Tag: network
-
Chinese APT CL1062 Expands Attacks on Southeast Asian Critical Infrastructure With Custom Malware
Chinese-speaking APT CL-STA-1062 targeted Southeast Asian government and energy networks open-source tools, and a new TinyRCT backdoor. Palo Alto Networks Unit 42 researchers published a detailed report on a Chinese-speaking threat actor, tracked as CL-STA-1062, that has been running persistent operations across East Asia since at least March 2022 and shifted focus to Southeast Asian…
-
Chinese-Speaking APT Deploys New TinyRCT Backdoor in Southeast Asia Campaign
A Chinese-speaking advanced persistent threat (APT) actor has been linked to a new custom backdoor called TinyRCT as part of cyber attacks aimed at government entities and critical infrastructure in Southeast Asia.The activity, particularly aimed at state-owned enterprises in the energy and government sectors, has been attributed to a threat actor called CL-STA-1062, which Palo…
-
Tagged vs Untagged VLAN: When You Should Use Each in 2026
Tags: networkLearn the key differences between tagged and untagged VLANs in 2026, including when each is the right choice for improving network security. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/networks/tagged-vs-untagged-vlan/
-
Russia accuses Apple of ‘political censorship’ after VK apps removed from App Store
Apple removed VK’s flagship social network VKontakte, often described as Russia’s equivalent of Facebook, along with VK Music, VK Messenger, VK Video, Odnoklassniki and Mail.ru services, including its email application. First seen on therecord.media Jump to article: therecord.media/russia-accuses-apple-of-political-censorship-after-vk-removal
-
New DirtyClone Linux Kernel Flaw Lets Local Users Gain Root via Cloned Packets
DirtyClone is a new Linux kernel privilege escalation in the DirtyFrag family. JFrog Security Research published a working exploit walkthrough for the flaw on June 25, the first public demonstration for this variant.Tracked as CVE-2026-43503 (CVSS 8.8), it lets a local user corrupt file-backed memory through a cloned network packet and gain root. The patch…
-
China-Linked Malware Found in Counterfeit USB Drives Used on Japan Defense Force Classified Networks
Japan’s defense infrastructure has faced scrutiny following an investigation that revealed members of the Japan Self-Defense Forces (JSDF) used counterfeit USB drives embedded with malware linked to China on systems handling classified information. According to findings reported by Nikkei, these compromised USB devices were acquired at significantly lower costs through unofficial channels. They were subsequently…
-
TechTalk: Souveränität als Notwendigkeit Sonst stehen wir plötzlich da und alles ist schwarz!
Tags: networkAnlässlich der Präsentation von Europas erster souveräner SASE-Lösung, haben wir uns mit Pantelis Astenburg, Vice President Sales DACH Eastern Europe bei Versa, über das Thema Datensouveränitat und deren Notwendigkeit unterhalten. Auf der Veranstaltung ‘Versa mit noris network für Digitale Souveränität in der EU Einladung zum Blick hinter die Kulissen”, stand er uns für zwei Fragen…
-
Lancom Systems und Rohde Schwarz Cybersecurity schließen sich zur Rohde Schwarz Networks and Cybersecurity zusammen
Die beiden Tochterunternehmen von Rohde & Schwarz, Lancom Systems und Rohde & Schwarz Cybersecurity, schließen sich zu einer Tochtergesellschaft mit dem Namen ‘Rohde & Schwarz Networks and Cybersecurity GmbH” zusammen. Die Fusion ist das Ergebnis der bereits intensiven und erfolgreichen Zusammenarbeit der beiden Tochterunternehmen und führt deren komplementäres Lösungsangebot unter dem Dach der ‘Rohde &…
-
Operation Endgame Disrupts StealC, Amadey and SocGholish Malware Networks
Operation Endgame disrupts StealC malware infrastructure, seizing millions of stolen credentials and targeting servers used in global cybercrime campaigns. First seen on hackread.com Jump to article: hackread.com/operation-endgame-stealc-amadey-socgholish-malware/
-
The OT Segmentation Imperative: Why It Can’t Wait Any Longer
AI-Powered Attacks Make OT Network Segmentation a Business-Critical Control Industrial organizations are facing faster, more sophisticated attacks than ever before. As AI further accelerates cyberattacks, OT defenders can no longer rely on perimeter security alone. This blog explores why OT network segmentation is critical for limiting lateral movement. First seen on govinfosecurity.com Jump to article:…
