Nation-State Cyber Threats

Flat white line-art of a phone with a chat bubble, an SMS form, and a key — CERT-UA Russian-intelligence messaging-credential phishing.

Ukraine and CERT-UA Document Russian Intelligence Phishing of Messaging Credentials

A Russian-intelligence campaign against messaging-app credentials, documented by Ukraine, uses fake support texts to coax Signal and WhatsApp users into surrendering the codes that unlock their accounts.

Flat white line-art of a partially open hatch, a magnifier, and a document — Turla STOCKSTAY backdoor in Ukraine espionage.

Nation-State Cyber Threats

Google Publishes Analysis of Turla's New STOCKSTAY Backdoor in Ukraine Espionage

Another Russia-linked backdoor lands on defenders' desks for review. Google Threat Intelligence Group and Mandiant have detailed STOCKSTAY, a .NET implant Turla has deployed against Ukrainian government and military networks since at least 2022.

Flat white line-art of a smartphone cabled to a forensic analysis box beside a magnifier — Cellebrite use on activist iPhone after stated Russia cutoff.

Mobile Security

Cellebrite Tooling Documented on Jailed Activist's iPhone After Stated Russia Cutoff

Cellebrite's stated sales-restriction practice gets fresh scrutiny via human-rights documentation, after researchers tied its forensic tooling to a jailed Russian activist's iPhone months after the company said it had pulled out.

Flat white line-art of a transmission tower, a shield, and an Australian landmass outline — nation-state CNI disclosure.

Nation-State Cyber Threats

Australia Discloses Nation-State Activity Against Critical Infrastructure

Australian government and intelligence officials disclosed nation-state activity against the country's critical infrastructure that, they assessed, could enable disruption at a time of the actor's choosing — landing amid a wave of Five-Eyes warnings.

Flat white line-art of five linked nodes in a ring around a central AI chip — Five Eyes frontier AI cybersecurity statement.

Artificial Intelligence (AI)

Five Eyes Agencies Issue Urgent Call on Frontier AI Threats to Cybersecurity

A multilateral statement raises the temperature on AI's cybersecurity implications, with the Five Eyes agencies warning leaders that frontier models are compressing the timeline for both offensive and defensive cyber change.

Flat white line-art of a row of package boxes beside an attribution tag card and a flag pin — Microsoft Mastra npm Sapphire Sleet attribution.

Supply Chain Attack

Microsoft Attributes Mastra AI Supply Chain Compromise to Sapphire Sleet

Microsoft's attribution analysis ties the JavaScript-ecosystem compromise to a North-Korea-linked cluster, assessing with high confidence that the actor it tracks as Sapphire Sleet published poisoned Mastra packages to reach developers and crypto wallets.

Flat white line-art of a large shield over a three-quarter ring and a power-grid tower — NCSC UK hostile-state critical-infrastructure statement.

Nation-State Cyber Threats

NCSC UK: Hostile-State Activity Behind 75% of Attacks on UK Critical Infrastructure

NCSC UK's CEO puts a number on hostile-state activity — three-quarters of attacks on UK critical systems. The figure, drawn from a year of incident response, reframes the threat as a sustained contest.

Flat white line-art of a large magnifier over a document beside a simple alert card — North Korean-linked NarwhalRAT research disclosure.

Nation-State Cyber Threats

Researchers Detail a North Korean-Linked Campaign Using the NarwhalRAT Family

Another published-research disclosure for defenders to review for indicator relevance: researchers at Genians named NarwhalRAT, a remote access trojan they attribute to a North Korean-linked cluster, and published indicators worth checking against your own telemetry.

Flat white line-art of a medical research flask, a server database, and a shield — GTIG China-nexus research-sector advisory.

Nation-State Cyber Threats

Google Threat Intel Details a China-Nexus Cluster Targeting Medical, Military, and AI Research

GTIG's published research resets sector advisory work for research organizations across North America, putting REDCap servers and Google Workspace administrative rules at the top of the review list.

Flat white line-art of a key in a server with a hidden duplicate key behind it — decade-long Linux PAM authentication backdoor.

Nation-State Cyber Threats

Chinese APT Backdoors Linux PAM Login Software for Nearly a Decade

One backdoored authentication module, one isolated network, ten years of undetected access — a reminder that critical authentication primitives are a forever-target.

Flat white line-art of an AI model core behind a closed border gate with an order document — US order limiting Fable 5 and Mythos 5.

Artificial Intelligence (AI)

US Orders Anthropic to Suspend Fable 5 and Mythos 5 Access for Foreign Nationals

The first US export-control action against a commercial frontier AI model — for cybersecurity reasons — sets a precedent every AI lab will now plan against.

Flat white line-art of a fishing hook lifting a network of linked nodes off a globe — FBI Outsider takedown.

Nation-State Cyber Threats

FBI and Google Take Down $1.9B China-Based "Outsider" Cybercrime Network

A coordinated public-private takedown disrupts one of 2026's largest China-based cybercrime networks — and Google sues a related operation for abusing Gemini.

See all