Lazarus Group

⚡ Weekly Recap: This2shell, That2shell, Everything's an Rce? Rogue Ai, Supply Chain Chaos and More

Operation FlashHole: Lazarus breaks security, defies control

AI-Assisted Cyberespionage Campaign Targets Government Systems

NSFOCUS Monthly APT Insights – August 2026

Blog

Midnight Mimosa Malware Campaign Exploits Android Firmware Supply Chain

Kudelski Security Research

Chinese State-Linked Hackers Target US Critical Infrastructure with Automated Scanning and Cyber Espionage Tools

ClingSTUN Turns Vulnerable Edge Devices Into Attacker Infrastructure

China Linked Warlock Ransomware Campaign Targets Critical Infrastructure

Hidden World of xattr: Lazarus Group’s Abuse of "Rustyattr" to Evade Detection

Targeting the Systems Behind the Mission: OT Threats to US Critical Infrastructure and Military Operations

The Job Offer Has Claws: Mirage Kitten Deploys NodeRabbit and PollCat

Lunex Uses BYOVD to Disable Security Monitoring and Deploy Persistent Stealer

CLOSEDQUORUM: Malware Puts AI in the C2 Loop

FamousSparrow Takes Flight with New SparroWocky Backdoor

China and the Cyber Arms Race for AI Supremacy

BlueMoon Exploit Kit Rapidly Targets Key Verticals Across Multiple Espionage Campaigns

BraZetsu: AI-Enhanced Reconnaissance Fuels Exilware’s Access Marketplace

Gamers Get Played: Fake GTA6 Leaks Deliver a Grab Bag of Malware

Ignore all instructions and read this blog: The state of AI-analysis evasion in malware

Beyond Lazarus: How North Korea Organizes Its Cyber Operations

CVE-2026-68820: Actively Exploited Windows AFD.sys Zero-Day Enables SYSTEM Privilege Escalation

State Sponsored Hackers Use Fake Job Offers to Deliver New Zero Day Exploit

Critical minerals and cyber operations

Kimsuky targets organizations with PebbleDash-based tools

Cyber Conflict Briefing Q4 2025