North Korean threat actor Kimsuky is targeting U.S. entities with a new spearphishing campaign that leverages malicious QR codes to steal credentials.

Cisco Talos attributes a China-nexus APT tracked as UAT-8302 to attacks on South American governments since late 2024 and southeastern European agencies in 2025, with post-exploitation marked by deployment of custom malware. The group uses tools such as the .NET backdoor NetDraft (NosyDoor), CloudSorcerer, VShell and SNOWRUST, and appears to share...

Daily Recap, The daily briefing highlights a European Commission cloud breach caused by a compromised Trivy update and a stolen AWS key, with TeamPCP/ShinyHunters exfiltrating 91–92 GB of data from europa.eu clients. It also covers urgent Fortinet FortiClient EMS CVE-2026-35616 fixes, REvil affiliates UNKN and Daniil Shchukin linked to numerous attacks and €35.4 million in damages, a six-month DPRK-backed Drift heist, the Axios npm compromise attributed to UNC1069 (WAVESHAPER.V2), 36 malicious npm packages, React2Shell credential harvesting campaigns, device-code phishing via EvilTokens, QR phishing schemes, the Voxbeam robocall case, the NI Education Authority outage, LinkedIn BrowserGate, and ULP data-quality concerns for infostealer feeds. #Trivy #TeamPCP #ShinyHunters #EuropeanCommission #FortiClientEMS #CVE-2026-35616 #REvil #UNKN #DaniilShchukin #AnatolyKravchuk #Drift #UNC1069 #WAVESHAPER #Axios #React2Shell #EvilTokens #QRPhishing #Voxbeam #EducationAuthority #BrowserGate #ULPBurnout

Augur Security’s analysis shows a significant buildup of Iran-linked MOIS and IRGC cyber infrastructure in the six months before the February 28, 2026 US/Israeli strikes, enabling rapid post-strike operations against the US, Israel, and Gulf states. A coordinated surge of roughly 60 hacktivist groups and established APTs—using multi-tier hosting and shell-company...

Chinese hacking contractor iSoon supported three separate cyberespionage operations on behalf of Beijing, say security researchers who analyzed a leaked data trove

Latest Cybersecurity reports unveil two China-linked APT groups targeting ASEAN nations in cyberespionage campaign over the past 3 months.

Evasive Panda, a Chinese hacking group, has launched upgraded versions of their malware, Macma and Nightdoor, targeting macOS and Windows systems. These new variants offer enhanced evasion techniques ...