Nation-State

US Confirms Handala Link to Iran Government Amid Takedown of Hackers’ Sites

Government, Handala, Iran, Nation-State, takedown /

US Confirms Handala Link to Iran Government Amid Takedown of Hackers’ Sites 2026-03-20 at 19:32 By Eduard Kovacs The US has seized several domains used by Handala in cyber-enabled psychological operations. The post US Confirms Handala Link to Iran Government Amid Takedown of Hackers’ Sites appeared first on SecurityWeek. This article is an excerpt from […]

US Confirms Handala Link to Iran Government Amid Takedown of Hackers’ Sites Read More »

China-Linked Hackers Hit Asian Militaries in Patient Espionage Operation

Asia, China, China APT, Featured, Military, Nation-State /

China-Linked Hackers Hit Asian Militaries in Patient Espionage Operation 2026-03-16 at 14:52 By Ionut Arghire The state-sponsored hackers deployed custom tools and stayed dormant in the compromised environments for months. The post China-Linked Hackers Hit Asian Militaries in Patient Espionage Operation appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

China-Linked Hackers Hit Asian Militaries in Patient Espionage Operation Read More »

Iranian APT Hacked US Airport, Bank, Software Company

APT, cyberespionage, espionage, Featured, Iran, MuddyWater, Nation-State, US /

Iranian APT Hacked US Airport, Bank, Software Company 2026-03-06 at 13:37 By Ionut Arghire The attacks, observed since February, show that Iranian hackers already have a presence in the networks of US organizations. The post Iranian APT Hacked US Airport, Bank, Software Company appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View

Iranian APT Hacked US Airport, Bank, Software Company Read More »

Iran Cyber Front: Hacktivist Activity Rises, but State-Sponsored Attacks Stay Low

cyberattack, Cyberwarfare, Featured, Hacktivism, Hacktivists, Iran, Israel, Nation-State, US /

Iran Cyber Front: Hacktivist Activity Rises, but State-Sponsored Attacks Stay Low 2026-03-03 at 15:07 By Eduard Kovacs The cybersecurity industry is monitoring the landscape and says many of the big claims made by hacktivist groups remain unverified. The post Iran Cyber Front: Hacktivist Activity Rises, but State-Sponsored Attacks Stay Low appeared first on SecurityWeek. This

Iran Cyber Front: Hacktivist Activity Rises, but State-Sponsored Attacks Stay Low Read More »

Google Disrupts Chinese Cyberespionage Campaign Targeting Telecoms, Governments

China APT, cyberespionage, disrupted, espionage, GridTide, Malware, Malware & Threats, Nation-State, telecoms /

Google Disrupts Chinese Cyberespionage Campaign Targeting Telecoms, Governments 2026-02-25 at 18:01 By Eduard Kovacs The UNC2814 threat actor has been active since at least 2017, targeting organizations across 42 countries.  The post Google Disrupts Chinese Cyberespionage Campaign Targeting Telecoms, Governments appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Google Disrupts Chinese Cyberespionage Campaign Targeting Telecoms, Governments Read More »

Taiwan Security Firm Confirms Flaw Flagged by CISA Likely Exploited by Chinese APTs

China APT, CISA KEV, exploited, Featured, Nation-State, supply chain attack, Taiwan, TeamT5, Vulnerabilities /

Taiwan Security Firm Confirms Flaw Flagged by CISA Likely Exploited by Chinese APTs 2026-02-24 at 14:00 By Eduard Kovacs The vulnerability in TeamT5 ThreatSonar Anti-Ransomware was recently added to CISA’s KEV catalog. The post Taiwan Security Firm Confirms Flaw Flagged by CISA Likely Exploited by Chinese APTs appeared first on SecurityWeek. This article is an

Taiwan Security Firm Confirms Flaw Flagged by CISA Likely Exploited by Chinese APTs Read More »

Cyberspy Group Hacked Governments and Critical Infrastructure in 37 Countries

China, China APT, critical infrastructure, Government, Malware & Threats, Nation-State, rootkit, Shadow Campaigns /

Cyberspy Group Hacked Governments and Critical Infrastructure in 37 Countries 2026-02-05 at 13:02 By Eduard Kovacs Palo Alto Networks has not attributed the APT activity to any specific country, but evidence points to China. The post Cyberspy Group Hacked Governments and Critical Infrastructure in 37 Countries appeared first on SecurityWeek. This article is an excerpt

