State‑Linked Operations

4+ hour ago   (709+ words) By Phil Pennington of RNZ North Korea has used an IT worker to clandestinely obtain remote work with a New Zealand business to earn foreign currency. This was revealed in the latest annual report from the National Cyber Security Centre…...

4+ hour, 38+ min ago   (312+ words) A North Korean IT worker used a fake identity to obtain remote work with a New Zealand company and then threatened to release sensitive information when exposed, Wellington's cybersecurity agency said Thursday. New Zealand's National Cyber Security Centre said the…...

1+ day, 7+ hour ago   (564+ words) New Windows Defender zero-day blocks Microsoft antivirus updates Check Point warns of Management Server zero-day exploited in attacks Rogue external MFA providers can steal passwords during logins Sweden fines Miljödata $183,000 over breach affecting 2.2 million Chinese hackers exploit WordPress, Zyxel flaws…...

1+ day, 11+ hour ago   (303+ words) UOC-KP “Patriarch” Nikodym Kobzar issued a statement reporting that the organization’s official Facebook pages had been hacked. The statement, dated September 22, 2026, was published on the Patriarch Nikodym of Kyiv Telegram channel. According to the document, the Facebook accounts of Nikodym…...

1+ day, 3+ hour ago   (336+ words) WaterPlum is targeting IT professionals in Japan, the US, Europe, and beyond, the FBI warns The Independent Security channel is brought to you by Bitdefender Hackers linked to North Korea have infected tens of thousands of job seekers’ devices across…...

1+ day, 9+ hour ago   (320+ words) Get our latest cybersecurity news first on Google. Volexity researchers spotted another state-aligned Chinese threat group exploiting a triple-link chain of zero-day vulnerabilities across multiple campaigns, the company said in a blog post Monday. The threat group it tracks as…...

1+ day, 14+ hour ago   (437+ words) North Korean hackers are using fake Terraform job tests to deploy macOS backdoors and target developer access to cloud infrastructure. A routine Terraform command is becoming an entry point for North Korean hackers targeting developers. TraderTraitor, a DPRK-linked threat actor,…...

1+ day, 19+ hour ago   (542+ words) A third Chinese threat actor has been linked to phishing campaigns that cloned trusted websites and chained Chrome and Windows zero-day exploits to deploy a previously undocumented backdoor. The activity occurred on September 3 and 4, 2026, while the targeted vulnerabilities remained unpatched…...

1+ day, 16+ hour ago   (314+ words) The sign, located on Interstate 405 near “Persian Square” in Westwood, a hub for a large portion of the Iranian diaspora in Los Angeles, displayed the URL of a website named “Gorkan” (Grave Digger) on September 8, according to U.S. media…...

1+ day, 22+ hour ago   (277+ words) Active since 2023, the APT group has expanded its operations into Russia, according to Kaspersky The hacker group NightEagle, also known as APT-Q-95, has expanded its operations and has begun targeting Russian companies. This is confirmed by a Kaspersky investigation, which…...