CISA Sets October 11 Patch Deadline
Five Flax Typhoon–exploited flaws join CISA's KEV catalog as federal agencies face an October 11, 2026, patch-or-discontinue deadline.
21 results for “cyber espionage”
Five Flax Typhoon–exploited flaws join CISA's KEV catalog as federal agencies face an October 11, 2026, patch-or-discontinue deadline.
A joint advisory says hackers linked to Integrity Technology Group stole email and ran a web app giving third parties access to it.
Rapid7 says Linux implants in South Korea and Taiwan impersonate SpamSniper and ShareTech to slip past defenders.
A China-nexus actor is using Microsoft 365 mailboxes and cloud storage as dead drops to command a Rust-compiled Windows backdoor, Talos reports.
A joint advisory links WaterPlum's developer-targeting campaign to over $10.7m in stolen cryptocurrency and 30,000 infected devices worldwide.
Zscaler ThreatLabz says Transparent Tribe is running four new tools against Indian and Afghan government targets, hiding command traffic inside private GitHub repositories.
A joint advisory from the UK, FBI, and Netherlands warns that Iranian hackers use social engineering and messaging apps to spy on and wipe victims' systems.
FBI, UK NCSC, and Dutch AIVD warn that Iranian actors use social messaging apps to deploy Chosen Brick data-stealing malware.
Proofpoint says China-aligned clusters rapidly adopted BlueMoon, a Chrome and Windows exploit chain that may have cost far less to build than expected.
New npm malware hides command-and-control infrastructure within zero-value Ethereum transfer addresses to bypass traditional detection.
Researchers are tracking a sophisticated campaign against Central Asian governments involving custom OctLurk and SilkLurk malware.
A newly uncovered intrusion suggests threat actors are leveraging autonomous AI tools to streamline lateral movement and enumeration.
Intelligence agencies report that Russian actors are hijacking IP cameras to monitor military movements across Europe and Ukraine.
A newly identified malware sample, HollowGraph, is utilizing Microsoft 365 calendar events as a covert command and control channel.
A newly identified backdoor is enabling long-term espionage against Southeast Asian government and diplomatic networks.
Nation-state actors are weaponizing generative AI to bypass traditional hiring filters and secure roles within high-value organizations.
A legacy rootkit reappears in Taiwan alongside a sophisticated new backdoor that executes commands from the Windows logon screen.
Federal authorities have sanctioned a specialized VPN provider and a malware cryptor vendor to disrupt ransomware supply chains.
A multinational security alert warns that outdated network management protocols and neglected hardware are fueling persistent cyberespionage.
Law enforcement digital infrastructure in Pakistan has become a high-stakes battlefield for dueling foreign intelligence operations.
Sustained cyber espionage campaigns weaponize local law enforcement systems to harvest sensitive citizen data and security records.