cyber espionage

Chinese spies impersonate White House, Anthropic figures to phish AI policy experts

AI, China, cyber espionage, Government, News, phishing, Proofpoint, USA /

Chinese spies impersonate White House, Anthropic figures to phish AI policy experts 2026-10-02 at 13:21 By Sinisa Markovic A China-aligned espionage group has been posing as a former White House official and a prominent economist to get into the cloud accounts of AI policy experts in the US, Proofpoint have found. The group, which the […]

Chinese spies impersonate White House, Anthropic figures to phish AI policy experts Read More »

North Korean remote workers are broadening their job hunt beyond IT

cyber espionage, financial industry, healthcare, Huntress, News, North Korea, remote working /

North Korean remote workers are broadening their job hunt beyond IT 2026-08-28 at 14:16 By Sinisa Markovic North Korean (DPRK) remote workers are expanding their job searches beyond IT, according to Huntress. Recent investigations have identified suspected DPRK workers employed in sales and marketing and the medical profession. “DPRK workers present a unique detection challenge […]

North Korean remote workers are broadening their job hunt beyond IT Read More »

FBI takes down China-linked hacking network behind attacks on NASA, DOJ and U.S. Senate

China, cyber espionage, Government, News, USA /

FBI takes down China-linked hacking network behind attacks on NASA, DOJ and U.S. Senate 2026-08-27 at 10:19 By Sinisa Markovic The Justice Department and FBI have seized domains tied to two hacking tools built and run by a Chinese state-sponsored group, cutting off access to malware that had been used against U.S. government agencies for […]

FBI takes down China-linked hacking network behind attacks on NASA, DOJ and U.S. Senate Read More »

Lazarus hackers pair fake job offers with Windows zero-day exploit

cyber espionage, fraud, Malware, News, North Korea, phishing /

Lazarus hackers pair fake job offers with Windows zero-day exploit 2026-08-12 at 14:48 By Sinisa Markovic The North Korea-linked Lazarus group is using fake job offers, trojanized PDF software and a Windows zero-day in attacks aimed primarily at the defense sector, Check Point researchers have found. The activity is part of Operation Dream Job, a […]

Lazarus hackers pair fake job offers with Windows zero-day exploit Read More »

Russian hackers abuse hotel Wi-Fi networks to steal Microsoft 365 credentials and deploy malware

cyber espionage, Microsoft, Microsoft 365, News, phishing, Russian Federation /

Russian hackers abuse hotel Wi-Fi networks to steal Microsoft 365 credentials and deploy malware 2026-08-04 at 13:45 By Sinisa Markovic Midnight Blizzard, the Russian threat actor tied to the country’s foreign intelligence service, has spent months targeting users of public Wi-Fi networks at places like hotels and conference centers, according to new findings from Microsoft […]

Russian hackers abuse hotel Wi-Fi networks to steal Microsoft 365 credentials and deploy malware Read More »

Laundry Bear’s new Microsoft Exchange attack triggers on email open (CVE-2026-42897)

APT, cyber espionage, Don't miss, government-backed attacks, Hot stuff, Microsoft Exchange, News, Proofpoint, Russian Federation, vulnerability /

Laundry Bear’s new Microsoft Exchange attack triggers on email open (CVE-2026-42897) 2026-07-30 at 17:23 By Zeljka Zorz Russia-affiliated cyber espionage group Laundry Bear (aka Void Blizzard, aka TA488) is exploiting CVE-2026-42897, a cross-site scripting vulnerability in Microsoft Exchange, to target US and European government entities and a variety of private sector organizations via email. The […]

Laundry Bear’s new Microsoft Exchange attack triggers on email open (CVE-2026-42897) Read More »

Russian hackers exploit unpatched Zimbra servers to steal emails

CISA, CVE, cyber espionage, Government, News, phishing, Russian Federation /

Russian hackers exploit unpatched Zimbra servers to steal emails 2026-07-24 at 15:09 By Sinisa Markovic Russian state-backed hacker group Laundry Bear has been breaking into government and commercial networks for at least a year by exploiting a vulnerability in the Zimbra Collaboration Suite (ZCS) webmail platform. Laundry Bear (also known as Void Blizzard, CL-STA-1114, and […]

Russian hackers exploit unpatched Zimbra servers to steal emails Read More »

HOLLOWGRAPH malware turns Microsoft 365 calendars into an espionage channel

cyber espionage, Group-IB, Iran, Malware, Microsoft 365, News /

HOLLOWGRAPH malware turns Microsoft 365 calendars into an espionage channel 2026-07-20 at 20:20 By Sinisa Markovic Microsoft 365 calendars have become a hiding place for espionage malware, with commands and stolen files stashed inside appointments dated to the year 2050, researchers from Group-IB discovered. Targeted campaign tied to Iranian espionage activity The malware, which Group-IB […]

HOLLOWGRAPH malware turns Microsoft 365 calendars into an espionage channel Read More »

EU and UK blacklist Russia’s cyber operators over efforts to destabilize Europe

cyber espionage, EU, News, Russian Federation, UK /

EU and UK blacklist Russia’s cyber operators over efforts to destabilize Europe 2026-07-13 at 17:52 By Sinisa Markovic The EU and the UK jointly sanctioned dozens of Russian individuals and entities, accusing Moscow of coordinating a malicious cyber ecosystem targeting Europe, its member states, and international partners. The UK sanctioned 24 individuals and entities, while […]

EU and UK blacklist Russia’s cyber operators over efforts to destabilize Europe Read More »