-
Europol, Microsoft Hit Malware Network Behind 27M Stolen Logins, 140,000 Infected Computers
Europol and Microsoft disrupted malware infrastructure linked to 27 million stolen login credentials and 140,000 infected computers in a global cybercrime network. The post Europol, Microsoft Hit Malware Network Behind 27M Stolen Logins, 140,000 Infected Computers appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-europol-microsoft-malware-takedown-emea-eu/
-
Amadey and StealC Malware Network Disrupted, 27M Stolen Credentials Recovered
Tags: attack, breach, credentials, cybercrime, finance, fraud, infrastructure, law, malware, microsoft, network, ransomwareA coordinated law enforcement operation, in partnership with private sector companies, including Bitdefender, Bitsight, ESET, and Microsoft, has resulted in the takedown of criminal infrastructure powering Amadey and StealC.”The main common goal was to disrupt the ‘assembly lines’ cybercriminals use to launch ransomware, financial fraud, and attacks on critical infrastructure,” Europol said in First seen…
-
Law enforcement hits StealC and Amadey malware networks
Operation Endgame, the largest international law enforcement operation aimed at disrupting ransomware and cybercrime infrastructure across the world, has claimed its latest … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/06/24/operation-endgame-stealc-amadey-malware-disrupted/
-
One Railway Radio Outage Stopped Trains Across Germany and Nobody Knew Why
A nationwide GSM-R outage stopped trains across Germany, exposing how one aging communications system can still bring an entire rail network to a halt At 10:30 PM on Tuesday June 23, Deutsche Bahn told passengers something that had never happened before for technical reasons: all trains across Germany were being held at their stations. The…
-
Legacy networks can no longer support the new AI workforce
At Cisco Connect 2026 Singapore, tech leaders and policymakers warn that businesses must modernise their IT infrastructure and governance frameworks to pave the way for agentic AI First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366645003/Cisco-Legacy-networks-can-no-longer-support-the-new-AI-workforce
-
CISA Adds Ubiquiti UniFi OS Flaws to KEV Catalog
Tags: cisa, cve, cyber, cybersecurity, exploit, flaw, infrastructure, kev, network, office, risk, vulnerabilityThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added three critical vulnerabilities affecting Ubiquiti UniFi OS to its Known Exploited Vulnerabilities (KEV) catalog. This highlights the increasing risk to both enterprise and small-office network environments that rely on this popular network management platform. The newly identified flaws, CVE-2026-34908, CVE-2026-34909, and CVE-2026-34910, affect UniFi OS…
-
What the Fortibleed campaign means for organizations running FortiGate firewalls
A massive credential-harvesting campaign targeting FortiGate firewalls has exposed thousands of organizations to potential network compromise, and a trove of attacker tools, … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/06/23/fortibleed-investigation-remediation/
-
SocGholish Takedown Highlights Malicious TDS Threats
SocGholish uses traffic distribution systems (TDSs) to provide initial access into victims’ networks for cybercrime groups such as the notorious Evil Corp. First seen on darkreading.com Jump to article: www.darkreading.com/cyber-risk/socgholish-takedown-malicious-tds-threats
-
Two Scattered Spider members plead guilty over cyberattack that crippled London transit
A 20-year-old and an 18-year-old admitted to infiltrating the network of Transport for London in 2024, disrupting public transportation services for months. First seen on therecord.media Jump to article: therecord.media/guilty-plea-tfl-cyberattack-scattered-spider-members
-
Cybercriminals Abuse TDS Infrastructure to Bypass Firewalls and Hide Malicious Destinations
Cybercriminals are increasingly abusing traffic distribution systems (TDSs) to evade defenses, conceal malicious destinations, and funnel victims into phishing, fraud, and malware campaigns. Once considered a legitimate marketing tool to route visitors to different content or offers, TDS infrastructure is now being repurposed as a stealthy redirection layer that complicates detection and response for network…
