Nation-State Cyber Threats
GTIG's published research resets sector advisory work for research organizations across North America, putting REDCap servers and Google Workspace administrative rules at the top of the review list.
Nation-State Cyber Threats
One backdoored authentication module, one isolated network, ten years of undetected access — a reminder that critical authentication primitives are a forever-target.
Artificial Intelligence (AI)
The first US export-control action against a commercial frontier AI model — for cybersecurity reasons — sets a precedent every AI lab will now plan against.
Nation-State Cyber Threats
A coordinated public-private takedown disrupts one of 2026's largest China-based cybercrime networks — and Google sues a related operation for abusing Gemini.
Nation-State Cyber Threats
ESET's research update reframes OceanLotus — the targeting is now inward.
Nation-State Cyber Threats
Another indictment in a Russia-aligned case — but unlike most, this defendant is already in US custody after an extradition from Thailand.
Nation-State Cyber Threats
Consumer compression software remains a reliable initial-access vector in the Russia-Ukraine cyber theater.
Nation-State Cyber Threats
A small-footprint, long-tail Chinese proxy network grows past 1,500 devices — defenders should account for this layer of reconnaissance infrastructure.
Nation-State Cyber Threats
ReliaQuest disclosed OP-512, a previously unreported, China-linked espionage cluster that plants a custom three-web-shell framework on Microsoft IIS servers — the fourth such group to target IIS in a year. For anyone running IIS, it is a prompt to go hunting.
Artificial Intelligence (AI)
Two Mythos threads landed this cycle: TechCrunch reports the NSA is said to be readying Anthropic's Mythos for cyber operations despite a federal restriction, while Anthropic published an analysis of 832 accounts banned for malicious cyber activity, mapped to MITRE ATT&CK.
Nation-State Cyber Threats
A joint Five Eyes advisory warns that Chinese intelligence officers, posing as recruiters and consultants for front companies, are using LinkedIn, Indeed and Upwork to recruit government, military and cleared personnel — and anyone with access to classified or privileged information.
Policy & Government
The Pentagon's top cyber official, Katherine Sutton, says the Defense Department must pull cyber 'out of its silo' and build it into every operation from day one — and must bake security into the AI tools it adopts, rather than treating it as an afterthought.