Technology ❯ Cybersecurity ❯ Threat Actors

Nation-State Actors

Iranian Hackers North Korea UNC6353 Chinese Cyber Groups APT28 China and Iran Groups AyySSHush Botnet Russian Cyber Operations Surveillance Companies China-based Groups APT Groups North Korean Cyber Threats North Korean Hackers ViciousTrap Targeted Attacks China-Linked Groups Chinese Hacking Groups Russian-Linked Groups China-based Threats UNC6201 Russian and Chinese Actors Russian Threat Groups Harvester Group China-based Threat Actors China-Nexus Activity Chinese Cyber Threats

Ivanti Patches EPMM Zero‑Day Under Active Exploitation as CISA Orders Fix by May 10

Federal agencies face a May 10 patch deadline set by CISA in response to the zero‑day’s confirmed use.

Harvester’s Linux GoGra Backdoor Hides C2 in Microsoft Graph and Outlook

CISA Orders Immediate Protections as Iran-Linked Hackers Target Internet-Facing Industrial Controllers

Leaked DarkSword Toolkit Puts Out‑of‑Date iPhones at Risk

Google: Record Share of 2025 Zero‑Day Exploits Hit Enterprise Tech

Dell Patches RecoverPoint Zero-Day Exploited Since 2024 by Suspected China Group

Google Warns of Widespread, Ongoing Exploitation of WinRAR Vulnerability

North Korea-Linked KONNI Turns Google Find Hub Into Remote-Wipe Weapon in South Korea

Darktrace: Salt Typhoon Used Citrix Flaw in Attempted European Telco Breach

DPRK‑Linked Group Uses Blockchain Smart Contracts to Deliver Malware in Ongoing Hiring Lures

AyySSHush Botnet Exploits ASUS Flaw to Backdoor Over 9,000 Routers