Nation-State - Security Ticks

Chinese Spies Built Massive Botnet of IoT Devices to Target US, Taiwan Military

Black Lotus Labs, botnet, Flax Typhoon, Malware & Threats, Nation-State, Nosedive, Raptor Train, Sparrow / SecurityTicks

Chinese Spies Built Massive Botnet of IoT Devices to Target US, Taiwan Military 2024-09-18 at 20:16 By Ryan Naraine Black Lotus Labs estimates that more than 200,000 routers, network-attached storage servers, and IP cameras have been ensnared in the botnet. The post Chinese Spies Built Massive Botnet of IoT Devices to Target US, Taiwan Military […]

React to this headline:

Chinese Spies Built Massive Botnet of IoT Devices to Target US, Taiwan Military Read More »

DoJ: Chinese Man Used Spear-Phishing to Obtain Software From NASA, Military

charged, China, espionage, Military, NASA, Nation-State, spear-phishing / SecurityTicks

DoJ: Chinese Man Used Spear-Phishing to Obtain Software From NASA, Military 2024-09-17 at 13:01 By Ionut Arghire Chinese national Song Wu allegedly sent spear-phishing emails to NASA, Air Force, Navy, Army, and FAA employees. The post DoJ: Chinese Man Used Spear-Phishing to Obtain Software From NASA, Military appeared first on SecurityWeek. This article is an

React to this headline:

DoJ: Chinese Man Used Spear-Phishing to Obtain Software From NASA, Military Read More »

Apple Suddenly Drops NSO Group Spyware Lawsuit

apple, Featured, iOS, Nation-State, nso group, surveillance, Vulnerabilities, WhatApp / SecurityTicks

Apple Suddenly Drops NSO Group Spyware Lawsuit 2024-09-14 at 00:01 By Ryan Naraine Apple said there’s “too significant a risk” of exposing the anti-exploit work needed to fend off the very adversaries involved in the case. The post Apple Suddenly Drops NSO Group Spyware Lawsuit appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

Apple Suddenly Drops NSO Group Spyware Lawsuit Read More »

House Report Shows Chinese Cranes a Security Risk to US Ports

China, ICS/OT, Nation-State, port / SecurityTicks

House Report Shows Chinese Cranes a Security Risk to US Ports 2024-09-13 at 15:01 By Ionut Arghire A joint report from the Committees on China and Homeland Security warns of the security risks posed by Chinese cranes in US ports. The post House Report Shows Chinese Cranes a Security Risk to US Ports appeared first

React to this headline:

House Report Shows Chinese Cranes a Security Risk to US Ports Read More »

China-Linked Hackers Target Drone Makers

China APT, drone, Nation-State, Taiwan / SecurityTicks

China-Linked Hackers Target Drone Makers 2024-09-10 at 15:16 By Ionut Arghire A Chinese-speaking threat actor tracked as Tidrone has been targeting military and satellite industries in Taiwan. The post China-Linked Hackers Target Drone Makers appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source React to this headline:

React to this headline:

China-Linked Hackers Target Drone Makers Read More »

Predator Spyware Resurfaces With Fresh Infrastructure

intellexa, Nation-State, Predator, spyware / SecurityTicks

Predator Spyware Resurfaces With Fresh Infrastructure 2024-09-09 at 13:31 By Ionut Arghire Recorded Future observes renewed Predator spyware activity on fresh infrastructure after a drop caused by US sanctions. The post Predator Spyware Resurfaces With Fresh Infrastructure appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source React to

React to this headline:

Predator Spyware Resurfaces With Fresh Infrastructure Read More »

Russian GRU Unit Tied to Assassinations Now Linked to Global Cyber Sabotage and Espionage

Cyberwarfare, GRU 29155, HermeticWiper, Nation-State, Russia, Ukraine, whispergate / SecurityTicks

Russian GRU Unit Tied to Assassinations Now Linked to Global Cyber Sabotage and Espionage 2024-09-05 at 21:46 By Ryan Naraine A secretive Russian military unit, previously linked to assassinations and destabilization in Europe, is blamed for destructive wiper malware attacks in Ukraine. The post Russian GRU Unit Tied to Assassinations Now Linked to Global Cyber

React to this headline:

Russian GRU Unit Tied to Assassinations Now Linked to Global Cyber Sabotage and Espionage Read More »

Russian GRU Unit Tied to Assassinations Linked to Global Cyber Sabotage and Espionage

Cyberwarfare, Featured, GRU 29155, HermeticWiper, Nation-State, Russia, Ukraine, whispergate / SecurityTicks

