cyber espionage

Russian hackers target iOS and Android users with n-day exploits

Android, cyber espionage, iPhone, mobile devices, News, Russian Federation /

Russian hackers target iOS and Android users with n-day exploits 2026-11-04 at 16:38 By Sinisa Markovic Russia’s APT29 has been using compromised websites, lookalike domains and a hijacked web analytics service to target iOS and Android users with exploits for patched flaws and steal their cookies, messages and Wi-Fi passwords, according to Sekoia. APT29 watering […]

Russian hackers target iOS and Android users with n-day exploits Read More »

AI agents scale and speed up Chinese-linked attacks

agentic AI, attack tools, China, CrowdStrike, cyber espionage, Don't miss, Hot stuff, Kaspersky, LLMs, News /

AI agents scale and speed up Chinese-linked attacks 2026-11-03 at 14:31 By Zeljka Zorz A China-nexus espionage group used AI agents to attack more than 200 organizations in 11 days, CrowdStrike said last week. On Monday, Kaspersky published details of a separate campaign against educational institutions in Africa and Latin America, mounted by Chinese-speaking operators. […]

AI agents scale and speed up Chinese-linked attacks Read More »

Chinese hackers used VMware ESX zero-day; PHP2Shell and Fragnesia chained to root firewalls

0-day, China, CISA, Cisco, CrowdStrike, cyber espionage, Don't miss, DoS, Hot stuff, Linux, News, Palo Alto Networks, PHP2Shell, USA /

Chinese hackers used VMware ESX zero-day; PHP2Shell and Fragnesia chained to root firewalls 2026-10-29 at 18:25 By Zeljka Zorz China-nexus threat actors have exploited a VMware ESX zero-day to hide their tracks and chained PHP2Shell flaws with the “Fragnesia” Linux kernel bug to root servers and firewalls, cybersecurity researchers claim. Cisco has also confirmed that […]

Chinese hackers used VMware ESX zero-day; PHP2Shell and Fragnesia chained to root firewalls Read More »

Volt Typhoon targeted enterprise control planes via ever-changing “Silent Train” relay network

0-day, APT, attack tools, Cisco, critical infrastructure, cyber espionage, Don't miss, enterprise, Fortinet, government-backed attacks, Hot stuff, Internet of Things, Lumen, News, telecommunications, USA /

Volt Typhoon targeted enterprise control planes via ever-changing “Silent Train” relay network 2026-10-29 at 15:42 By Zeljka Zorz Volt Typhoon, a Chinese state-sponsored APT group that’s focused on cyberespionage and United States’ critical infrastructure, has been using a covert, constantly rotating relay network to hide its most sensitive intrusions, Lumen’s Black Lotus Labs revealed on […]

Volt Typhoon targeted enterprise control planes via ever-changing “Silent Train” relay network Read More »

OpenAI engineer arrested for allegedly trying to eavesdrop on executive meetings

AI, cyber espionage, Insider Threat, law enforcement, News, OpenAI, US DoJ, USA /

OpenAI engineer arrested for allegedly trying to eavesdrop on executive meetings 2026-10-14 at 11:40 By Sinisa Markovic A recording device wrapped in toilet paper and plugged into the back of a television in an executive conference room at OpenAI’s San Francisco office has led to the arrest of one of the company’s engineers. Abdulrahman Alfozan, […]

OpenAI engineer arrested for allegedly trying to eavesdrop on executive meetings Read More »

FBI disrupts Flax Typhoon hacking tools used in global cyberattacks

botnet, China, CISA, critical infrastructure, cyber espionage, Don't miss, FBI, Hot stuff, News, USA /

FBI disrupts Flax Typhoon hacking tools used in global cyberattacks 2026-10-09 at 12:44 By Sinisa Markovic The FBI seized seven domains used to operate Microscan and FishHub, two hacking tools linked to Chinese state-sponsored hackers known as Flax Typhoon that were used to target critical infrastructure and other organizations in the US and abroad. Seizure […]

