CVE-2026-1731 is an RCE vulnerability in identity platform BeyondTrust. This flaw allows attackers control of systems without login credentials.

Not to be confused with all the other reports of Chinese intruders on US networks that came to light this week RedNovember, a Chinese state-sponsored cyberspy group, targeted government and critical private-sector networks around the globe between June 2024 and July 2025, exploiting buggy internet-facing appliances to deploy a Go-based backdoor called Pantegana and other offensive security tools, including Cobalt Strike and SparkRAT.…

RedNovember, a likely Chinese state-sponsored cyber-espionage group, has targeted global government, defense, and tech sectors using advanced tools like Pantegana and Cobalt Strike. Discover the lates...

Not to be confused with all the other reports of Chinese intruders on US networks that came to light this week RedNovember, a Chinese state-sponsored cyberspy group, targeted government and critical private-sector networks around the globe between June 2024 and July 2025, exploiting buggy internet-facing appliances to deploy a Go-based backdoor called Pantegana and other offensive security tools, including Cobalt Strike and SparkRAT.…

has been operational since at least 2019 read more about Pakistan-Linked Hackers Expand Targets in India with CurlBack RAT and Spark RAT

CVE-2024-27198 and CVE-2024-27199 are vulnerabilities within the TeamCity On-Premises platform that can allow attackers to gain administrative control over affected systems.

State-sponsored hackers from China and Iran are leveraging AI to enhance their cyberattacks. An AI-powered messaging tool is leaking user data from Slack and Discord. A significant cyberattack targeted Smiths Group, a British engineering firm. Rockwell Automation disclosed critical vulnerabilities in their products. Researchers discovered new side-channel vulnerabilities affecting Apple CPUs. The Hellcat ransomware gang is focusing on victim humiliation. SparkRAT malware is targeting macOS users and government entities. Flashpoint analyzed the FleshStealer malware. Cybercriminals are exploiting the trust associated with government websites for phishing attacks. Ivan Novikov discussed a US ruling banning certain Chinese and Russian connected car technology imports.

これらの数字は、オンライン詐欺の深刻さを浮き彫りにしている。問題は、詐欺サイトへの取り締まりが強化されるにつれ、犯罪組織がサイバー空間を通じてユーザーや組織を直接攻撃する方向にシフトしていることである。

（DTTC）－カンボジアは、オンライン詐欺に関連する3億ドル以上の銀行口座を凍結し、約4,000人の容疑者が関与する446件の事件を裁判所に送致した。

At a Glance Actor/Group Unattributed cluster; low-confidence overlap with SilverFox-associated activity Activity Multi-stage malware campaign delivering SparkRAT via phishing lures and BYOVD Targets Individuals and organizations in Cambodia Scale Similar samples seen in the wild from late June through early August 2026 Status No law-enforcement action; tracked as an active research cluster Source Acronis Threat Research Unit (TRU) TL;DR A new Cambodia malware campaign hides its payloads inside PNG image files and installs a vulnerable driver to disable antivirus.

Individuals and organizations in Cambodia have emerged as the target of a new campaign that delivers an open-source remote access trojan (RAT) called Spark RAT. "The samples employ diverse lure themes, suggesting an effort to appeal to a broad range of potential victims. These include government notices, public health materials, real estate-related content, and other topics," Acronis Threat

YouTube video by nuricaps