PlugX

AI-Assisted Cyberespionage Campaign Targets Government Systems

Midnight Mimosa Malware Campaign Exploits Android Firmware Supply Chain

Sekoia Honeypot Captures an Attack on GenAI Infrastructure

ORKL Report

Chinese State-Linked Hackers Target US Critical Infrastructure with Automated Scanning and Cyber Espionage Tools

ClingSTUN Turns Vulnerable Edge Devices Into Attacker Infrastructure

China Linked Warlock Ransomware Campaign Targets Critical Infrastructure

Ransomware Landscape in H1 2025: Statistics and Key Issues

Threat Actor Profile: APT27

Hunting Pandas

Lunex Uses BYOVD to Disable Security Monitoring and Deploy Persistent Stealer

Targeting the Systems Behind the Mission: OT Threats to US Critical Infrastructure and Military Operations

China and the Cyber Arms Race for AI Supremacy

BlueMoon Exploit Kit Rapidly Targets Key Verticals Across Multiple Espionage Campaigns

Gamers Get Played: Fake GTA6 Leaks Deliver a Grab Bag of Malware

BraZetsu: AI-Enhanced Reconnaissance Fuels Exilware’s Access Marketplace

The Job Offer Has Claws: Mirage Kitten Deploys NodeRabbit and PollCat

CLOSEDQUORUM: Malware Puts AI in the C2 Loop

FamousSparrow Takes Flight with New SparroWocky Backdoor

China-nexus Threat Actor Targets Arabian Gulf Region With PlugX

China-nexus UAT-11587 targets government and policy organizations across Asia with Antino backdoor

HoneyMyte CoolClient Rootkit Hooks Windows Nsiproxy to Conceal C2 Addresses

APT group HoneyMyte upgrades CoolClient: the backdoor gets a kernel-level Windows rootkit

Fake Roblox Cheat Streams Victims’ Desktops Every 500 Milliseconds

OctLurk and SilkLurk: newly identified tailored backdoors in cyber-espionage campaign in Central Asia

China-Linked Group Deploys Custom ASPX and ASHX Web Shells