Nation-State Cyber Threats
Proofpoint says at least four espionage clusters, most with suspected China ties, adopted the same BlueMoon kit within a week, chaining Chrome and Windows zero-days. APT31 went first. Patching closes the door but does not evict what is already inside.
Nation-State Cyber Threats
Sygnia says the China-nexus espionage actor Fire Ant has pushed past VMware hypervisors into the network authentication and logging plane, compromising Cisco IOS XR routers, TACACS servers, and Linux management hosts to harvest credentials and suppress the telemetry defenders rely on.
Vulnerabilities & Patching
CISA added a 2023 ownCloud flaw, CVE-2023-49105, to its Known Exploited Vulnerabilities catalog after a Chinese-speaking threat actor used it to steal nuclear records from a research body in the Philippines. Here is what ownCloud operators should verify now.
Nation-State & Cybercrime
US authorities seized the domains behind QScan and QTRouter, two hacking platforms the Justice Department ties to the China-based group QTFY. Officials say the tools helped hide intrusions at NASA, the Federal Reserve, the Senate, and other federal networks. Here is what defenders should verify.
AI Security
White House OSTP accuses DeepSeek and Moonshot AI of industrial-scale extraction attacks; bipartisan sanctions bill advances to protect American frontier models. WASHINGTON, D.C. — The Trump administration has officially signaled a major escalation in the AI arms race, shifting focus from hardware export controls to the protection of the
Nation-State Cyber Threats
ESET discovers a new espionage group abusing legitimate cloud services for command-and-control against strategically sensitive Mongolian targets. ULAN BATOR, MN — Researchers at ESET have uncovered a sophisticated, China-aligned espionage campaign targeting the Mongolian government. The threat actor, dubbed GopherWhisper, has successfully infected at least 12 government systems
Cyber Warfare
Yesterday, we reported on the unprecedented scale of the National Supercomputing Center (NSCC) breach. Today, the focus shifts from how much was taken to exactly what — and the implications for global stability. CHENGDU, CHINA — New intelligence regarding the 10-petabyte data theft from China’s National Supercomputing Center suggests the
China
Cybersecurity investigators and international intelligence agencies are scrambling to verify a massive data breach involving one of China’s most prominent supercomputing centers. A threat actor, operating under an alias on dark web forums, claims to have exfiltrated roughly 10 petabytes (PB) of highly sensitive data from a government-linked
Policy & Government
The Federal Bureau of Investigation has officially designated a recent breach of its internal networks as a "major cyber incident," signaling a significant escalation in the assessment of a campaign linked to Chinese state-sponsored actors. The classification, first reported by Politico, follows an intensive forensic review of