Government ❯ Cybersecurity

Threat Intelligence

CISA Incident Response Vulnerabilities Cyber Threats Ransomware Ransomware-as-a-Service Foreign Interference State-Sponsored Attacks Government-Sponsored Hacking APT Groups AI in Government State-Sponsored Actors Malicious Software National Security Hacking Groups Phishing Attacks CERT-UA Espionage Australian Cyber Security Centre Kaspersky

Google Warns Russia‑Linked Hackers Are Exploiting Legitimate Login Flows

Legitimate authentication prompts are being used to steal access tokens so account compromises often look like real sign‑ins.

U.S. Agencies Say Medusa Ransomware Has Hit More Than 500 Critical‑Infrastructure Organizations

U.S. and South Korea Name Two Fortinet Flaws Used by Gunra Ransomware

Laundry Bear Uses OWA XSS to Install OWAReaper Backdoor

U.S. Warns Iran-Linked Hackers Are Altering PLCs From Rockwell, Siemens and Schneider

Australia Warns of Mass CMS Exploitation Campaign Deploying Webshells

CISA Adds Microsoft SharePoint RCE to Known Exploited List and Orders Rapid Federal Patching

DAEMON Tools Confirms Supply-Chain Breach, Releases Clean Lite 12.6

US, UK Warn of ‘Firestarter’ Backdoor on Cisco Firewalls That Survives Patches

CERT-UA Uncovers UAC-0247 Campaign Using ‘AgingFly’ to Hit Ukraine’s Clinics and Government

Kaspersky: Mustang Panda Uses Signed Kernel-Mode Rootkit to Stealth-Load ToneShell

U.S. and Canada Warn of China-Linked ‘BRICKSTORM’ Backdoor Targeting VMware

Cisco Patches Critical UCCX Flaws as New Firewall Attack Variant Emerges

ASD Flags Ongoing BadCandy Re-Infections on Cisco IOS XE as 150+ Devices Remain Compromised