Russian GRU Unit Tied to Assassinations Linked to Global Cyber Sabotage and Espionage 2024-09-05 at 21:46 By Ryan Naraine A secretive Russian military unit, previously linked to assassinations and destabilization in Europe, is blamed for destructive wiper malware attacks in Ukraine. The post Russian GRU Unit Tied to Assassinations Linked to Global Cyber Sabotage and

React to this headline:

Russian GRU Unit Tied to Assassinations Linked to Global Cyber Sabotage and Espionage Read More »

Google Catches Russian APT Reusing Exploits From Spyware Merchants NSO Group, Intellexa

APT29, Google Chrome, Malware & Threats, Midnight Blizzard, Nation-State, Nobelium, Russia / SecurityTicks

Google Catches Russian APT Reusing Exploits From Spyware Merchants NSO Group, Intellexa 2024-08-29 at 16:46 By Ryan Naraine Google TAG publishes evidence showing identical or striking similarities between exploits used by Russia’s APT29 and commercial spyware vendors. The post Google Catches Russian APT Reusing Exploits From Spyware Merchants NSO Group, Intellexa appeared first on SecurityWeek.

React to this headline:

Google Catches Russian APT Reusing Exploits From Spyware Merchants NSO Group, Intellexa Read More »

Censys Finds Hundreds of Exposed Servers as Volt Typhoon APT Targets ISPs, MSPs

CVE-2024-39717, Cyberwarfare, Nation-State, Versa Director, Volt Typhoon, Zero-Day / SecurityTicks

Censys Finds Hundreds of Exposed Servers as Volt Typhoon APT Targets ISPs, MSPs 2024-08-28 at 19:01 By Ryan Naraine Amidst Volt Typhoon zero-day exploitation, Censys finds hundreds of exposed servers presenting ripe attack surface for attackers. The post Censys Finds Hundreds of Exposed Servers as Volt Typhoon APT Targets ISPs, MSPs appeared first on SecurityWeek.

React to this headline:

Censys Finds Hundreds of Exposed Servers as Volt Typhoon APT Targets ISPs, MSPs Read More »

WPS Office Zero-Day Exploited by South Korea-Linked Cyberspies

exploited, Featured, Nation-State, South Korea, WPS Office, Zero-Day / SecurityTicks

WPS Office Zero-Day Exploited by South Korea-Linked Cyberspies 2024-08-28 at 18:01 By Eduard Kovacs A WPS Office zero-day vulnerability tracked as CVE⁠-⁠2024⁠-⁠7262 was exploited by South Korean hacker group APT-C-60. The post WPS Office Zero-Day Exploited by South Korea-Linked Cyberspies appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original

React to this headline:

WPS Office Zero-Day Exploited by South Korea-Linked Cyberspies Read More »

Rising Tides: Runa Sandvik on Creating Work that Makes a Difference

cybercrime, Management & Strategy, Nation-State / SecurityTicks

Rising Tides: Runa Sandvik on Creating Work that Makes a Difference 2024-08-28 at 14:31 By Jennifer Leggio Runa Sandvik is an inaugural member of CISA’s Technical Advisory Council and the Aspen Institute’s Global Cybersecurity Group, and a board member of the Signals Network. But she is so much more. The post Rising Tides: Runa Sandvik

React to this headline:

Rising Tides: Runa Sandvik on Creating Work that Makes a Difference Read More »

Chinese APT Volt Typhoon Caught Exploiting Versa Networks SD-WAN Zero-Day

Black Lotus Labs, China APT, Cyberwarfare, Featured, KV Botnet, Nation-State, Versa Director, Volt Typhoon / SecurityTicks

Chinese APT Volt Typhoon Caught Exploiting Versa Networks SD-WAN Zero-Day 2024-08-26 at 21:17 By Ryan Naraine Malware hunters catch Chinese APT Volt Typhoon exploiting a zero-day in Versa Director servers used by ISPs and MSPs. The post Chinese APT Volt Typhoon Caught Exploiting Versa Networks SD-WAN Zero-Day appeared first on SecurityWeek. This article is an

React to this headline:

Chinese APT Volt Typhoon Caught Exploiting Versa Networks SD-WAN Zero-Day Read More »

Iranian Hackers Targeted WhatsApp Accounts of Staffers in Biden, Trump Administrations, Meta Says

