Tag: espionage

5 Nations Alert: Critical Cisco Bug Used in Global Espionage Campaign

Feb 27, 2026 7:37 PM

Tags: cisco, espionage, exploit, flaw, hacker

Hackers exploited a critical Cisco SD-WAN flaw, prompting a rare joint warning from the US, UK, Australia, Canada, and New Zealand. The post 5 Nations Alert: Critical Cisco Bug Used in Global Espionage Campaign appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-cisco-sdwan-flaw-five-eyes-joint-warning/
Google Disrupts ‘Prolific’ and ‘Elusive’ China-Linked Global Hacking Campaign

Feb 26, 2026 2:40 PM

Tags: backdoor, china, cyber, espionage, google, hacking

UNC2814 hit 53 victims in 42 countries with novel backdoor in decade long cyber espionage operation First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/google-prolific-china-hacking/
China-linked hackers used Google Sheets to spy on telecoms and governments across 42 countries

Feb 26, 2026 1:44 PM

Tags: access, api, apt, china, cloud, communications, cyber, cyberespionage, data, defense, endpoint, espionage, google, government, group, hacker, infrastructure, intelligence, linux, mandiant, monitoring, network, phone, radius, service, spy, theft, threat, vpn

How Mandiant found it: The campaign came to light during a Mandiant Threat Defense investigation, when analysts flagged unusual activity on a CentOS server. A binary named xapt, designed to masquerade as the apt package manager on Debian-based Linux systems, had already escalated to root and was running shell commands to confirm its access level,…
Google GTIG disrupted China-linked APT UNC2814 halting attacks on 53 orgs in 42 countries

Feb 26, 2026 11:36 AM

Tags: apt, attack, china, cyber, espionage, google, government, group, infrastructure

Google and partners disrupted UNC2814, a suspected China-linked group that hacked 53 organizations across 42 countries. Google, with industry partners, disrupted the infrastructure of UNC2814, a suspected China-linked cyber espionage group that breached at least 53 organizations in 42 countries. The group has been active since at least 2017, and was spotted targeting governments and…
Hydra Saiga Espionage Campaign Targets Critical Utilities Using Telegram C2 for Data Theft

Feb 26, 2026 11:36 AM

Tags: control, cyber, data, espionage, government, infrastructure, theft

Hydra Saiga is running a long-running espionage campaign that abuses Telegram as command-and-control (C2) to infiltrate critical utilities in Central Asia and exfiltrate sensitive data from government and infrastructure networks. The first known Hydra Saiga activity dates to December 2024, when an executable named “Letter from the Permanent Representative of Turkmenistan to the UN addressed…
Google Disrupts Chinese Hacker Network Behind 53 Telecom, Gov’t Breaches

Feb 26, 2026 7:37 AM

Tags: breach, china, cyber, espionage, google, government, group, hacker, infrastructure, intelligence, mandiant, network, threat

Google and its partners have disrupted a major Chinese state-linked cyber espionage campaign that breached at least 53 telecommunications and government entities across 42 countries on four continents. The operation, led by Google Threat Intelligence Group (GTIG) alongside Mandiant and industry partners, dismantled the infrastructure of a suspected People’s Republic of China (PRC) nexus group…
Google catches Beijing spies using Sheets to spread espionage across 4 continents

Feb 25, 2026 10:37 PM

Tags: espionage, google, government

UNC2814 historically targets governments and telcos First seen on theregister.com Jump to article: www.theregister.com/2026/02/25/google_and_friends_disrupt_unc2814/
Google Disrupts UNC2814 GRIDTIDE Campaign After 53 Breaches Across 42 Countries

Feb 25, 2026 8:37 PM

Tags: breach, china, cyber, espionage, google, government, group, infrastructure, international, usa

Google on Wednesday disclosed that it worked with industry partners to disrupt the infrastructure of a suspected China-nexus cyber espionage group tracked as UNC2814 that breached at least 53 organizations across 42 countries.”This prolific, elusive actor has a long history of targeting international governments and global telecommunications organizations across Africa, Asia, and the Americas,” First…
Chinese cyberspies breached dozens of telecom firms, govt agencies

