Nation-State - Security Ticks

Chinese Espionage Crews Circle SentinelOne in Year-Long Reconnaissance Campaign

APT41, China, Incident Response, Malware & Threats, Nation-State, PurpleHaze, SentinelLabs, SentinelOne, Shadowpad / SecurityTicks

Chinese Espionage Crews Circle SentinelOne in Year-Long Reconnaissance Campaign 2025-06-09 at 20:58 By Ryan Naraine Anti-malware vendor said it spent the past twelve months deflecting a stream of network reconnaissance probes from China-nexus threat actors The post Chinese Espionage Crews Circle SentinelOne in Year-Long Reconnaissance Campaign appeared first on SecurityWeek. This article is an excerpt […]

React to this headline:

Chinese Espionage Crews Circle SentinelOne in Year-Long Reconnaissance Campaign Read More »

China Issues Warrants for Alleged Taiwanese Hackers and Bans a Business for Pro-Independence Links

China, hacker, Nation-State, Taiwan / SecurityTicks

China Issues Warrants for Alleged Taiwanese Hackers and Bans a Business for Pro-Independence Links 2025-06-05 at 11:46 By Associated Press China issued warrants for 20 Taiwanese people it said carried out hacking missions in the Chinese mainland on behalf of the island’s ruling party. The post China Issues Warrants for Alleged Taiwanese Hackers and Bans

React to this headline:

China Issues Warrants for Alleged Taiwanese Hackers and Bans a Business for Pro-Independence Links Read More »

Chinese Hacking Group APT41 Exploits Google Calendar to Target Governments

APT41, China, Featured, Nation-State / SecurityTicks

Chinese Hacking Group APT41 Exploits Google Calendar to Target Governments 2025-05-30 at 14:19 By Ionut Arghire China-linked hackers used a compromised government site to target other government entities with the ToughProgress malware that uses an attacker-controlled Google Calendar for C&C. The post Chinese Hacking Group APT41 Exploits Google Calendar to Target Governments appeared first on

React to this headline:

Chinese Hacking Group APT41 Exploits Google Calendar to Target Governments Read More »

ConnectWise Discloses Suspected State-Sponsored Hack

ConnectWise, Incident Response, Nation-State / SecurityTicks

ConnectWise Discloses Suspected State-Sponsored Hack 2025-05-30 at 13:51 By Ionut Arghire The IT software provider says ScreenConnect users were impacted by the attack, which exploited a high-severity ASP.NET vulnerability. The post ConnectWise Discloses Suspected State-Sponsored Hack appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source React to this headline:

React to this headline:

ConnectWise Discloses Suspected State-Sponsored Hack Read More »

Czech Government Condemns Chinese Hack on Critical Infrastructure

APT31, China, critical infrastructure, Czech, Data Breaches, European Union, Government, Nation-State / SecurityTicks

Czech Government Condemns Chinese Hack on Critical Infrastructure 2025-05-28 at 18:51 By Ryan Naraine The Czech government issues a blunt warning to China after APT31 hackers linked to intrusion at critical infrastructure network. The post Czech Government Condemns Chinese Hack on Critical Infrastructure appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View

React to this headline:

Czech Government Condemns Chinese Hack on Critical Infrastructure Read More »

Russian Government Hackers Caught Buying Passwords from Cybercriminals

Data Breaches, Microsoft, Nation-State, NATO, phishing, Russia, Ukraine, Void Blizzard / SecurityTicks

Russian Government Hackers Caught Buying Passwords from Cybercriminals 2025-05-27 at 18:01 By Ryan Naraine Microsoft flags a new Kremlin hacking team buying stolen usernames and passwords from infostealer markets for use in cyberespionage attacks. The post Russian Government Hackers Caught Buying Passwords from Cybercriminals appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

React to this headline:

Russian Government Hackers Caught Buying Passwords from Cybercriminals Read More »

Dutch Intelligence Agencies Say Russian Hackers Stole Police Data in Cyberattack

Nation-State, Netherlands, Russia / SecurityTicks

Dutch Intelligence Agencies Say Russian Hackers Stole Police Data in Cyberattack 2025-05-27 at 16:48 By Associated Press The agencies said that the group, which they called Laundry Bear, is actively trying to steal sensitive data from EU and NATO countries and is “extremely likely Russian state supported.” The post Dutch Intelligence Agencies Say Russian Hackers

