Data Breaches
F5 shared few details on the threat actor, but the attack profile seems to point to China.
Hi, what are you looking for?
SecurityWeek
Nation-State
The US, Japan, Germany and Australia have published a joint report detailing the scope of North Korea’s WaterPlum campaign.
ICS/OT
The hackers changed equipment settings, disabled remote access and alarms, and altered pumping cycles, officials said.
ICS/OT
The Coast Guard confirmed evidence of malicious cyber activity on the VL Prosperity, but has not attributed the attack to Iran.
Nation-State
The Chinese-language input method editor for Windows can allow attackers to execute arbitrary code remotely.
Nation-State
The company said there is no evidence that confidential client data was stolen from its systems.
Nation-State
The hackers are believed to have stolen over $6 billion for the Pyongyang regime, financing its military programs.
Nation-State
BIETA and its subsidiary CIII research develop and sell technologies supporting China’s intelligence, counterintelligence, and military operations.
Nation-State
Focused on espionage, the threat actor shares infrastructure with Chinese APTs, but uses different TTPs in attacks.
Nation-State
North Korean threat actors pose as recruiters to steal developers’ identities and supply them to fraudulent IT workers.
Nation-State
RedNovember has been targeting government, defense and aerospace, and legal services organizations worldwide.
Nation-State
Google’s Threat Intelligence Group and Mandiant link the BrickStorm campaign to UNC5221, warning that hackers are analyzing stolen code to weaponize zero-day vulnerabilities.
Nation-State
The campaign targeted US government, think tank, and academic entities involved in US-China relations, international trade, and economic policy.
Nation-State
China’s APT41 sent out malicious emails on behalf of Rep. John Moolenaar to collect information ahead of US-China trade talks.
Nation-State
The hackers were seen actively monitoring cyber threat intelligence to discover and rebuild exposed infrastructure.
Nation-State
Pakistani state-sponsored hacking group APT36 is targeting Linux systems in a fresh campaign aimed at Indian government entities.
Nation-State
Russian state-sponsored hackers tracked as Static Tundra continue to target Cisco devices affected by CVE-2018-0171.
Nation-State
Chinese APT UAT-7237 has been targeting Taiwanese web infrastructure for long-term access to high-value entities.
Nation-State
WinRAR has patched CVE-2025-8088, a zero-day exploited by Russia’s RomCom in attacks on financial, defense, manufacturing and logistics companies.
Nation-State
Russian state-sponsored APT Secret Blizzard has used ISP-level AitM attacks to infect diplomatic devices with malware.
Nation-State
SentinelLabs connects the dots between prolific Chinese state-sponsored hackers and companies developing intrusion tools.
Nation-State
Chinese hacking group Salt Typhoon targeted a National Guard unit’s network and tapped into communications with other units.
Nation-State
Xu Zewei has been arrested on charges that he is a member of the Chinese state-sponsored hacking group Hafnium (Silk Typhoon).
Nation-State
The United States has warned of continued Iranian cyberattacks following American strikes on Iran’s nuclear facilities.
AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access.
RegisterJoin as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterExpert Insights
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.
(Etay Maor)
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.
(Sravish Sridhar)