FBI disrupts Flax Typhoon hacking tools used in global cyberattacks Read More »

Chinese spies impersonate White House, Anthropic figures to phish AI policy experts

AI, China, cyber espionage, Government, News, phishing, Proofpoint, USA /

Chinese spies impersonate White House, Anthropic figures to phish AI policy experts 2026-10-02 at 13:21 By Sinisa Markovic A China-aligned espionage group has been posing as a former White House official and a prominent economist to get into the cloud accounts of AI policy experts in the US, Proofpoint have found. The group, which the […]

Chinese spies impersonate White House, Anthropic figures to phish AI policy experts Read More »

North Korean remote workers are broadening their job hunt beyond IT

cyber espionage, financial industry, healthcare, Huntress, News, North Korea, remote working /

North Korean remote workers are broadening their job hunt beyond IT 2026-08-28 at 14:16 By Sinisa Markovic North Korean (DPRK) remote workers are expanding their job searches beyond IT, according to Huntress. Recent investigations have identified suspected DPRK workers employed in sales and marketing and the medical profession. “DPRK workers present a unique detection challenge […]

North Korean remote workers are broadening their job hunt beyond IT Read More »

FBI takes down China-linked hacking network behind attacks on NASA, DOJ and U.S. Senate

China, cyber espionage, Government, News, USA /

FBI takes down China-linked hacking network behind attacks on NASA, DOJ and U.S. Senate 2026-08-27 at 10:19 By Sinisa Markovic The Justice Department and FBI have seized domains tied to two hacking tools built and run by a Chinese state-sponsored group, cutting off access to malware that had been used against U.S. government agencies for […]

FBI takes down China-linked hacking network behind attacks on NASA, DOJ and U.S. Senate Read More »

Lazarus hackers pair fake job offers with Windows zero-day exploit

cyber espionage, fraud, Malware, News, North Korea, phishing /

Lazarus hackers pair fake job offers with Windows zero-day exploit 2026-08-12 at 14:48 By Sinisa Markovic The North Korea-linked Lazarus group is using fake job offers, trojanized PDF software and a Windows zero-day in attacks aimed primarily at the defense sector, Check Point researchers have found. The activity is part of Operation Dream Job, a […]

Lazarus hackers pair fake job offers with Windows zero-day exploit Read More »

Russian hackers abuse hotel Wi-Fi networks to steal Microsoft 365 credentials and deploy malware

cyber espionage, Microsoft, Microsoft 365, News, phishing, Russian Federation /

Russian hackers abuse hotel Wi-Fi networks to steal Microsoft 365 credentials and deploy malware 2026-08-04 at 13:45 By Sinisa Markovic Midnight Blizzard, the Russian threat actor tied to the country’s foreign intelligence service, has spent months targeting users of public Wi-Fi networks at places like hotels and conference centers, according to new findings from Microsoft […]

Russian hackers abuse hotel Wi-Fi networks to steal Microsoft 365 credentials and deploy malware Read More »

Laundry Bear’s new Microsoft Exchange attack triggers on email open (CVE-2026-42897)

APT, cyber espionage, Don't miss, government-backed attacks, Hot stuff, Microsoft Exchange, News, Proofpoint, Russian Federation, vulnerability /

Laundry Bear’s new Microsoft Exchange attack triggers on email open (CVE-2026-42897) 2026-07-30 at 17:23 By Zeljka Zorz Russia-affiliated cyber espionage group Laundry Bear (aka Void Blizzard, aka TA488) is exploiting CVE-2026-42897, a cross-site scripting vulnerability in Microsoft Exchange, to target US and European government entities and a variety of private sector organizations via email. The […]

Laundry Bear’s new Microsoft Exchange attack triggers on email open (CVE-2026-42897) Read More »

