MuddyWater

AI-Assisted Cyberespionage Campaign Targets Government Systems

Cato CTRL™ Threat Brief: Middle East Escalation and Summary of Notable Iranian-Linked CVEs

Swallowtail: Russian Espionage Group Targets Defense Firms in Two NATO Countries

Blog

Midnight Mimosa Malware Campaign Exploits Android Firmware Supply Chain

Chinese State-Linked Hackers Target US Critical Infrastructure with Automated Scanning and Cyber Espionage Tools

Aoki: Infostealer Targets AI Coding Assistant Credentials

ClingSTUN Turns Vulnerable Edge Devices Into Attacker Infrastructure

China Linked Warlock Ransomware Campaign Targets Critical Infrastructure

중동을 겨냥한 MuddyWater APT 공격 연대기

MuddyWater: ClickFix to Telegram & PatchAgent Backdoor

Bucklog’s Machine: Inside a Kubernetes Scanning Fleet

CLOSEDQUORUM: Malware Puts AI in the C2 Loop

Targeting the Systems Behind the Mission: OT Threats to US Critical Infrastructure and Military Operations

Lunex Uses BYOVD to Disable Security Monitoring and Deploy Persistent Stealer

FamousSparrow Takes Flight with New SparroWocky Backdoor

China and the Cyber Arms Race for AI Supremacy

BlueMoon Exploit Kit Rapidly Targets Key Verticals Across Multiple Espionage Campaigns

Gamers Get Played: Fake GTA6 Leaks Deliver a Grab Bag of Malware

BraZetsu: AI-Enhanced Reconnaissance Fuels Exilware’s Access Marketplace

The Job Offer Has Claws: Mirage Kitten Deploys NodeRabbit and PollCat

Weekly Threat Landscape Digest – Week 28

Critical Langflow Vulnerability Exploited for Malicious Code Execution

Exposing Fox Tempest: A malware-signing service operation

NSFOCUS Monthly APT Insights – March 2026