Threat Intelligence Snapshot: Week 31, 2026
LAUNDRY BEAR Exploits Zimbra Zero-Day to Steal Email from Western Organizations | US Forces and Interests Targeted in Jordan and
QuoINT
July 31, 2026
Explore our comprehensive archive organized by taxonomy. Discover a wealth of information categorized by subject, theme, or type to enhance your research and understanding.
LAUNDRY BEAR Exploits Zimbra Zero-Day to Steal Email from Western Organizations | US Forces and Interests Targeted in Jordan and
Chinese Operators Breach Government Systems and Target Financial Firms Using AI Coding Tools | Houthis Say They Attacked Two Saudi
Russia Exploits European IP Cameras To Track Military Logistics | Iran Threatens to Block More Vital Seaways
TeamPCP Weaponizes Supply Chain Access to Enable Vect Ransomware Deployment | Intelligence Services Warn Russia Is Preparing Possible Provocation in
Browser-Native Ransomware Abuse Path in DeepSeek-Attributed Sample | Iran and US Trade Attacks, Tanker Struck in Hormuz
Compromised Klue Integration Enables Bulk Salesforce CRM Record Exfiltration | EU Aviation Safety Agency Warns Airlines Should Still Avoid Airspace
ErrTraffic MaaS Distributes Infostealers Through Compromised WordPress Sites and ClickFix Lures | Italy Arrests Seven Over Anarchist Network Linked to
NFCShare Android Trojan Steals Payment Card Data Through NFC from Italian and Spanish Bank Customers | Iran Strikes US Bases
New Russian-Linked Threat Group GREYVIBE Uses AI to Accelerate Cyber Operations | OECD Warns Global Economic Outlook Weakens Amid Energy
TrapDoor Campaign Plants 34 Malicious Packages Across npm, PyPI, and Crates.io to Steal Crypto and Developer Credentials | Norway to
Try searching our blog
AI Coding Agents Publish Internal Screenshots from Over 300 Organizations to Public GitHub Repositories | Denmark Says Russia Has Conducted Sabotage Attacks Against Its Defense Firms
ECSO interviewed Marco Riccardi after QuoIntelligence won the ECSO STARtup Award 2026 as Europe’s Most Promising Cybersecurity Start-up.
AI-Driven Cyberattack on Dutch Institute for Vulnerability Disclosure (DIVD) Automates Exploitation and Post-Compromise Activity | European Trade Unions and Civil Society Groups Tell European Governments To End All Contract With Palantir
New Android Trojan RemControl Targets Retail Bank Customers in Europe and Canada | Poland Suspects Fire at Starlink Station Was Act of Sabotage