Malware & Threats
The US government shared exploit chains, IOCs and post-incident forensics data to help network defenders hunt for signs of Chinese hacking gangs.
Hi, what are you looking for?
SecurityWeek
Email Security
Russian hackers posed as US State Department staff and convinced targets to generate and give up Google app-specific passwords.
Incident Response
Anti-malware vendor said it spent the past twelve months deflecting a stream of network reconnaissance probes from China-nexus threat actors
Nation-State
China issued warrants for 20 Taiwanese people it said carried out hacking missions in the Chinese mainland on behalf of the island’s ruling party.
Nation-State
China-linked hackers used a compromised government site to target other government entities with the ToughProgress malware that uses an attacker-controlled Google Calendar for C&C.
Nation-State
The US Treasury has sanctioned two individuals and four entities involved in the North Korean fake IT worker scheme.
Malware & Threats
Microsoft researchers catches Russia's Star Blizzard hackers spear-phishing with QR codes and WhatsApp group chats.
Nation-State
Chinese cyberspies targeted offices dealing with foreign investments and sanctions in the recent US Treasury hack.
Cyberwarfare
Japan says China-linked cyberattacks were systematic attacks with an aim of stealing data on Japanese national security and advanced technology.
Government
The U.S. Defense Department added dozens of Chinese companies, including Tencent, SenseTime and battery maker CATL, to a list of companies it says have...
Nation-State
China has slammed a decision by the US Treasury to sanction a Beijing-based cybersecurity company for its alleged role in multiple hacking incidents targeting...
Nation-State
The US Treasury has sanctioned Chinese company Integrity Technology for supporting state-sponsored group Flax Typhoon in hacking US critical infrastructure.
Incident Response
Chinese hackers remotely accessed US Treasury Department workstations after compromising a cloud-based service operated by BeyondTrust.
Nation-State
A top White House official said at least eight U.S. telecom firms and dozens of nations have been impacted by a Chinese hacking campaign.
Data Breaches
The FBI said the target was tricked into downloading a malicious Python script under the guise of a pre-employment test hosted on GitHub.
Fraud & Identity Theft
The Justice Department announced indictments against 14 North Koreans for involvement in a scheme to pose as remote IT workers to violate sanctions and...
Nation-State
A top White House official said at least eight U.S. telecom firms and dozens of nations have been impacted by a Chinese hacking campaign.
Malware & Threats
Russia's Turla hackers hijacked 33 command servers operated by Pakistani hackers who had themselves breached Afghanistan and Indian targets.
Nation-State
Guidance issued by the FBI and CISA is intended to help root out the hackers and prevent similar cyberespionage.
Nation-State
T-Mobile has confirmed being targeted by hackers, likely China’s Salt Typhoon, but reiterated that the attack was blocked.
Nation-State
The Russia-linked RomCom APT has been observed chaining two zero-days in Firefox and Windows for backdoor delivery.
Nation-State
The North Korean fake IT workers have infiltrated businesses in China, Russia, and other countries aside from the US.
Mobile & Wireless
Russian cyberspy group APT28 conducted a Nearest Neighbor Attack, where it hacked into the building across the street from the victim for a Wi-Fi...
Nation-State
Russia-linked TAG-110 has targeted over 60 government, human rights, and educational entities in Asia and Europe.
Join this event as we dive into threat hunting tools and frameworks, and explore value of threat intelligence data in the defender’s security stack.
RegisterLearn how integrating BAS and Automated Penetration Testing empowers security teams to quickly identify and validate threats, enabling prompt response and remediation.
RegisterExpert Insights
In a rapidly changing AI environment, CISOs are worried about investing in the wrong solution or simply not investing because they can’t decide what the best option is.
(Marc Solomon)
Adopting a layered defense strategy that includes human-centric tools and updating security components.
(Stu Sjouwerman)
A strong AI deployment starts with asking the right questions, mapping your risks, and thinking like an adversary — before it’s too late.
(Matt Honea)
It’s time for enterprises to stop treating unmanaged devices as an edge case and start securing them as part of a unified Zero Trust strategy.
(Etay Maor)
Many security professionals feel pressured to pursue leadership roles, but success can also mean going deeper, not just higher.
(Joshua Goldfarb)