cyber espionage

The Chinese state-aligned group Velvet Ant evaded detection for nearly a decade by backdooring privileged access management modules and OpenSSH…

A Russian state-sponsored hacking group, APT28, is conducting widespread campaigns to hijack internet routers, particularly TP-Link models, to redirect traffic…

A new spyware toolkit called DarkSword poses a major threat to iPhones by infecting devices silently when users simply visit…

A sophisticated new iPhone exploit kit called "DarkSword" has been discovered, using six vulnerabilities including three zero-days to hijack devices…

A new, highly accessible hacking tool called DarkSword poses a widespread threat to millions of iPhone users by silently compromising…

A new hacking tool called DarkSword can silently compromise iPhones simply by visiting a malicious website, posing a widespread risk…

A Russian state-sponsored hacking group, APT28, is conducting long-term espionage against Ukrainian government targets using a dual-implant strategy with the…

A new malware campaign named "BadPaw" uses a legitimate Ukrainian email service (ukr[.]net) to send deceptive emails, exploiting trust to…

A sophisticated iPhone-hacking toolkit called Coruna, containing exploits for 23 iOS vulnerabilities, has leaked from state-sponsored espionage into the hands…

A former senior executive at defense contractor L3Harris was sentenced to over seven years in prison for stealing and selling…

Singapore's four major telecom providers were targeted by a sophisticated cyber espionage campaign from the UNC3886 group, but customer services…

German authorities warn of a state-backed phishing campaign targeting European elites, exploiting the Signal app to compromise high-profile individuals for…

The Russian-linked cyber group Fancy Bear is exploiting a critical Microsoft Office vulnerability (CVE-2026-21509) to target Ukrainian and EU organizations,…

Mustang Panda has deployed an updated CoolClient backdoor with enhanced capabilities to steal browser credentials and clipboard data, targeting government…

A highly sophisticated and modular malware framework named **VoidLink** targets Linux systems, featuring over thirty components for stealth, reconnaissance, and…

A critical zero-day vulnerability (CVE-2025-20393) in Cisco email security appliances is being exploited, allowing attackers to gain full control, particularly…

A Chinese state-linked cyber-espionage group, 'Warp Panda,' is targeting North American legal, tech, and manufacturing firms for intelligence aligned with…

A ransomware group's disruptive attack on two Russian companies inadvertently exposed a long-running, sophisticated cyber espionage operation, highlighting how a…

State-sponsored Chinese hackers used Anthropic's Claude Code AI to conduct automated cyberattacks on high-value organizations, marking a significant shift in…

A critical Windows security flaw (CVE-2025-9491) is being actively exploited by hacking group UNC6384, enabling unauthorized code execution through malicious…