Technology ❯ Cybersecurity ❯ Threat Actors

State-Sponsored Attacks

APT Groups Foreign Hostile Entities Chinese APTs Lotus Blossom ArcaneDoor Campaign Static Tundra North Korea Operation MacroMaze Russia and China UNC6353

Iran‑Linked Nimbus Manticore Reappears Using SEO Poisoning and New MiniFast Backdoor

Researchers say the shift to search‑engine poisoning with AI‑assisted malware increased the reach and speed of the group's espionage.

CISA Flags Palo Alto PAN-OS Zero-Day as Actively Exploited, Orders Federal Fixes by May 9

BeyondTrust Pre-Auth RCE Is Now Being Exploited in the Wild

Microsoft Quietly Alters Windows to Expose Full .LNK Targets After Years of Real‑World Abuse

ClickFix Scams Add OS Detection, Auto-Copy and Video Tutorials as Malvertising Push Expands

Darktrace: Salt Typhoon Used Citrix Flaw in Attempted European Telco Breach

DPRK‑Linked Group Uses Blockchain Smart Contracts to Deliver Malware in Ongoing Hiring Lures

Libraesva Rushes Patch for ESG Flaw Exploited by Suspected State Actor

FBI and Cisco Warn Russian FSB Unit Is Exploiting 2018 Cisco Flaw in Active Spy Campaign

House of Commons Data Breach Tied to Microsoft Vulnerability