Cyberspy Group Hacked Governments and Critical Infrastructure in 37 Countries Read More »

Cyber Insights 2026: Cyberwar and Rising Nation State Threats

China, cyberwar, Cyberwarfare, Featured, geopolitical, Geopolitics, Nation-State, Russia /

Cyber Insights 2026: Cyberwar and Rising Nation State Threats 2026-02-04 at 15:31 By Kevin Townsend While both cyberwar and cyberwarfare will increase through 2026, cyberwarfare is likely to increase more dramatically. We hope it will never boil over – but we should be aware of the possibility and its consequences. The post Cyber Insights 2026:

Cyber Insights 2026: Cyberwar and Rising Nation State Threats Read More »

Russia’s APT28 Rapidly Weaponizes Newly Patched Office Vulnerability 

APT, APT28, exploited, Featured, Malware & Threats, Nation-State, Office, Russia, Vulnerabilities /

Russia’s APT28 Rapidly Weaponizes Newly Patched Office Vulnerability  2026-02-03 at 15:15 By Eduard Kovacs The attacks targeting Europe were analyzed by Ukraine’s CERT-UA and the cybersecurity company Zscaler. The post Russia’s APT28 Rapidly Weaponizes Newly Patched Office Vulnerability  appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Russia’s APT28 Rapidly Weaponizes Newly Patched Office Vulnerability  Read More »

Russian Sandworm Hackers Blamed for Cyberattack on Polish Power Grid

energy, ICS, ICS/OT, Malware, Malware & Threats, Nation-State, poland, power grid, Sandworm /

Russian Sandworm Hackers Blamed for Cyberattack on Polish Power Grid 2026-01-26 at 10:55 By Ionut Arghire 10 years after disrupting the Ukrainian power grid, the APT targeted Poland with data-wiping malware. The post Russian Sandworm Hackers Blamed for Cyberattack on Polish Power Grid appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View

Russian Sandworm Hackers Blamed for Cyberattack on Polish Power Grid Read More »

New Reports Reinforce Cyberattack’s Role in Maduro Capture Blackout

blackout, cyberattack, disruption, Featured, Government, ICS, ICS/OT, Nation-State, power grid, power outage, Venezuela /

New Reports Reinforce Cyberattack’s Role in Maduro Capture Blackout 2026-01-19 at 14:49 By Eduard Kovacs US officials told The New York Times that cyberattacks were used to turn off the lights in Caracas and disrupt air defense radars. The post New Reports Reinforce Cyberattack’s Role in Maduro Capture Blackout appeared first on SecurityWeek. This article

New Reports Reinforce Cyberattack’s Role in Maduro Capture Blackout Read More »

UK Government Acknowledges It Is Investigating Cyber Incident After Media Reports

China, China APT, Cyberwarfare, espionage, Government, Nation-State, UK, UK Government /

UK Government Acknowledges It Is Investigating Cyber Incident After Media Reports 2025-12-22 at 15:09 By Associated Press The British government is investigating a “cyber incident” following news reports that hackers linked to China have gained access to thousands of confidential documents. The post UK Government Acknowledges It Is Investigating Cyber Incident After Media Reports appeared

UK Government Acknowledges It Is Investigating Cyber Incident After Media Reports Read More »

Chinese APT ‘LongNosedGoblin’ Targeting Asian Governments

China, China APT, espionage, LongNosedGoblin, Malware & Threats, Nation-State /

Chinese APT ‘LongNosedGoblin’ Targeting Asian Governments 2025-12-19 at 16:42 By Ionut Arghire The hacking group has been using Group Policy to deploy cyberespionage tools on governmental networks. The post Chinese APT ‘LongNosedGoblin’ Targeting Asian Governments appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Chinese APT ‘LongNosedGoblin’ Targeting Asian Governments Read More »

North Korea’s Digital Surge: $2B Stolen in Crypto as Amazon Blocks 1,800 Fake IT Workers

Amazon, cryptocurrency heist, fake IT workers, Nation-State, North Korea, report /

