Precursor Intelligence

Threat News

Latest cyber threat intelligence, breaches and exploitation

2 matching stories

Head Mare
  • Vulnerability Disclosure26d ago·3 sources

    Head Mare Exploits Three Zero-Days to Trojanize TrueConf, Atlassian Rovo, and Progress LoadMaster

    The Head Mare APT group is actively exploiting three zero-day vulnerabilities in Atlassian Rovo, Progress LoadMaster, and Metabase, with Progress LoadMaster CVE-2026-8037 now on CISA KEV after 792 observed exploitation attempts.

    Head Marezero-dayAtlassian Rovo+3
    Head Mare Exploits Three Zero-Days to Trojanize TrueConf, Atlassian Rovo, and Progress LoadMaster
  • Campaign28 Aug 2026·2 sources

    Head Mare APT trojanizes TrueConf client installers to drop PhantomCore and PhantomGraph backdoors

    Head Mare APT is exploiting an unpatched TrueConf video conferencing server to trojanize the client installer and deliver PhantomCore and PhantomGraph backdoors to Russian organizations across six sectors.

    Head MareTrueConfPhantomCore+2
    Head Mare APT trojanizes TrueConf client installers to drop PhantomCore and PhantomGraph backdoors