Technology ❯ Cybersecurity ❯ Cyber Espionage

Malware

Threat Actors Advanced Persistent Threats Lazarus Group BrickStorm State-Sponsored Attacks ScarCruft Chinese Government Threats APT37 PlugX ApolloShadow Juniper Networks Notepad++ Social Engineering Android Security Hacking Techniques Cryptocurrency Turla Adversary-in-the-Middle Attacks REDCap Zero-Day Vulnerabilities PLUGGYAPE APT28

Lazarus Exploits Windows Zero‑Day in New 'Operation Dream Job' Wave

The flaw lets attackers gain SYSTEM privileges to install a stealthy kernel rootkit, a risk that has prompted urgent patches and IOC guidance.

Google Attributes Yearlong REDCap Breach to UNC6508

ESET Links ScarCruft to Supply-Chain Attack on Yanbian Gaming Platform

Zscaler Ties North Korea’s APT37 to ‘Ruby Jumper’ Using Zoho WorkDrive and USB Malware to Breach Air‑Gapped Networks

Dell Patches RecoverPoint Zero-Day Exploited Since 2024 by Suspected China Group

CERT-UA Uncovers Charity-Themed PluggyApe Campaign Targeting Ukraine's Military

Hamas-Linked Ashen Lepus Revamps Espionage Toolkit, Extends Targeting Across Middle East

North Korea-Linked KONNI Turns Google Find Hub Into Remote-Wipe Weapon in South Korea

China-Linked UNC6384 Exploits Unpatched Windows Shortcut Flaw to Spy on European Diplomats

Flax Typhoon Turned ArcGIS Feature Into Stealth Backdoor for a Year, Researchers Say

Iran-Linked Nimbus Manticore Escalates European Targeting With Novel DLL-Sideloaded Malware

Proofpoint: Chinese TA415 Used VS Code Remote Tunnels in Phishing of U.S. Trade Policy Targets

US, UK and Allies Tie Salt Typhoon Campaign to Three Chinese Tech Firms

Microsoft Confirms FSB Hackers Intercept Diplomatic Traffic Through Russian ISPs