CERT-UA has detected a new targeted campaign against Ukraine in which operators distribute malicious XLL modules inside ZIP archives via the Signal messenger, ultimately delivering the CABINETRAT backdoor to victims’ machines. The agency attributes...
A newly identified cyber-espionage group, Phantom Taurus, linked to China, has spent the past two and a half years striking government bodies and telecommunications firms across Africa, the Middle East, and Asia. According to...
According to Google Threat Intelligence, the China-linked espionage group UNC5221 has since March conducted a series of successful intrusions into corporate networks, exploiting previously unknown vulnerabilities in Ivanti products. These operations resulted in the...
Poland’s Deputy Prime Minister and Minister of Digitalization, Krzysztof Gawkowski, commented on the aftermath of the major disruption caused by a cyberattack on European airports, assuring that Polish infrastructure remained unaffected. In an interview,...
GitLab published a report detailing a fresh wave of attacks in which researcher Oliver Smith analyzed a shift in tactics by a North Korean cyber group employing the BeaverTail and InvisibleFerret malware families. The...
Researchers at Check Point have uncovered a prolonged and targeted campaign by the group Nimbus Manticore (also tracked as UNC1549 and Smoke Sandstorm), which since early 2025 has been directing operations against defence contractors,...
For the first time in its more than century-long history, the United Kingdom’s Secret Intelligence Service (MI6) has publicly announced the launch of a digital platform designed for clandestine contact with prospective informants. Dubbed...
Proofpoint has published an analysis detailing a series of targeted phishing campaigns attributed to a group linked to Chinese state interests, tracked as TA415. The report describes carefully crafted espionage attempts against U.S. government...
Researchers at IBM X-Force have uncovered new operations by the Chinese threat group Hive0154, better known as Mustang Panda. Analysts observed the simultaneous deployment of an upgraded variant of the Toneshell backdoor alongside a...
Insikt Group has published a comprehensive study on two influence networks that were active during the conflict between India and Pakistan in the spring of 2025. The report highlights Hidden Charkha, which promoted pro-Indian...
The Seqrite Labs APT-Team has uncovered a new campaign targeting Kazakhstan’s energy sector. Tracked since April 2025, the operation has been attributed to a previously unknown group, now dubbed NoisyBear. Its primary victim was...
Kaspersky Lab has published its first comprehensive technical analysis of cyber groups most actively targeting Russian organizations. The report details 14 groups, outlining their tactics, tools, and the confirmed links between them. Experts identified...