Russian hackers exploit unpatched Zimbra servers to steal emails

CISA, CVE, cyber espionage, Government, News, phishing, Russian Federation /

Russian hackers exploit unpatched Zimbra servers to steal emails 2026-07-24 at 15:09 By Sinisa Markovic Russian state-backed hacker group Laundry Bear has been breaking into government and commercial networks for at least a year by exploiting a vulnerability in the Zimbra Collaboration Suite (ZCS) webmail platform. Laundry Bear (also known as Void Blizzard, CL-STA-1114, and […]

Russian hackers exploit unpatched Zimbra servers to steal emails Read More »

HOLLOWGRAPH malware turns Microsoft 365 calendars into an espionage channel

cyber espionage, Group-IB, Iran, Malware, Microsoft 365, News /

HOLLOWGRAPH malware turns Microsoft 365 calendars into an espionage channel 2026-07-20 at 20:20 By Sinisa Markovic Microsoft 365 calendars have become a hiding place for espionage malware, with commands and stolen files stashed inside appointments dated to the year 2050, researchers from Group-IB discovered. Targeted campaign tied to Iranian espionage activity The malware, which Group-IB […]

HOLLOWGRAPH malware turns Microsoft 365 calendars into an espionage channel Read More »

EU and UK blacklist Russia’s cyber operators over efforts to destabilize Europe

cyber espionage, EU, News, Russian Federation, UK /

EU and UK blacklist Russia’s cyber operators over efforts to destabilize Europe 2026-07-13 at 17:52 By Sinisa Markovic The EU and the UK jointly sanctioned dozens of Russian individuals and entities, accusing Moscow of coordinating a malicious cyber ecosystem targeting Europe, its member states, and international partners. The UK sanctioned 24 individuals and entities, while […]

EU and UK blacklist Russia’s cyber operators over efforts to destabilize Europe Read More »

Chinese hackers breached North American research institutions via REDCap servers

China, cyber espionage, Google, Government, Malware, News, USA /

Chinese hackers breached North American research institutions via REDCap servers 2026-06-15 at 21:41 By Sinisa Markovic A China-linked cyber espionage operation targeted North American medical research institutions through compromised REDCap servers, using custom malware to gain persistent access and collect sensitive information, Google’s Threat Intelligence Group (GTIG) researchers found. UNC6508 exploits vulnerable REDCap servers GTIG […]

Chinese hackers breached North American research institutions via REDCap servers Read More »

FBI seizes 13 websites linked to alleged Chinese intelligence-gathering effort

China, cyber espionage, FBI, Government, News, US DoJ, USA /

FBI seizes 13 websites linked to alleged Chinese intelligence-gathering effort 2026-06-11 at 17:12 By Sinisa Markovic Federal authorities have seized 13 internet domains allegedly used to target current and former U.S. government employees and military personnel with access to classified and sensitive information. The post FBI seizes 13 websites linked to alleged Chinese intelligence-gathering effort […]

FBI seizes 13 websites linked to alleged Chinese intelligence-gathering effort Read More »

Alleged Chinese hacker extradited to US over cyberattacks targeting COVID-19 research

China, cyber espionage, FBI, law enforcement, News, USA /

Alleged Chinese hacker extradited to US over cyberattacks targeting COVID-19 research 2026-04-28 at 22:35 By Sinisa Markovic Chinese national Xu Zewei was extradited from Italy to the United States to face charges tied to an alleged cyber espionage campaign that breached thousands of computers worldwide. Xu is charged alongside Zhang Yu, who remains at large. […]

Alleged Chinese hacker extradited to US over cyberattacks targeting COVID-19 research Read More »

Compromised everyday devices power Chinese cyber espionage operations

China, cyber espionage, cybersecurity, Government, NCSC, News, UK /

Compromised everyday devices power Chinese cyber espionage operations 2026-04-24 at 13:17 By Sinisa Markovic China-linked threat actors have shifted from individually procured infrastructure to large-scale covert networks, botnets built from compromised routers and other edge devices, the National Cyber Security Centre (NCSC) warns. To help organizations address this threat, the NCSC, together with the Cyber […]

Compromised everyday devices power Chinese cyber espionage operations Read More »

Scroll to Top