix Shell 11 supporting articles
    • Microsoft Windows 10 supporting articles
    • Anthropic 10 supporting articles
    • T1053.005 Scheduled Task 9 supporting articles
    • Cloudflare 8 supporting articles
    • Claude Code 6 supporting articles
    • Microsoft 365 Apps for Enterprise 6 supporting articles
    • Google 6 supporting articles
    • Telegram 5 supporting articles
    • OpenAI 5 supporting articles
    • CVE-2026-109618 4 supporting articles
    • CVE-2026-109619 4 supporting articles
    • Volt Typhoon 4 supporting articles
    • Claude 4 supporting articles
    • Cursor 4 supporting articles
    • Microsoft Teams 4 supporting articles
    • Cursor 4 supporting articles
    • GitHub 4 supporting articles
    • ARTEX 4 supporting articles
    • CVE-2026-20127 Cisco / Cisco Catalyst SD-WAN Manager 3 supporting articles
    • Storm-0940 3 supporting articles
    • Microsoft Active Directory 3 supporting articles
    • Cisco 3 supporting articles
  2. WEEKLY · THREAT RESEARCH

    2026-W43

    19 October – 25 October 2026 (UTC)

    • T1105 Ingress Tool Transfer 33 supporting articles
    • T1027 Obfuscated Files or Information 23 supporting articles
    • T1190 Exploit Public-Facing Application 20 supporting articles
    • T1041 Exfiltration Over C2 Channel 18 supporting articles
    • T1071.001 Web Protocols 17 supporting articles
    • Microsoft Windows 15 supporting articles
    • T1552.001 Credentials In Files 14 supporting articles
    • T1555.003 Credentials from Web Browsers 14 supporting articles
    • T1059.001 PowerShell 13 supporting articles
    • Microsoft 13 supporting articles
    • CVE-2026-109618 8 supporting articles
    • LiteLLM 8 supporting articles
    • PHP 8 supporting articles
    • CVE-2026-109619 7 supporting articles
    • GitHub 7 supporting articles
    • ANY.RUN 7 supporting articles
    • Malcat 7 supporting articles
    • WordPress 6 supporting articles
    • Google 6 supporting articles
    • capa 6 supporting articles
    • privcollect 5 supporting articles
    • Microsoft 365 Apps for Enterprise 5 supporting articles
    • Microsoft OneDrive 5 supporting articles
    • Capstone 5 supporting articles
    • PsExec 5 supporting articles
    • SPIRE CASTLE 4 supporting articles
    • Apache 4 supporting articles
    • Amazon Web Services 4 supporting articles
    • Cloudflare 4 supporting articles
    • Kaspersky 4 supporting articles
  3. WEEKLY · THREAT RESEARCH

    2026-W42

    12 October – 18 October 2026 (+07:00)

    • T1105 Ingress Tool Transfer 16 supporting articles
    • T1059.001 PowerShell 12 supporting articles
    • Microsoft Windows 12 supporting articles
    • T1071.001 Web Protocols 11 supporting articles
    • T1036.005 Match Legitimate Resource Name or Location 10 supporting articles
    • T1041 Exfiltration Over C2 Channel 10 supporting articles
    • T1082 System Information Discovery 10 supporting articles
    • T1190 Exploit Public-Facing Application 10 supporting articles
    • T1053.005 Scheduled Task 9 supporting articles
    • Microsoft 8 supporting articles
    • Android 6 supporting articles
    • Hirudo 4 supporting articles
    • Play Integrity 4 supporting articles
    • WordPress 4 supporting articles
    • ANY.RUN 4 supporting articles
    • Malcat 4 supporting articles
    • Claude 3 supporting articles
    • Discord 3 supporting articles
    • GitHub 3 supporting articles
    • GitHub Actions 3 supporting articles
    • capa 3 supporting articles
    • KesaKode 3 supporting articles
    • CVE-2024-26008 Fortinet / Fortios Additional affected products: - Fortinet / Fortipam - Fortinet / Fortiproxy - Fortinet / Fortiswitchmanager 2 supporting articles
    • CVE-2024-26009 Fortinet / Fortios Additional affected products: - Fortinet / Fortipam - Fortinet / Fortiproxy - Fortinet / Fortiswitchmanager 2 supporting articles
    • CVE-2024-47575 Fortinet / Fortimanager Additional affected products: - Fortinet / Fortimanager cloud 2 supporting articles
    • CVE-2025-61624 Fortinet / Fortios Additional affected products: - Fortinet / Fortipam - Fortinet / Fortiproxy - Fortinet / Fortiswitchmanager - Siemens / Ruggedcom ape1808 firmware 2 supporting articles
    • CVE-2025-8088 win.rar GmbH / WinRAR 2 supporting articles
    • CikaBika Bot 2 supporting articles
    • CROSSROAD 2 supporting articles
    • FoalShell 2 supporting articles