Feb 25, 2026 6:36 PM

Tags: api, attack, china, espionage, google, government, group, intelligence, malicious, mandiant, saas, threat

Google’s Threat Intelligence Group (GTIG), Mandiant, and partners disrupted a global espionage campaign attributed to a suspected Chinese threat actor that used SaaS API calls to hide malicious traffic in attacks targeting telecom and government networks. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/chinese-cyberspies-breached-dozens-of-telecom-firms-govt-agencies/
Chinese prosecutors raise alarm about growth of domestic IP theft

Feb 25, 2026 4:37 PM

Tags: china, espionage, leak, technology, theft

China’s top prosecutorial agency said authorities have handled hundreds of domestic cases involving commercial espionage and technology leaks since 2021. First seen on therecord.media Jump to article: therecord.media/china-domestic-ip-theft-crackdown
Operation Olalampo: MuddyWater Unleashes AI-Assisted Rust Malware and Telegram C2 in MENA Espionage Surge

Feb 24, 2026 5:00 AM

Tags: ai, espionage, malware, rust

The post Operation Olalampo: MuddyWater Unleashes AI-Assisted Rust Malware and Telegram C2 in MENA Espionage Surge appeared first on Daily CyberSecurity. First seen on securityonline.info Jump to article: securityonline.info/operation-olalampo-muddywater-unleashes-ai-assisted-rust-malware-and-telegram-c2-in-mena-espionage-surge/
13 ways attackers use generative AI to exploit your systems

Feb 23, 2026 9:01 AM

Tags: access, ai, attack, authentication, awareness, breach, captcha, ceo, chatgpt, ciso, cloud, credentials, crypto, cyber, cyberattack, cybercrime, cybersecurity, dark-web, data, deep-fake, defense, detection, email, espionage, exploit, extortion, finance, flaw, framework, fraud, google, government, group, hacker, identity, infrastructure, intelligence, law, LLM, login, malicious, malware, marketplace, network, open-source, password, phishing, privacy, ransomware, resilience, risk, saas, scam, service, social-engineering, startup, supply-chain, tactics, technology, theft, threat, tool, vulnerability, zero-day

Facilitating malware development: AI can also be used to generate more sophisticated, or less labour-intensive, malware.For example, cybercriminals are using gen AI to create malicious HTML documents. The XWorm attack, initiated by HTML smuggling, which contains malicious code that downloads and runs the malware, bears the hallmarks of development via AI.”The loader’s detailed line-by-line description…
13 ways attackers use generative AI to exploit your systems

Feb 23, 2026 9:01 AM

Tags: access, ai, attack, authentication, awareness, breach, captcha, ceo, chatgpt, ciso, cloud, credentials, crypto, cyber, cyberattack, cybercrime, cybersecurity, dark-web, data, deep-fake, defense, detection, email, espionage, exploit, extortion, finance, flaw, framework, fraud, google, government, group, hacker, identity, infrastructure, intelligence, law, LLM, login, malicious, malware, marketplace, network, open-source, password, phishing, privacy, ransomware, resilience, risk, saas, scam, service, social-engineering, startup, supply-chain, tactics, technology, theft, threat, tool, vulnerability, zero-day

Facilitating malware development: AI can also be used to generate more sophisticated, or less labour-intensive, malware.For example, cybercriminals are using gen AI to create malicious HTML documents. The XWorm attack, initiated by HTML smuggling, which contains malicious code that downloads and runs the malware, bears the hallmarks of development via AI.”The loader’s detailed line-by-line description…
FBI: Threats from Salt Typhoon are ‘still very much ongoing’

Feb 20, 2026 4:01 PM

Tags: china, cyber, espionage, group, infrastructure, intelligence, threat, usa

A top FBI cyber official said Salt Typhoon, the Chinese cyber espionage group behind the widespread compromise of U.S. telecommunications infrastructure in 2024, continues to pose a broad threat to both America’s private and public sectors. Michael Machtinger, deputy assistant director for cyber intelligence at the FBI, touted improved partnerships between the telecommunications industry and…
CISA gives federal agencies three days to patch actively exploited Dell bug

