The Paragon investigation continues to gain momentum, as prosecutors in Rome and Naples intensify their questioning of officials from Italy’s intelligence services in an effort to reconstruct the chain of events that led to...
The South Korean government has officially confirmed a cyberattack on the nation’s key infrastructure—two months after the incident occurred. According to the report, attackers gained access to the Onnara document management system, used by...
Over the past two decades, China’s vulnerability research industry has evolved from a disorganized network of enthusiasts into a highly structured ecosystem deeply intertwined with state interests. In the early 2000s, it was a...
A sweeping international investigation by Lighthouse Reports and thirteen media partners across Europe, Africa, and Asia has uncovered a vast surveillance network that operated for more than a decade, spanning 160 countries. At its...
Researchers at StrikeReady uncovered a targeted campaign exploiting a zero-day in the Zimbra Collaboration Suite (ZCS) — a widely used open-source mail platform deployed by numerous governments and enterprises. Tracked as CVE-2025-27915, the flaw...
The hacker group Confucius, active in South Asia since at least 2013, has intensified malicious operations against Pakistani organizations. Fortinet researchers documented a fresh wave of intrusions leveraging two malware families — WooperStealer and...
CERT-UA has detected a new targeted campaign against Ukraine in which operators distribute malicious XLL modules inside ZIP archives via the Signal messenger, ultimately delivering the CABINETRAT backdoor to victims’ machines. The agency attributes...
Proofpoint has published an analysis detailing a series of targeted phishing campaigns attributed to a group linked to Chinese state interests, tracked as TA415. The report describes carefully crafted espionage attempts against U.S. government...
Researchers at IBM X-Force have uncovered new operations by the Chinese threat group Hive0154, better known as Mustang Panda. Analysts observed the simultaneous deployment of an upgraded variant of the Toneshell backdoor alongside a...
A cyber operation against a Philippine military contractor has exposed a newly discovered and highly sophisticated malicious infrastructure, codenamed EggStreme. Research conducted by Bitdefender attributes the campaign to a Chinese threat group engaged in...