GreyNoise has recorded a dramatic surge in automated requests targeting Palo Alto Networks’ GlobalProtect authentication portals. The scale of this spike is highly atypical: within just 24 hours, the volume of network sessions hitting...
A North Korean–linked hacking campaign attributed to the KONNI cluster has executed a string of targeted attacks against Android devices in South Korea, uniquely exploiting the legitimate Google Find My Device service to remotely...
Hackers have released what appears to be the largest data breach in the history of Chinese cybersecurity — exfiltrating archives from Knownsec, a firm closely tied to state structures in the People’s Republic of...
The American company Ribbon Communications has reported a major cyberattack on a telecommunications network that compromised both its internal systems and client infrastructure. Investigations revealed that the intruders had infiltrated the network as early...
The September attack on the embassy of a European nation in New Delhi has exposed the scale of an extensive espionage operation targeting diplomatic missions across several South Asian countries. Experts at Trellix have...
In March 2025, Kaspersky Lab recorded a surge of infections triggered when users followed personalized phishing links sent via email. No additional interaction was required to activate the attack—merely opening the malicious site in...
Government-backed hackers infiltrated a U.S. nuclear weapons component manufacturer by exploiting vulnerabilities in Microsoft SharePoint. The incident affected the Kansas City National Security Campus (KCNSC), part of the National Nuclear Security Administration (NNSA) under...
In mid-summer 2025, the ToolShell vulnerability (CVE-2025-53770) became the catalyst for a major wave of compromises. Attackers exploited the flaw on SharePoint servers shortly after Microsoft released its patch, gaining unauthenticated access to files...
The Lazarus hacking group has resurfaced—this time targeting European defence firms engaged in unmanned aerial systems development. ESET traces the activity to the DreamJob campaign, attributed to North Korea, which habitually employs bogus job...
The Unit 42 team at Palo Alto Networks has released an in-depth investigation into a new international cybercrime campaign driven by financially motivated actors, codenamed Jingle Thief. Operating out of Morocco, the group specializes...
Group-IB’s Threat Intelligence team has published a detailed analysis of a new cyber-espionage campaign very likely attributable to the MuddyWater APT. The intrusion began with a compromised mailbox that the attackers accessed via a...
Over the past two years, Kaspersky Lab researchers have been tracking a little-known espionage campaign dubbed PassiveNeuron. Initial server compromises of government organizations were observed as early as 2024, yet for a long time...
