Intelligence

China-linked APT UNC3886 targets EoL Juniper routersChina-linked APT UNC3886 targets EoL Juniper routers

China-linked APT UNC3886 targets EoL Juniper routers

Mandiant researchers warn that China-linked actors are deploying custom backdoors on Juniper Networks Junos OS MX routers. In mid-2024, Mandiant identified…

2 months ago
SideWinder APT targets maritime and nuclear sectors with enhanced toolsetSideWinder APT targets maritime and nuclear sectors with enhanced toolset

SideWinder APT targets maritime and nuclear sectors with enhanced toolset

The APT group SideWinder targets maritime and logistics companies across South and Southeast Asia, the Middle East, and Africa. Kaspersky…

2 months ago
North Korea-linked APT Moonstone used Qilin ransomware in limited attacksNorth Korea-linked APT Moonstone used Qilin ransomware in limited attacks

North Korea-linked APT Moonstone used Qilin ransomware in limited attacks

Microsoft researchers reported that North Korea-linked APT tracked as Moonstone Sleet has employed the Qilin ransomware in limited attacks. Microsoft…

2 months ago
The U.S. DoJ charges 12 Chinese nationals for state-linked cyber operationsThe U.S. DoJ charges 12 Chinese nationals for state-linked cyber operations

The U.S. DoJ charges 12 Chinese nationals for state-linked cyber operations

The U.S. Department of Justice (DoJ) charges 12 Chinese nationals for their alleged involvement in state-linked cyber operations. The U.S.…

2 months ago
Chinese Lotus Blossom APT targets multiple sectors with Sagerunex backdoorChinese Lotus Blossom APT targets multiple sectors with Sagerunex backdoor

Chinese Lotus Blossom APT targets multiple sectors with Sagerunex backdoor

China-linked Lotus Blossom APT targets governments and industries in Asian countries with new Sagerunex backdoor variants. Talos researchers linked China-backed…

2 months ago
China-linked APT Silk Typhoon targets IT Supply ChainChina-linked APT Silk Typhoon targets IT Supply Chain

China-linked APT Silk Typhoon targets IT Supply Chain

Microsoft warns that China-backed APT Silk Typhoon linked to US Treasury hack, is now targeting global IT supply chains, using…

2 months ago
CISA maintains stance on Russian cyber threats despite policy shiftCISA maintains stance on Russian cyber threats despite policy shift

CISA maintains stance on Russian cyber threats despite policy shift

US CISA confirms no change in defense against Russian cyber threats despite the Trump administration's pause on offensive operations. US…

2 months ago
Serbian student activist’s phone hacked using Cellebrite zero-day exploit<gwmw style="display:none;"></gwmw>Serbian student activist’s phone hacked using Cellebrite zero-day exploit<gwmw style="display:none;"></gwmw>

Serbian student activist’s phone hacked using Cellebrite zero-day exploit<gwmw style="display:none;"></gwmw>

Amnesty International reports that a Cellebrite zero-day exploit was used to unlock a Serbian activist's Android phone. Amnesty International reported…

2 months ago
China-linked threat actors stole 10% of Belgian State Security Service (VSSE)’s staff emails<gwmw style="display: none; background-color: transparent;"></gwmw>China-linked threat actors stole 10% of Belgian State Security Service (VSSE)’s staff emails<gwmw style="display: none; background-color: transparent;"></gwmw>

China-linked threat actors stole 10% of Belgian State Security Service (VSSE)’s staff emails<gwmw style="display: none; background-color: transparent;"></gwmw>

Belgian authorities are investigating Chinese hackers for breaching its State Security Service (VSSE), stealing 10% of emails from 2021 to…

2 months ago
Cellebrite blocked Serbia from using its solution because misuse of the equipment for political reasons<gwmw style="display: none; background-color: transparent;"></gwmw>Cellebrite blocked Serbia from using its solution because misuse of the equipment for political reasons<gwmw style="display: none; background-color: transparent;"></gwmw>

Cellebrite blocked Serbia from using its solution because misuse of the equipment for political reasons<gwmw style="display: none; background-color: transparent;"></gwmw>

Cellebrite blocked Serbia from using its solution after reports that police used it to unlock and infect the phones of…

2 months ago