Malware & Threats
Dubbed GopherWhisper, the group relies on multiple Go-based backdoors alongside custom loaders and injectors.
Hi, what are you looking for?
SecurityWeek
Nation-State
The US, Japan, Germany and Australia have published a joint report detailing the scope of North Korea’s WaterPlum campaign.
ICS/OT
The hackers changed equipment settings, disabled remote access and alarms, and altered pumping cycles, officials said.
ICS/OT
The Coast Guard confirmed evidence of malicious cyber activity on the VL Prosperity, but has not attributed the attack to Iran.
Nation-State
The Chinese-language input method editor for Windows can allow attackers to execute arbitrary code remotely.
Nation-State
The campaigns focus on financial organizations, including cryptocurrency, venture capital, and blockchain entities.
ICS/OT
The US government has warned that Iran-linked hackers are manipulating PLCs and SCADA systems to cause disruption.
Malware & Threats
The APT28 threat group exploited vulnerable TP-Link and MikroTik routers to conduct adversary-in-the-middle (AitM) attacks.
Mobile & Wireless
The state-sponsored group’s campaign has targeted government, higher education, financial, and legal entities, as well as think tanks.
Cyberwarfare
Iran-linked hacking groups are turning to high-volume, low-impact cyberattacks, and AI is providing a boost.
Email Security
The agency said Iranian hackers targeted the director’s personal email account and noted that the compromised information is old.
Nation-State
The state-sponsored threat actor deployed kernel implants and passive backdoors enabling long-term, high-level espionage.
Government
The US has seized several domains used by Handala in cyber-enabled psychological operations.
Nation-State
The state-sponsored hackers deployed custom tools and stayed dormant in the compromised environments for months.
Nation-State
The attacks, observed since February, show that Iranian hackers already have a presence in the networks of US organizations.
Cyberwarfare
The cybersecurity industry is monitoring the landscape and says many of the big claims made by hacktivist groups remain unverified.
Malware & Threats
The UNC2814 threat actor has been active since at least 2017, targeting organizations across 42 countries.
Nation-State
The vulnerability in TeamT5 ThreatSonar Anti-Ransomware was recently added to CISA’s KEV catalog.
Cybercrime
Threat actors from Russia, China, North Korea and Iran have been observed launching attacks.
Malware & Threats
China-linked UNC3886 targeted all four major telecom providers, but did not disrupt services or access customer information.
Malware & Threats
Palo Alto Networks has not attributed the APT activity to any specific country, but evidence points to China.
Malware & Threats
The attacks targeting Europe were analyzed by Ukraine’s CERT-UA and the cybersecurity company Zscaler.
ICS/OT
10 years after disrupting the Ukrainian power grid, the APT targeted Poland with data-wiping malware.
ICS/OT
US officials told The New York Times that cyberattacks were used to turn off the lights in Caracas and disrupt air defense radars.
AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access.
RegisterJoin as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterExpert Insights
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.
(Etay Maor)
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.
(Sravish Sridhar)