Critical Systems
UK and Europe hit by wave of fridge hacks as thousands more systems remain exposed
Unknown attackers turn up the heat across the Continent, leaving a trail of ruined food in their wake.
Cyberwar
Cyberwar
"Mutually assured deception": Hackers hijack Ukrainian and Russian emergency alert apps
"The aim is to generate confusion, create panic and make people doubt the very systems that are there to protect them."
Cyberwar
Five Eyes exposes Chinese hacking network as researchers warn of AI cyberwar arms race
"We will continue to call out malicious actors and the malevolent ecosystem they operate in," GCHQ's cybersecurity wing vows.
Security
Iranian spyware campaign uses low-tech tricks to ensnare high-value targets
"We love to romanticize nation-state operations as digital wizardry, but it’s often just convincing fake profiles and low-budget spyware payloads."
Critical Infrastructure
FBI smashes "Chinese state-linked botnet platform" targeting US critical infrastructure
"We’re looking at a persistent, organized, and sustained effort to get inside the institutions that keep the country running."
Government
UK builds experimental AI surveillance system using buried fibre-optic cables
Underground listening network will be used to protect military bases from both protesters and "hostile actors trying to gain intelligence".
Security
The Medusa crime gang has evolved into a ransomware-as-a-service Hydra, FBI warns
The monster has now grown many heads and sits at the center of a fast-growing criminal ecosystem.
Security
Security firms hit back at Trump’s call to hack back against international crime gangs
"The United States will use all instruments of national power, including the innovative capabilities of the private sector, to combat cybercrime."
Security
North Korea's Lazarus Group hits defense sector with zero-day hidden in fake "dream job" offers
"What makes this campaign dangerous is the weaving of legitimate, trusted infrastructure into every stage of the attack."
Security
The questions security teams should be asking about China's "Mythos rival" TuLongFeng
Black Duck's Collin Hogue-Spears decodes the debate over whether China's new AI vulnerability finder rivals Anthropic's US-made bug hunter.
Security
Russian "Laundry Bear" threat actor rinses Western victims with zero-click exploit
Intelligence agencies get lathered up about a Moscow-linked espionage group also tracked as Void Blizzard.
Security
Hollowgraph malware turns Microsoft 365 calendars into secret-stealing "dead drop"
Command-and-control tool targets Israeli entities and shares technical similarities with a backdoor previously linked to an Iranian threat actor.