React to this headline:

Dutch Intelligence Agencies Say Russian Hackers Stole Police Data in Cyberattack Read More »

CISA Says Russian Hackers Targeting Western Supply-Lines to Ukraine

APT28, CISA, Malware & Threats, Nation-State, Russia, Ukraine, Unit 26165, Vulnerabilities / SecurityTicks

CISA Says Russian Hackers Targeting Western Supply-Lines to Ukraine 2025-05-21 at 23:47 By Ryan Naraine Russian military intelligence hackers intensify targeting of Western logistics and technology companies moving supplies into Ukraine. The post CISA Says Russian Hackers Targeting Western Supply-Lines to Ukraine appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original

React to this headline:

CISA Says Russian Hackers Targeting Western Supply-Lines to Ukraine Read More »

Chinese Hackers Hit Drone Sector in Supply Chain Attacks

China APT, drone, Featured, Nation-State, supply chain, Supply Chain Security / SecurityTicks

Chinese Hackers Hit Drone Sector in Supply Chain Attacks 2025-05-15 at 14:39 By Ionut Arghire The China-linked hacking group Earth Ammit has launched multi-wave attacks in Taiwan and South Korea to disrupt the drone sector. The post Chinese Hackers Hit Drone Sector in Supply Chain Attacks appeared first on SecurityWeek. This article is an excerpt

React to this headline:

Chinese Hackers Hit Drone Sector in Supply Chain Attacks Read More »

Output Messenger Zero-Day Exploited by Turkish Hackers for Iraq Spying

exploited, Iraq, Nation-State, Output Messenger, Turkey, Zero-Day / SecurityTicks

Output Messenger Zero-Day Exploited by Turkish Hackers for Iraq Spying 2025-05-13 at 14:04 By Ionut Arghire A Turkey-affiliated espionage group has exploited a zero-day vulnerability in Output Messenger since April 2024. The post Output Messenger Zero-Day Exploited by Turkish Hackers for Iraq Spying appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View

React to this headline:

Output Messenger Zero-Day Exploited by Turkish Hackers for Iraq Spying Read More »

White House Proposal Slashes Half-Billion from CISA Budget

budget, CISA, CVE, DHS, Government, Incident Response, Nation-State, RSA Conference / SecurityTicks

White House Proposal Slashes Half-Billion from CISA Budget 2025-05-05 at 18:31 By Ryan Naraine The proposed $491 million cut is being positioned as a “refocusing”of CISA on its core mission “while eliminating weaponization and waste.” The post White House Proposal Slashes Half-Billion from CISA Budget appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

White House Proposal Slashes Half-Billion from CISA Budget Read More »

France Blames Russia for Cyberattacks on Dozen Entities

APT28, cyberespionage, France, Nation-State, Russia / SecurityTicks

France Blames Russia for Cyberattacks on Dozen Entities 2025-04-30 at 13:20 By Ionut Arghire France says the Russian state-sponsored group APT28 is responsible for targeting or compromising a dozen French entities. The post France Blames Russia for Cyberattacks on Dozen Entities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

React to this headline:

France Blames Russia for Cyberattacks on Dozen Entities Read More »

South Korean Companies Targeted by Lazarus via Watering Hole Attacks, Zero-Days

Lazarus, Nation-State, North Korea, South Korea, watering hole, Zero-Day / SecurityTicks

South Korean Companies Targeted by Lazarus via Watering Hole Attacks, Zero-Days 2025-04-25 at 14:31 By Ionut Arghire Multiple South Korean organizations across industries have been targeted in a recent Lazarus campaign dubbed Operation SyncHole. The post South Korean Companies Targeted by Lazarus via Watering Hole Attacks, Zero-Days appeared first on SecurityWeek. This article is an

React to this headline:

South Korean Companies Targeted by Lazarus via Watering Hole Attacks, Zero-Days Read More »

Microsoft Purges Dormant Azure Tenants, Rotates Keys to Prevent Repeat Nation-State Hack

Azure, Charlie Bell, China, Data Breaches, Microsoft, Nation-State, Russia, Security Infrastructure, SFI / SecurityTicks

