Tag: nation state
1338 articles
Tech Giants Forge AI Security Alliance
Major tech players have joined forces to create an AI Security Alliance, aiming to develop and share cutting-edge defenses to protect software and AI agents from emerging threats. By working together, they promise to make crucial cybersecurity tools more accessible as AI continues to advance.
China Revives Old Playbook to Claim Philippine Territory
China's latest tactic in its bid to claim Philippine territory has been dubbed "salami-slicing in the information domain," with a recent academic symposium's claims rapidly morphing into a coordinated social media campaign. The argument that the Batanes islands are part of Taiwan - and therefore China - spread like wildfire across Chinese social media, fueled by state-affiliated media outlets.
Malware Modules Disable Windows Update, Defender for Crypto Mining
Meet LockAppHost, a notorious malware module that cripples your Windows defenses by disabling updates and Microsoft Defender, making way for a sneaky cryptocurrency miner to take over. By weakening your machine's security, it allows the miner to run undetected, wreaking havoc on your system.
Russian Drones Compel Ukraine to Ground M1 Abrams Tanks
Ukraine's 425th Separate Assault Regiment has grounded its M1 Abrams tanks due to a barrage of Russian drones that have rendered them untenable for frontline operations. The regiment's commander says they lack the means to counter the enemy's drone component, making it a temporary but not terminal blow to the tanks' deployment.
North Korea's Ted Backdoor Infiltrates HAProxy Builds to Intercept Web Traffic
Security researchers have uncovered a sneaky backdoor, dubbed "ted", hidden in HAProxy builds used by two South Korean companies, allowing hackers to intercept web traffic. This cleverly concealed Linux toolkit was deployed through a trojanized HAProxy load balancer, highlighting the need for extra vigilance in cybersecurity.
Air Force Accelerates Drone Replacement Amid Steep Reaper Losses
The Air Force is fast-tracking the replacement of its MQ-9 Reaper drones due to an alarming rate of losses in recent combat operations against Iran, with at least 45 Reapers destroyed since February. This steep attrition has dramatically changed the military's plans for its remotely piloted aircraft fleet.
AI-Powered Attacks Target Latin America With Advanced Proxy Networks
Latin America's transportation, government, and water utility sectors are under siege by sophisticated AI-powered attacks that leverage advanced proxy networks and living-off-the-land techniques to infiltrate and exfiltrate sensitive data. These multi-stage intrusions have already compromised key organizations in Mexico and Ecuador.
Healthcare Breaches Surge, Raising Patient Safety Concerns
Healthcare breaches are skyrocketing, sparking urgent concerns about patient safety and data protection, with a recent string of incidents exposing millions to potential harm. In just one alarming example, Aesto Health's December 2025 breach went undetected for five months, ultimately affecting 9.5 million people and compromising highly sensitive information.
Outsider Phishing Kit Persists After Takedown Effort
Despite a major takedown effort that seized servers, domains, and $100,000 in payment wallets, the Outsider Phishing Kit is still up and running, with over 700 new phishing pages created within just a month. This alarming resurgence shows that threat actors are relentless in their pursuit of online deception.
Serbian Activists Targeted by Pegasus, NoviSpy Variant Spyware
In a chilling revelation, researchers have confirmed that Serbian student activists and government officials were targeted by the notorious Pegasus spyware, a tool still being used to silence democracy advocates. This disturbing discovery has exposed a sinister campaign that compromised the devices of 14 people, including a member of parliament and a local government official.
Law Enforcement Disrupts 23-Year-Old Russia-Based Botnet Sality
In a major cybercrime sting, law enforcement has dismantled a 23-year-old Russia-based botnet that had infected over 11 million devices worldwide. By cleverly tricking the network into cutting off access to its own devices, CrowdStrike rendered the notorious Sality botnet irrecoverable.
Cyberattack on Texas Battery Fleet Threatens Grid Stability
A shocking 92% of battery infrastructure is likely to face a notable cyberattack by 2031, putting millions of lives at risk. Compromising just 1,500 battery units, or 5.4% of Texas' battery fleet, could destabilize the entire grid, impacting 30 million people and causing up to $65 billion in economic damages.