Chinese hackers breached North American research institutions via REDCap servers

China, cyber espionage, Google, Government, Malware, News, USA /

Chinese hackers breached North American research institutions via REDCap servers 2026-06-15 at 21:41 By Sinisa Markovic A China-linked cyber espionage operation targeted North American medical research institutions through compromised REDCap servers, using custom malware to gain persistent access and collect sensitive information, Google’s Threat Intelligence Group (GTIG) researchers found. UNC6508 exploits vulnerable REDCap servers GTIG […]

Chinese hackers breached North American research institutions via REDCap servers Read More »

FBI seizes 13 websites linked to alleged Chinese intelligence-gathering effort

China, cyber espionage, FBI, Government, News, US DoJ, USA /

FBI seizes 13 websites linked to alleged Chinese intelligence-gathering effort 2026-06-11 at 17:12 By Sinisa Markovic Federal authorities have seized 13 internet domains allegedly used to target current and former U.S. government employees and military personnel with access to classified and sensitive information. The post FBI seizes 13 websites linked to alleged Chinese intelligence-gathering effort […]

FBI seizes 13 websites linked to alleged Chinese intelligence-gathering effort Read More »

Alleged Chinese hacker extradited to US over cyberattacks targeting COVID-19 research

China, cyber espionage, FBI, law enforcement, News, USA /

Alleged Chinese hacker extradited to US over cyberattacks targeting COVID-19 research 2026-04-28 at 22:35 By Sinisa Markovic Chinese national Xu Zewei was extradited from Italy to the United States to face charges tied to an alleged cyber espionage campaign that breached thousands of computers worldwide. Xu is charged alongside Zhang Yu, who remains at large. […]

Alleged Chinese hacker extradited to US over cyberattacks targeting COVID-19 research Read More »

Compromised everyday devices power Chinese cyber espionage operations

China, cyber espionage, cybersecurity, Government, NCSC, News, UK /

Compromised everyday devices power Chinese cyber espionage operations 2026-04-24 at 13:17 By Sinisa Markovic China-linked threat actors have shifted from individually procured infrastructure to large-scale covert networks, botnets built from compromised routers and other edge devices, the National Cyber Security Centre (NCSC) warns. To help organizations address this threat, the NCSC, together with the Cyber […]

Compromised everyday devices power Chinese cyber espionage operations Read More »

Russian hackers hijack internet traffic using vulnerable routers

cyber espionage, EU, News, router, Russian Federation, UK /

Russian hackers hijack internet traffic using vulnerable routers 2026-04-07 at 19:18 By Sinisa Markovic The Russian state cyber group APT28 has been compromising routers to hijack web traffic and spy on victims, the UK’s The National Cyber Security Centre (NCSC) has warned. Attackers are exploiting vulnerable routers to alter DHCP and DNS settings, redirecting traffic […]

Russian hackers hijack internet traffic using vulnerable routers Read More »

TrueConf zero-day vulnerability exploited to target government networks

Check Point, cyber espionage, Don't miss, Government, Malware, News, video conferencing /

TrueConf zero-day vulnerability exploited to target government networks 2026-04-02 at 12:02 By Sinisa Markovic Suspected China-nexus attackers have leveraged a zero-day vulnerability (CVE-2026-3502) in the TrueConf client application to distribute malware within government networks in Southeast Asia, Check Point researchers discovered. Malicious client update attack chain (Source: Check Point) Trusted update mechanism turned into attack […]

TrueConf zero-day vulnerability exploited to target government networks Read More »

Mission to smuggle $170 million worth of AI tech to China collapsed for three men

cyber espionage, cybercrime, FBI, law enforcement, News, USA /

Mission to smuggle $170 million worth of AI tech to China collapsed for three men 2026-03-26 at 15:52 By Sinisa Markovic Three individuals, Stanley Yi Zheng, Matthew Kelly, and Tommy Shad English, have been charged with conspiracy to commit smuggling and export control violations after allegedly attempting to procure millions of dollars’ worth of restricted […]

Mission to smuggle $170 million worth of AI tech to China collapsed for three men Read More »

Russian hackers go after high-value targets through Signal

CISA, cyber espionage, FBI, Government, News, phishing, Russian Federation, Signal /

Russian hackers go after high-value targets through Signal 2026-03-23 at 11:20 By Sinisa Markovic Russian intelligence-linked hackers are targeting commercial messaging platforms, with Signal a primary focus, the FBI and CISA warn. The campaign is aimed at individuals of intelligence interest, including government personnel, journalists, and others with access to sensitive communications. It is believed […]

Russian hackers go after high-value targets through Signal Read More »

DarkSword: Researchers uncover another iOS exploit kit

cyber espionage, cybercrime, data theft, Don't miss, exploit kit, Google, Hot stuff, iOS, iPhone, iVerify, Lookout, News /

DarkSword: Researchers uncover another iOS exploit kit 2026-03-19 at 16:54 By Zeljka Zorz A powerful iPhone hacking toolkit dubbed “DarkSword” has been used since November 2025 to compromise devices by exploiting zero-day iOS vulnerabilities, Google researchers have shared. iOS vulnerabilities exploited by DarkSword Two weeks ago, Google Threat Intelligence Group (GTIG) and iVerify disclosed the […]

DarkSword: Researchers uncover another iOS exploit kit Read More »

Elite members of North Korean society fake their way into Western paychecks

cyber espionage, cybercrime, Flare, IBM X-Force, News, North Korea, remote working /

Elite members of North Korean society fake their way into Western paychecks 2026-03-19 at 09:02 By Sinisa Markovic Increased federal activity, including indictments over the past year, has drawn attention to a pattern that has been unfolding inside corporate hiring pipelines. North Korean nationals are securing roles as remote IT contractors and full-time staff within […]

Elite members of North Korean society fake their way into Western paychecks Read More »

Scroll to Top