Feb 20, 2026 2:01 PM

Tags: cisa, credentials, espionage, exploit, flaw, update

Hardcoded credential flaw in RecoverPoint already abused in espionage campaign First seen on theregister.com Jump to article: www.theregister.com/2026/02/20/cisa_dell_vulnerability/
FBI: Threats from Salt Typhoon are ‘still very much ongoing’

Feb 19, 2026 9:01 PM

Tags: china, cyber, espionage, group, infrastructure, intelligence, threat, usa

A top FBI cyber official said Salt Typhoon, the Chinese cyber espionage group behind the widespread compromise of U.S. telecommunications infrastructure in 2024, continues to pose a broad threat to both America’s private and public sectors. Michael Machtinger, deputy assistant director for cyber intelligence at the FBI, touted improved partnerships between the telecommunications industry and…
Notepad++ author says fixes make update mechanism ‘effectively unexploitable’

Feb 19, 2026 1:01 AM

Tags: access, attack, backdoor, china, control, credentials, dns, espionage, exploit, group, infrastructure, intelligence, malicious, monitoring, network, risk, risk-management, service, software, supply-chain, threat, ukraine, update, vulnerability

CSOonline, Ho said that no system can ever be declared absolutely unbreakable, “but the new design dramatically raises the bar.”An attacker must now compromise both the hosting infrastructure and the signing keys, he explained, adding that the updater now validates both the manifest and the installer, each with independent cryptographic signatures. And any mismatch, missing…
The defense industrial base is a prime target for cyber disruption

Feb 18, 2026 7:58 AM

Tags: cyber, defense, espionage, threat

Cyber threats against the defense industrial base (DIB) are intensifying, with adversaries shifting from traditional espionage toward operations designed to disrupt production … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/02/18/luke-mcnamara-google-dib-defense-industrial-base-cybersecurity/
Hackers target supporters of Iran protests in new espionage campaign

Feb 17, 2026 3:58 PM

Tags: espionage, hacker, iran

The campaign began in early January, shortly after mass nationwide demonstrations erupted across Iran calling for an end to the Islamic Republic system. First seen on therecord.media Jump to article: therecord.media/hackers-target-iran-protest-supporters-cyber-campaign
Lotus Blossom Hackers Breach Official Notepad++ Hosting Infrastructure

Feb 16, 2026 6:58 AM

Tags: breach, cyber, endpoint, espionage, group, hacker, infrastructure, threat, tool, update

Between June and December 2025, a state-sponsored threat group known as Lotus Blossom quietly hijacked the official hosting infrastructure used to deliver Notepad++ updates, turning a trusted developer tool into a precision espionage delivery channel. By compromising the shared hosting provider that previously served the Notepad++ update endpoint, the attackers gained the ability to intercept…
Nation-State Hackers Put Defense Industrial Base Under Siege

Feb 13, 2026 6:58 PM

Tags: china, defense, espionage, group, hacker, russia, zero-day

Espionage groups from China, Russia and other nations burned at least two dozen zero-days in edge devices in attempts to infiltrate defense contractors’ networks. First seen on darkreading.com Jump to article: www.darkreading.com/cyber-risk/nation-state-hackers-defense-industrial-base-under-siege
Google Warns of ‘Relentless’ Cyber Siege on Defense Industry

Feb 11, 2026 12:13 AM

Tags: attack, cyber, defense, espionage, google, group, hacker, intelligence, supply-chain, threat

Nation State Hackers Escalating Attacks on US Defense Industrial Base, Report Says. A new report from Google Threat Intelligence Group warns that state-backed hackers are escalating attacks on the defense industrial base, shifting from classic espionage to supply-chain compromise, workforce infiltration and battlefield-adjacent cyber operations. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/google-warns-relentless-cyber-siege-on-defense-industry-a-30729
Singapore telcos breached in China-linked cyber espionage campaign

