Security
Iranian spyware campaign uses low-tech tricks to ensnare high-value targets
"We love to romanticize nation-state operations as digital wizardry, but it’s often just convincing fake profiles and low-budget spyware payloads."
Cyberwar
Critical Infrastructure
FBI smashes "Chinese state-linked botnet platform" targeting US critical infrastructure
"We’re looking at a persistent, organized, and sustained effort to get inside the institutions that keep the country running."
Government
UK builds experimental AI surveillance system using buried fibre-optic cables
Underground listening network will be used to protect military bases from both protesters and "hostile actors trying to gain intelligence".
Security
The Medusa crime gang has evolved into a ransomware-as-a-service Hydra, FBI warns
The monster has now grown many heads and sits at the center of a fast-growing criminal ecosystem.
Security
Security firms hit back at Trump’s call to hack back against international crime gangs
"The United States will use all instruments of national power, including the innovative capabilities of the private sector, to combat cybercrime."
Security
North Korea's Lazarus Group hits defense sector with zero-day hidden in fake "dream job" offers
"What makes this campaign dangerous is the weaving of legitimate, trusted infrastructure into every stage of the attack."
Security
The questions security teams should be asking about China's "Mythos rival" TuLongFeng
Black Duck's Collin Hogue-Spears decodes the debate over whether China's new AI vulnerability finder rivals Anthropic's US-made bug hunter.
Security
Russian "Laundry Bear" threat actor rinses Western victims with zero-click exploit
Intelligence agencies get lathered up about a Moscow-linked espionage group also tracked as Void Blizzard.
Security
Hollowgraph malware turns Microsoft 365 calendars into secret-stealing "dead drop"
Command-and-control tool targets Israeli entities and shares technical similarities with a backdoor previously linked to an Iranian threat actor.
AI
Five Eyes orders "whole of society" response to AI security crisis set to erupt in "months"
Intelligence agencies fear frontier AI risk is about to undergo a rapid takeoff - requiring a profound technological and philosophical shift.
Critical Systems
Chinese IoT ‘kill switches’ could disable Britain’s critical systems and infrastructure, MPs warn
"When one country controls the overwhelming supply of a technology, that is by its nature a structural risk."
Cyberwar
Russia is secretly waging a cyberwar against the UK, GCHQ chief claims
Moscow-linked threat actors are allegedly targeting supply chains and critical infrastructure in undeclared hybrid warfare operations.