Microsoft Purges Dormant Azure Tenants, Rotates Keys to Prevent Repeat Nation-State Hack 2025-04-21 at 22:47 By Ryan Naraine Microsoft security chief Charlie Bell says the SFI’s 28 objectives are “near completion” and that 11 others have made “significant progress.” The post Microsoft Purges Dormant Azure Tenants, Rotates Keys to Prevent Repeat Nation-State Hack appeared first

React to this headline:

Microsoft Purges Dormant Azure Tenants, Rotates Keys to Prevent Repeat Nation-State Hack Read More »

Countries Shore Up Their Digital Defenses as Global Tensions Raise the Threat of Cyberwarfare

cyberwar, Cyberwarfare, Government, Nation-State / SecurityTicks

Countries Shore Up Their Digital Defenses as Global Tensions Raise the Threat of Cyberwarfare 2025-04-21 at 14:25 By Associated Press Countries around the world are preparing for greater digital conflict as increasing global tensions and a looming trade war have raised the stakes. The post Countries Shore Up Their Digital Defenses as Global Tensions Raise

React to this headline:

Countries Shore Up Their Digital Defenses as Global Tensions Raise the Threat of Cyberwarfare Read More »

Chinese APT Mustang Panda Updates, Expands Arsenal

APT, China, Malware, Mustang Panda, Nation-State / SecurityTicks

Chinese APT Mustang Panda Updates, Expands Arsenal 2025-04-17 at 14:05 By Ionut Arghire The Chinese state-sponsored group Mustang Panda has used new and updated malicious tools in a recent attack. The post Chinese APT Mustang Panda Updates, Expands Arsenal appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source React to

React to this headline:

Chinese APT Mustang Panda Updates, Expands Arsenal Read More »

China Pursuing 3 Alleged US Operatives Over Cyberattacks During Asian Games

China, Featured, Nation-State, NSA / SecurityTicks

China Pursuing 3 Alleged US Operatives Over Cyberattacks During Asian Games 2025-04-15 at 14:01 By Associated Press China accuses three alleged U.S. NSA operatives of cyberattacks targeting critical infrastructure and the Asian Games in Harbin. The post China Pursuing 3 Alleged US Operatives Over Cyberattacks During Asian Games appeared first on SecurityWeek. This article is

React to this headline:

China Pursuing 3 Alleged US Operatives Over Cyberattacks During Asian Games Read More »

China Admitted to US That It Conducted Volt Typhoon Attacks: Report

China, critical infrastructure, Featured, Government, Nation-State, US, Volt Typhoon / SecurityTicks

China Admitted to US That It Conducted Volt Typhoon Attacks: Report 2025-04-11 at 13:14 By Eduard Kovacs In a secret meeting between Chinese and US officials, the former confirmed conducting cyberattacks on US infrastructure. The post China Admitted to US That It Conducted Volt Typhoon Attacks: Report appeared first on SecurityWeek. This article is an

React to this headline:

China Admitted to US That It Conducted Volt Typhoon Attacks: Report Read More »

North Korea’s IT Operatives Are Exploiting Remote Work Globally

cybercrime, Nation-State, North Korea / SecurityTicks

North Korea’s IT Operatives Are Exploiting Remote Work Globally 2025-04-02 at 16:32 By Kevin Townsend The global rise of North Korean IT worker infiltration poses a serious cybersecurity risk—using fake identities, remote access, and extortion to compromise organizations. The post North Korea’s IT Operatives Are Exploiting Remote Work Globally appeared first on SecurityWeek. This article

React to this headline:

North Korea’s IT Operatives Are Exploiting Remote Work Globally Read More »

Lazarus Uses ClickFix Tactics in Fake Cryptocurrency Job Attacks

ClickFix, Cryptocurrency, Nation-State, North Korea / SecurityTicks

Lazarus Uses ClickFix Tactics in Fake Cryptocurrency Job Attacks 2025-04-02 at 13:50 By Ionut Arghire North Korea’s Lazarus hackers are using the ClickFix technique for malware deployment in fresh attacks targeting the cryptocurrency ecosystem. The post Lazarus Uses ClickFix Tactics in Fake Cryptocurrency Job Attacks appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

Lazarus Uses ClickFix Tactics in Fake Cryptocurrency Job Attacks Read More »