Malware Campaign Disables Windows Update, Weakens Defender
A sneaky malware campaign has been disabling Windows Update and weakening Defender, compromising multiple organizations and industries worldwide, with a focus on China-based operations and Chinese-speaking users. The culprit behind this malicious activity is linked to a Chinese threat cluster known as Silver Fox, or Yinhu.
AI Agents Automate Ransomware Attack, Leaving 80-Page Security Audit
In a chilling display of efficiency, AI-powered agents automated a ransomware attack on an enterprise network in under 10 hours - a process that would typically take human operators two weeks to complete. This lightning-fast breach was made possible by frontier AI models and agentic frameworks that executed each step of the intrusion with alarming precision.
Russian Man Extradited for Malware Campaign Targeting Freelancers
A massive malware campaign targeting nearly 80,000 freelancers worldwide has led to the extradition of a Russian national, Searzhudin Tamirlanovich Aktulaev, who faces charges of conspiracy, computer damage, and identity theft. Aktulaev's alleged crimes, committed between 2016 and 2017, have finally caught up with him after an international arrest and extradition.
Malicious Apache Modules Redirect Brazilian Government Traffic to Betting Sites
Brazilian government websites have been hijacked by malicious actors, redirecting traffic to betting sites in a sneaky campaign attributed to a Chinese-speaking cluster known as Gambling Goblin or Earth Berberoka. This multilingual scheme has been cleverly manipulating search engines and government systems since mid-2025.
Malicious Apache Modules Empower Gambling Goblin's SEO Fraud Campaign
Meet Gambling Goblin, a Chinese-speaking cybercrime cluster that's been secretly hijacking Brazilian government and education websites to fuel a massive SEO fraud campaign since mid-2025. They're using sneaky Apache modules to disguise their malicious activity and stay under the radar.
Leaked Materials Expose Russia's Cyber-Operations Training Pipeline
Newly leaked training records reveal a shocking look into Russia's cyber-operations training pipeline, exposing a sophisticated system that churns out skilled operatives through a university-linked program called Department No. 4. This formal force-generation apparatus combines technical and ideological training to feed Russia's cyber and intelligence agencies.
AI-Assisted Cyber Attacks Accelerate with Autonomous Agent Loops
In a recent ransomware attack, a human attacker used AI to breach an enterprise network in under 10 hours - compressing weeks of meticulous planning into a lightning-fast operation. This was achieved by leveraging autonomous agents that worked in parallel, methodically bypassing security layers to achieve a shared goal.
Russian Hacker Charged Over Excel Malware Campaign Targeting Freelancers
A massive malware campaign, involving around 255 fake accounts and 80,000 targeted users, has led to charges against a Russian national, Searzhudin Tamirlanovich Aktulaev, who has been extradited and charged by the U.S. Department of Justice. The campaign, which spread malware through infected Excel attachments, allegedly ran from June 2016 to November 2017, targeting freelancers and others.
US Indicts Russian for Infecting 80,000 Freelancers with Malware
A massive phishing campaign infected 80,000 freelancers with malware, using 255 fake accounts to spread malicious Excel attachments with hidden macros that downloaded additional software onto victims' systems. The cleverly designed scam exploited a popular freelance employment platform's online messaging feature to spread its digital damage.
Authorities Disrupt Sality's P2P Network, Neutralize Malware Payloads
In a major win for national security, authorities have successfully dismantled the Sality malware's peer-to-peer network, crippling its ability to spread and cause harm. By cleverly turning the malware's own protocols against it, law enforcement and private partners isolated infected hosts and rendered the threat actor powerless.
Germany Blames Russia for Attempted Drone Strike on Ukrainian Cargo Jet
Germany is pointing fingers at Russia for a brazen attempted drone strike on a Ukrainian cargo jet at Leipzig/Halle Airport, where a drone loaded with 1.3 pounds of military-grade explosives was mysteriously found near the aircraft. The plot was foiled when the detonator failed, but authorities warn it could have been a catastrophe.
FBI Warns of Sophisticated Phishing Campaign Targeting High-Profile Individuals
Beware of a sneaky phishing scam that's targeting high-profile individuals, using a clever tactic to gain long-term access to their cloud accounts without needing their passwords. This sophisticated attack convinces victims to grant a malicious app permission to their accounts, allowing hackers to stay logged in for good.