Experimental News Clipping Site

Tag: espionage operations

  • The Register: If you thought China’s Salt Typhoon was booted off critical networks, think again

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/08/28/china_salt_typhoon_alert/ Source: The Register Title: If you thought China’s Salt Typhoon was booted off critical networks, think again Feedly Summary: 13 governments sound the alarm about ongoing unpleasantness China’s Salt Typhoon cyberspies continue their years-long hacking campaign targeting critical industries around the world, according to a joint security alert from cyber and law…

  • The Register: New Russian cyber-spy crew Laundry Bear joins the email-stealing pack

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/05/27/new_russian_cyberspy_crew_laundry_bear/ Source: The Register Title: New Russian cyber-spy crew Laundry Bear joins the email-stealing pack Feedly Summary: Dutch intel services, Microsoft go big-game hunting A previously unknown Kremlin-linked group has conducted cyber-espionage operations against Dutch police, NATO member states, Western tech companies, and other organizations of interest to the Russian government since at…

  • Microsoft Security Blog: New Russia-affiliated actor Void Blizzard targets critical sectors for espionage

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.microsoft.com/en-us/security/blog/2025/05/27/new-russia-affiliated-actor-void-blizzard-targets-critical-sectors-for-espionage/ Source: Microsoft Security Blog Title: New Russia-affiliated actor Void Blizzard targets critical sectors for espionage Feedly Summary: Microsoft Threat Intelligence has discovered a cluster of worldwide cloud abuse activity conducted by a threat actor we track as Void Blizzard, who we assess with high confidence is Russia-affiliated and has been active since…

  • Cloud Blog: Cybercrime: A Multifaceted National Security Threat

    —

    by

    Kurt Seifried
    in

    Source URL: https://cloud.google.com/blog/topics/threat-intelligence/cybercrime-multifaceted-national-security-threat/ Source: Cloud Blog Title: Cybercrime: A Multifaceted National Security Threat Feedly Summary: Executive Summary Cybercrime makes up a majority of the malicious activity online and occupies the majority of defenders’ resources. In 2024, Mandiant Consulting responded to almost four times more intrusions conducted by financially motivated actors than state-backed intrusions. Despite this…

  • Cloud Blog: ScatterBrain: Unmasking the Shadow of PoisonPlug’s Obfuscator

    —

    by

    Kurt Seifried
    in

    Source URL: https://cloud.google.com/blog/topics/threat-intelligence/scatterbrain-unmasking-poisonplug-obfuscator/ Source: Cloud Blog Title: ScatterBrain: Unmasking the Shadow of PoisonPlug’s Obfuscator Feedly Summary: Written by: Nino Isakovic Introduction Since 2022, Google Threat Intelligence Group (GTIG) has been tracking multiple cyber espionage operations conducted by China-nexus actors utilizing POISONPLUG.SHADOW. These operations employ a custom obfuscating compiler that we refer to as “ScatterBrain," facilitating…

  • Slashdot: US Sanctions Chinese Firm, Hacker Behind Telecom and Treasury Hacks

    —

    by

    Kurt Seifried
    in

    Source URL: https://yro.slashdot.org/story/25/01/17/2125214/us-sanctions-chinese-firm-hacker-behind-telecom-and-treasury-hacks?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: US Sanctions Chinese Firm, Hacker Behind Telecom and Treasury Hacks Feedly Summary: AI Summary and Description: Yes Summary: The U.S. Department of the Treasury has sanctioned Yin Kecheng and Sichuan Juxinhe Network Technology Co. due to their involvement in cyber espionage operations targeting U.S. telecommunications, highlighting critical security concerns…

  • Microsoft Security Blog: Frequent freeloader part I: Secret Blizzard compromising Storm-0156 infrastructure for espionage

    —

    by

    system automation
    in

    Source URL: https://www.microsoft.com/en-us/security/blog/2024/12/04/frequent-freeloader-part-i-secret-blizzard-compromising-storm-0156-infrastructure-for-espionage/ Source: Microsoft Security Blog Title: Frequent freeloader part I: Secret Blizzard compromising Storm-0156 infrastructure for espionage Feedly Summary: Microsoft has observed Secret Blizzard compromising the infrastructure and backdoors of the Pakistan-based threat actor we track as Storm-0156 for espionage against the Afghanistan government and Indian Army targets. The post Frequent freeloader part…

  • Cloud Blog: Emerging Threats: Cybersecurity Forecast 2025

    —

    by

    system automation
    in

    Source URL: https://cloud.google.com/blog/topics/threat-intelligence/cybersecurity-forecast-2025/ Source: Cloud Blog Title: Emerging Threats: Cybersecurity Forecast 2025 Feedly Summary: Every November, we start sharing forward-looking insights on threats and other cybersecurity topics to help organizations and defenders prepare for the year ahead. The Cybersecurity Forecast 2025 report, available today, plays a big role in helping us accomplish this mission. This…