Cyberwarfare
The British government is investigating a “cyber incident” following news reports that hackers linked to China have gained access to thousands of confidential documents.
Hi, what are you looking for?
SecurityWeek
Nation-State
The US, Japan, Germany and Australia have published a joint report detailing the scope of North Korea’s WaterPlum campaign.
ICS/OT
The hackers changed equipment settings, disabled remote access and alarms, and altered pumping cycles, officials said.
ICS/OT
The Coast Guard confirmed evidence of malicious cyber activity on the VL Prosperity, but has not attributed the attack to Iran.
Nation-State
The Chinese-language input method editor for Windows can allow attackers to execute arbitrary code remotely.
Malware & Threats
The hacking group has been using Group Policy to deploy cyberespionage tools on governmental networks.
Nation-State
Data from Chainalysis and Amazon offers a glimpse into North Korea’s cyber activities surrounding cryptocurrency theft and fake IT workers.
Malware & Threats
After years of exploiting zero-day and n-day vulnerabilities, Russian state-sponsored threat actors are shifting to misconfigured devices.
Malware & Threats
Warp Panda has been using the BrickStorm, Junction, and GuestConduit malware in attacks against US organizations.
Malware & Threats
The state-sponsored hackers relied on phishing emails to deliver a malicious payload to Reporters Without Borders (RSF).
Malware & Threats
APT24 has been relying on various techniques to drop the BadAudio downloader and then deploy additional payloads.
Nation-State
A Chinese threat actor is exploiting known vulnerabilities in discontinued Asus devices in an Operational Relay Box (ORB) facilitation campaign.
Cyberwarfare
Amazon threat intelligence experts have documented two cases in which Iran leveraged hacking to prepare for kinetic attacks.
Nation-State
Britain’s domestic intelligence agency warned that Chinese nationals were ”using LinkedIn profiles to conduct outreach at scale” on behalf of the Chinese Ministry of...
Malware & Threats
The state-sponsored APT has been targeting the victims’ family members to increase pressure on their targets.
Artificial Intelligence
A state-sponsored threat actor manipulated Claude Code to execute cyberattacks on roughly 30 organizations worldwide.
Cyberwarfare
NTT’s chief cybersecurity strategist Mihoko Matsubara on the new geopolitics of hacking, the "chicken and egg" problem of 5G, and the AGI threat to...
Government
Australia mirrored the US’s recent sanctions against bankers, financial institutions, and others allegedly involved in laundering funds for North Korea.
Nation-State
Multiple state-sponsored Russian groups are targeting Ukrainian entities and European countries linked to Ukraine.
Nation-State
The threat actor stole the firewall configuration files of all SonicWall customers who used the cloud backup service.
Nation-State
Ribbon Communications provides technology for communications networks and its customers include the US government and major telecom firms.
Nation-State
Lazarus has used fake job offers in attacks targeting companies developing UAV technology, for information theft.
Nation-State
Star Blizzard started using the NoRobot (BaitSwitch) and MaybeRobot (SimpleFix) malware after public reporting on the LostKeys malware.
Data Breaches
More information has come to light on the cyberattack disclosed this week by F5, including on attribution and potential risks.
AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access.
RegisterJoin as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterExpert Insights
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.
(Etay Maor)
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.
(Sravish Sridhar)