Disruptive Iran-nexus hacktivist operation claims large-scale data destruction as Stryker restores services and CISA investigates. Handala | Wiper activity | Microsoft Entra | Device management | Healthcare supply chain |…
A ClearSky report details a new loader and backdoor pair, and Scythe shows how to operationalise it as continuous adversary emulation. APT28, Ukraine, phishing, steganography, .NET malware, adversary emulation, Windows…
Cisco Talos links the activity cluster to China-nexus tooling, including CrowDoor variants and ORB-style proxy infrastructure Telecommunications, China-nexus, cyberespionage, backdoors, ORBs, Linux implants, DLL side-loading Metadata Executive Summary Cisco Talos…
Reverse engineering shows pragmatic obfuscation, hardcoded crypto, and cloud-native infrastructure supporting scalable intrusion delivery. APT24 · BADAUDIO · supply-chain compromise · watering holes · Cloudflare Workers · Taiwan Metadata Executive…
Iran • hacktivists • IRGC • MOIS • DDoS • wipers • ransomware • critical infrastructure Affected vendor / product: Cross-sector (internet-facing services, identity systems, OT/ICS edge devices)Primary issue: Heightened…
Affected ecosystem: npm registry and developer tooling supply chainPrimary issue: OPSEC leakage from disposable email inbox exposure combined with npm publish notification metadataExploitation status: Observed in the wild (malicious npm…
DPRK fake interview lures and recruitment-driven malware deliverydprk, contagious interview, deceptiveDevelopment, beavertail, invisibleferret, fake recruiters, coding challenges, it worker scheme, wagemole, famous chollima, laptop farms, software supply chain 1. Executive…
1) Executive overview APT42 is an Iran-aligned cyber espionage and surveillance actor assessed by multiple vendors as state-sponsored. Mandiant assesses with high confidence that APT42 conducts information collection and surveillance…
1. Executive Summary APT28 is a long-running Russian state-aligned cyber espionage actor widely attributed to the GRU’s 85th Main Special Service Center (GTsSS), military unit 26165, active since at least…
1. Executive Summary Public reporting indicates China-linked threat actors compromised multiple U.S. broadband/telecommunications providers, including AT&T, Verizon, and Lumen, with access potentially extending to systems and processes supporting court-authorised wiretapping…