Hangzhou Xiongmai Technology admitted weak product passwords were partly to blame for last week's massive attack. A Chinese electronics manufacturer admitted that its products inadvertently contributed to last week's massive cyberattack that knocked popular Web services offline. On Friday, a…
China-nexus threat actors have exploited a VMware ESX zero-day to hide their tracks and chained PHP2Shell flaws with the “Fragnesia” Linux kernel bug to root servers and firewalls, cybersecurity researchers claim. Cisco has also confirmed that attackers are crashing its firewalls…
North Korean workers have been linked to two companies that support Russia’s military-industrial complex, according to a new investigation, documenting a network of Russian firms and individuals that disguise employment as education to circumvent sanctions. In a report released Thursday,…
The North Korea-linked Lazarus Group has been attributed to a cyber espionage campaign dubbed Operation FlashHole targeting at least three organizations in South Korea spanning the construction, software, and wire-communication equipment manufacturing sectors. According to Russian cybersecurity company Kaspersky, the…
The US cybersecurity agency CISA on Wednesday warned that hackers have been exploiting another VMware ESXi vulnerability in attacks. Tracked as CVE-2026-41709, the exploited flaw is described as a low-severity insufficient logging issue. It allows attackers logged in as administrators…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a security flaw impacting Broadcom VMware ESX to its Known Exploited Vulnerabilities (KEV) catalog, after CrowdStrike revealed that it had been weaponized by a China-nexus threat actor known as Warp…
Report says North Korea takes much of the wages earned by its workers who are sent to Russia under threat of retribution A Russian network of brokers sponsored by Pyongyang has taken North Koreans to work in Russia in exploitative…
When Your Home Router Becomes a Spy's Stepping Stone Here’s a scenario you probably haven’t thought about: that cheap Wi-Fi router in your living room, or a random IoT device you barely configured, quietly roped into a cyber-espionage campaign targeting…
UK, US and Dutch agencies have exposed Iranian state-linked spyware that uses personalized social engineering to compromise Windows devices and surveil dissidents, activists and journalists, capturing communications, files, audio and other sensitive data. Britain, the United States and the Netherlands…
By Denham Sadler on Oct 27 2026 11:53 AM The Australian government has sanctioned two North Korean companies over schemes involving workers using fake identities to secure jobs overseas, as US authorities launch a major crackdown on a network of operatives funnelling millions…
Campaigns tied to state actors and their cutouts.
An article joins this feed when it matches these terms. Each one is also a search of its own.