Election, Featured, Iran, Nation-State, Trump, WhatsApp / SecurityTicks

Iranian Hackers Targeted WhatsApp Accounts of Staffers in Biden, Trump Administrations, Meta Says 2024-08-25 at 19:46 By Associated Press Meta said it discovered a network of Iranian hackers, who posed as tech support agents for companies including AOL, Microsoft, Yahoo and Google. The post Iranian Hackers Targeted WhatsApp Accounts of Staffers in Biden, Trump Administrations,

React to this headline:

Iranian Hackers Targeted WhatsApp Accounts of Staffers in Biden, Trump Administrations, Meta Says Read More »

China-Linked ‘Velvet Ant’ Hackers Exploited Zero-Day to Deploy Malware on Cisco Nexus Switches

Cisco, Nation-State, Network Security, Vulnerabilities, vulnerability / SecurityTicks

China-Linked ‘Velvet Ant’ Hackers Exploited Zero-Day to Deploy Malware on Cisco Nexus Switches 2024-08-22 at 20:03 By Kevin Townsend Hackers gained access to the switch using valid administrator credentials, and then ‘jailbroke’ from the application level into the OS level. The post China-Linked ‘Velvet Ant’ Hackers Exploited Zero-Day to Deploy Malware on Cisco Nexus Switches

React to this headline:

China-Linked ‘Velvet Ant’ Hackers Exploited Zero-Day to Deploy Malware on Cisco Nexus Switches Read More »

US Intelligence Officials Say Iran is to Blame for Hacks Targeting Trump, Biden-Harris Campaigns

Cyberwarfare, Election, Iran, Nation-State, Trump / SecurityTicks

US Intelligence Officials Say Iran is to Blame for Hacks Targeting Trump, Biden-Harris Campaigns 2024-08-20 at 05:16 By Associated Press The assessment from agencies was the first time the U.S. government assigned blame for hacks that have raised anew the threat of foreign election interference. The post US Intelligence Officials Say Iran is to Blame

React to this headline:

US Intelligence Officials Say Iran is to Blame for Hacks Targeting Trump, Biden-Harris Campaigns Read More »

Google Disrupts Iranian Hacking Activity Targeting US Presidential Election

Election, Google, Iran, Nation-State, takedown / SecurityTicks

Google Disrupts Iranian Hacking Activity Targeting US Presidential Election 2024-08-15 at 16:32 By Ionut Arghire Google says it blocked Iranian APT42 hackers from accessing the personal email accounts of individuals affiliated with the US elections. The post Google Disrupts Iranian Hacking Activity Targeting US Presidential Election appeared first on SecurityWeek. This article is an excerpt

React to this headline:

Google Disrupts Iranian Hacking Activity Targeting US Presidential Election Read More »

Google Confirms an Iranian Group Is Trying to Access Emails Linked to Both US Presidential Campaigns

Election, Harris, Iran, Nation-State, Trump / SecurityTicks

Google Confirms an Iranian Group Is Trying to Access Emails Linked to Both US Presidential Campaigns 2024-08-15 at 13:46 By Associated Press Google said an Iranian hacking group has tried to infiltrate the personal email accounts of roughly a dozen people linked to President Joe Biden and former President Donald Trump since May. The post

React to this headline:

Google Confirms an Iranian Group Is Trying to Access Emails Linked to Both US Presidential Campaigns Read More »

Justice Department Disrupts North Korean ‘Laptop Farm’ Operation

KnowBe4, laptop farm, Matthew Isaac Knoot, Nation-State, North Korea, Tracking & Law Enforcement / SecurityTicks

Justice Department Disrupts North Korean ‘Laptop Farm’ Operation 2024-08-12 at 20:31 By Ryan Naraine Law enforcement authorities in the U.S. have arrested a Tennessee man accused of running a “laptop farm” that helped North Korean IT workers secure remote jobs at American companies. The post Justice Department Disrupts North Korean ‘Laptop Farm’ Operation appeared first

React to this headline:

Justice Department Disrupts North Korean ‘Laptop Farm’ Operation Read More »

Iran Is Accelerating Cyber Activity That Appears Meant to Influence the US Election, Microsoft Says

Election, Iran, Nation-State / SecurityTicks

Iran Is Accelerating Cyber Activity That Appears Meant to Influence the US Election, Microsoft Says 2024-08-09 at 16:31 By Associated Press Iranian actors have spent recent months creating fake news sites and impersonating activists, laying the groundwork to stoke division and potentially sway American voters this fall. The post Iran Is Accelerating Cyber Activity That

React to this headline:

Iran Is Accelerating Cyber Activity That Appears Meant to Influence the US Election, Microsoft Says Read More »