Technology ❯ Cybersecurity ❯ Threat Actors

State-Sponsored Attacks

APT Groups Chinese APTs Notepad++ Update Hijack China, Iran, North Korea, Russia ArcaneDoor Campaign Foreign Hostile Entities Targeted Systems UAT4356 (Storm-1849) Static Tundra Russian Hackers North Korea Delivery Vectors UNC3886 Lotus Blossom Russia and China Operation MacroMaze Chinese Hacking Groups APT28 Infrastructure

BeyondTrust Pre-Auth RCE Is Now Being Exploited in the Wild

Active exploitation tied to a public PoC puts unpatched on-premises appliances at immediate risk.

Microsoft Quietly Alters Windows to Expose Full .LNK Targets After Years of Real‑World Abuse

ClickFix Scams Add OS Detection, Auto-Copy and Video Tutorials as Malvertising Push Expands

Darktrace: Salt Typhoon Used Citrix Flaw in Attempted European Telco Breach

DPRK‑Linked Group Uses Blockchain Smart Contracts to Deliver Malware in Ongoing Hiring Lures

Libraesva Rushes Patch for ESG Flaw Exploited by Suspected State Actor

FBI and Cisco Warn Russian FSB Unit Is Exploiting 2018 Cisco Flaw in Active Spy Campaign

House of Commons Data Breach Tied to Microsoft Vulnerability