North Korea’s Digital Surge: $2B Stolen in Crypto as Amazon Blocks 1,800 Fake IT Workers 2025-12-19 at 12:14 By Eduard Kovacs Data from Chainalysis and Amazon offers a glimpse into North Korea’s cyber activities surrounding cryptocurrency theft and fake IT workers. The post North Korea’s Digital Surge: $2B Stolen in Crypto as Amazon Blocks 1,800

North Korea’s Digital Surge: $2B Stolen in Crypto as Amazon Blocks 1,800 Fake IT Workers Read More »

Amazon: Russian Hackers Now Favor Misconfigurations in Critical Infrastructure Attacks

Amazon, APT, critical infrastructure, Malware & Threats, Nation-State, Russia, Sandworm /

Amazon: Russian Hackers Now Favor Misconfigurations in Critical Infrastructure Attacks 2025-12-16 at 15:25 By Eduard Kovacs After years of exploiting zero-day and n-day vulnerabilities, Russian state-sponsored threat actors are shifting to misconfigured devices. The post Amazon: Russian Hackers Now Favor Misconfigurations in Critical Infrastructure Attacks appeared first on SecurityWeek. This article is an excerpt from

Amazon: Russian Hackers Now Favor Misconfigurations in Critical Infrastructure Attacks Read More »

US Organizations Warned of Chinese Malware Used for Long-Term Persistence

BrickStorm, China APT, CISA, Malware, Malware & Threats, Nation-State, Warp Panda /

US Organizations Warned of Chinese Malware Used for Long-Term Persistence 2025-12-05 at 16:35 By Ionut Arghire Warp Panda has been using the BrickStorm, Junction, and GuestConduit malware in attacks against US organizations. The post US Organizations Warned of Chinese Malware Used for Long-Term Persistence appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

US Organizations Warned of Chinese Malware Used for Long-Term Persistence Read More »

Reporters Without Borders Targeted by Russian Hackers

APT, Malware & Threats, Nation-State, Reporters Without Borders, RSF, Russia, Star Blizzard /

Reporters Without Borders Targeted by Russian Hackers 2025-12-04 at 17:06 By Ionut Arghire The state-sponsored hackers relied on phishing emails to deliver a malicious payload to Reporters Without Borders (RSF). The post Reporters Without Borders Targeted by Russian Hackers appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Reporters Without Borders Targeted by Russian Hackers Read More »

Chinese Cyberspies Deploy ‘BadAudio’ Malware via Supply Chain Attacks

APT, BadAudio, China, China APT, Malware, Malware & Threats, Nation-State, supply chain /

Chinese Cyberspies Deploy ‘BadAudio’ Malware via Supply Chain Attacks 2025-11-21 at 13:46 By Ionut Arghire APT24 has been relying on various techniques to drop the BadAudio downloader and then deploy additional payloads. The post Chinese Cyberspies Deploy ‘BadAudio’ Malware via Supply Chain Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View

Chinese Cyberspies Deploy ‘BadAudio’ Malware via Supply Chain Attacks Read More »

Over 50,000 Asus Routers Hacked in ‘Operation WrtHug’

Asus, China APT, espionage, Nation-State, Network Security, Operation WrtHug, router /

Over 50,000 Asus Routers Hacked in ‘Operation WrtHug’ 2025-11-20 at 15:31 By Ionut Arghire A Chinese threat actor is exploiting known vulnerabilities in discontinued Asus devices in an Operational Relay Box (ORB) facilitation campaign. The post Over 50,000 Asus Routers Hacked in ‘Operation WrtHug’ appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

Over 50,000 Asus Routers Hacked in ‘Operation WrtHug’ Read More »

Amazon Details Iran’s Cyber-Enabled Kinetic Attacks Linking Digital Spying to Physical Strikes

cyberwar, Cyberwarfare, Featured, Iran, kinetic, Nation-State /

Amazon Details Iran’s Cyber-Enabled Kinetic Attacks Linking Digital Spying to Physical Strikes 2025-11-19 at 20:16 By Eduard Kovacs Amazon threat intelligence experts have documented two cases in which Iran leveraged hacking to prepare for kinetic attacks. The post Amazon Details Iran’s Cyber-Enabled Kinetic Attacks Linking Digital Spying to Physical Strikes appeared first on SecurityWeek. This

Amazon Details Iran’s Cyber-Enabled Kinetic Attacks Linking Digital Spying to Physical Strikes Read More »

Scroll to Top