Threat Actors

View All News Brief Vulnerabilities Threat Actors Research Defensive Techniques Incident Reports

May 23, 2026 5 min read

NightShade APT: State-Sponsored Group Targeting AI Training Pipelines

A newly attributed state-sponsored threat actor is systematically targeting AI development infrastructure to poison training datasets and embed persistent backdoors in commercially deployed models.

img of PhantomSynth: The Threat Actor Industrialising AI-Generated Spear Phishing

May 19, 2026 2 min read

Threat Actors

PhantomSynth: The Threat Actor Industrialising AI-Generated Spear Phishing

PhantomSynth is a financially motivated threat actor that has industrialised the use of LLMs to generate hyper-personalised spear phishing lures at scale, dramatically lowering the cost of targeted social engineering campaigns.

img of GhostCircuit: The Ransomware Group Automating Victim Reconnaissance with AI

May 18, 2026 4 min read

Threat Actors

GhostCircuit: The Ransomware Group Automating Victim Reconnaissance with AI

GhostCircuit is a ransomware-as-a-service operation that has integrated LLM-based tooling into its post-compromise reconnaissance phase, dramatically accelerating the time from initial access to ransomware deployment.