Feb 10, 2026 5:16 PM

Tags: china, country, cyber, espionage

Singapore’s four major telecommunications companies were hit by a coordinated cyber espionage campaign last year, the country’s Cyber Security Agency (CSA) has revealed. … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/02/10/singapore-telecommunications-unc3886-cyber-espionage/
China-linked APT UNC3886 targets Singapore telcos

Feb 10, 2026 11:13 AM

Tags: apt, china, cyber, espionage, group

China-linked group UNC3886 targeted Singapore ‘s telecom sector in a cyber espionage campaign, Singapore’s Cyber Security Agency revealed. Cyber Security Agency of Singapore (CSA) and the Infocomm Media Development Authority (IMDA) ran Operation CYBER GUARDIAN to protect the telecom sector. Since July 2025, investigations showed China-linked UNC3886 launched a targeted campaign against all four major…
State-sponsored hackers targeting defence sector employees, Google says

Feb 10, 2026 9:13 AM

Tags: cyber, espionage, google, group, hacker, jobs

Cyber-espionage campaigns are targeting employees directly, including through hiring processes, report claimsDefence companies, their hiring processes and their employees have become a key target of state-sponsored cyber-espionage campaigns, according to a report from Google released before the Munich Security Conference.The report catalogues a “relentless barrage of cyber operations”, most by state-sponsored groups, against EU and…
Chinese Hackers Target Singapore Telecoms in Edge Device Compromise Campaign

Feb 10, 2026 8:13 AM

Tags: china, country, cyber, espionage, hacker

A massive, eleven-month campaign to root out sophisticated attackers from the nation’s critical infrastructure. The Cyber Security Agency of Singapore (CSA) and the Infocomm Media Development Authority (IMDA) revealed details of >>Operation CYBER GUARDIAN,<< a multi-agency effort to defend the country's four major telecommunications providers Singtel, StarHub, M1, and SIMBA from a persistent cyber espionage…
China-Linked UNC3886 Targets Singapore Telecom Sector in Cyber Espionage Campaign

Feb 9, 2026 8:13 PM

Tags: china, cyber, espionage, group

The Cyber Security Agency (CSA) of Singapore on Monday revealed that the China-nexus cyber espionage group known as UNC3886 targeted its telecommunications sector.”UNC3886 had launched a deliberate, targeted, and well-planned campaign against Singapore’s telecommunications sector,” CSA said. “All four of Singapore’s major telecommunications operators (‘telcos’) M1, SIMBA Telecom, Singtel, and First seen on thehackernews.com Jump…
Singapore says China-linked hackers targeted telecom providers in major spying campaign

Feb 9, 2026 2:13 PM

Tags: china, country, cyber, espionage, group, hacker

Singapore authorities said Monday that a sophisticated China-linked cyber espionage group carried out a targeted campaign against all four of the country’s major telecommunications operators. First seen on therecord.media Jump to article: therecord.media/singapore-attributes-telecoms-hacks-unc3886
APT Hackers Abuse Trusted Edge Services to Stealthily Deploy Malware

Feb 9, 2026 12:13 PM

Tags: apt, attack, cyber, espionage, hacker, malware, service

APT activity across APAC is rising rapidly as geopolitical tensions continue to grow, and defenders are seeing more advanced tradecraft aimed at long-term access. Taiwan stood out as the most targeted environment, with 173 tracked attacks far higher than any other regional target highlighting its role as a focal point for espionage and strategic access.…
State-Backed Hackers Target Military Officials, Journalists via Signal

Feb 9, 2026 7:13 AM

Tags: cyber, espionage, group, hacker, hacking, military, office

A suspected state-sponsored hacking group is actively targeting high-profile individuals across Europe. The Federal Office for the Protection of the Constitution (BfV) and the Federal Office for Information Security (BSI) have identified a coordinated espionage campaign aimed at military officials, diplomats, politicians, and investigative journalists.”‹ Instead, they are using >>social engineering<< to weaponize the legitimate…