-
Philippine government taps Google Cloud to deploy AI agents
The Filipino government will equip public servants with Gemini Enterprise AI tools, launch a cross-agency cyber defence alliance and upgrade subsea network infrastructure First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366644982/Philippine-government-taps-Google-Cloud-to-deploy-AI-agents
-
AryStinger Botnet Converts Legacy Routers to Global Proxies
Research Links 4,300 End-of-Life D-Link Routers to Attack Staging. The AryStinger botnet is exploiting decade-old vulnerabilities in outdated and unsupported routers, turning aging devices into a proxy network for scanning targets, hiding threat actor activity and laying the groundwork for future cyberattacks First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/arystinger-botnet-converts-legacy-routers-to-global-proxies-a-32045
-
AryStinger Botnet Converts Legacy Routers to Global Proxies
Research Links 4,300 End-of-Life D-Link Routers to Attack Staging. The AryStinger botnet is exploiting decade-old vulnerabilities in outdated and unsupported routers, turning aging devices into a proxy network for scanning targets, hiding threat actor activity and laying the groundwork for future cyberattacks First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/arystinger-botnet-converts-legacy-routers-to-global-proxies-a-32045
-
Europe Seeks to Advance 6G Security, Privacy
EU Projects Seek to Protect Fast New Network, Secure Information Sharing. The mobile communications technology known as 6G still hasn’t been standardized and its earliest commercial deployments are years away. But Europe is investing early in preparing for the next telecoms revolution – and the inevitable cybersecurity problems bundled into it. First seen on govinfosecurity.com…
-
Mukesh Ambani’s Reliance AI Roadmap Puts Jio CallAgent Inside the Network
Reliance’s AI roadmap puts Jio CallAgent inside the telecom network while tying India-scale AI ambitions to Jamnagar compute, local-language services, and enterprise compliance questions. The post Mukesh Ambani’s Reliance AI Roadmap Puts Jio CallAgent Inside the Network appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-reliance-jio-callagent-ai-apac-india/
-
282 iOS Apps Found Leaking LLM API Credentials in Network Traffic
Researchers have uncovered a systemic LLM credential exposure problem in the iOS ecosystem, with 282 AI”‘powered apps leaking exploitable API credentials and backend access mechanisms directly in network traffic. The findings highlight widespread misuse of OpenAI, Gemini, and other LLM provider APIs in mobile apps and show that many issues remain unpatched even after responsible…
-
Infrastructure downtime has a $50k-per-hour price tag. It’s time to turn hours into minutes.
Threats move at machine speed. Network incident response still doesn’t. What’s standing in the way? First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/spons/infrastructure-downtime-has-a-50k-per-hour-price-tag-its-time-to-turn-ho/822869/
-
4,300+ Outdated Routers Hijacked in Stealthy Spy Infrastructure by AryStinger malware
AryStinger hijacks outdated routers via old flaws, turning 4,300+ devices into a stealth network for reconnaissance and intrusion support. On March 12, 2026, QiAnXin’s XLab threat detection system flagged a single IP address, 107.150.106.14, spreading a Linux binary through two vulnerabilities that were disclosed in 2013 and 2016 respectively. The binary had zero detections on…
-
AryStinger Malware Infects 4,300 Legacy Routers to Build Reconnaissance Proxy Network
A new malware family is turning forgotten home routers into a distributed reconnaissance and proxy network, not the DDoS botnet these devices usually end up in. QiAnXin’s XLab calls it AryStinger and counts at least 4,300 infected routers, a total it says is still rising.The distinction matters. AryStinger exists for the stage of an attack…
-
INTERPOL Warns Phishing, Ransomware, and AI Scams Are Rising Across Asia-Pacific
Tags: ai, cybercrime, cybersecurity, Internet, interpol, network, organized, phishing, ransomware, scamA new report from INTERPOL has revealed a “dramatic increase” in cybercrime in Asia and the South Pacific, fueled by rapid digitalization, internet penetration, new technologies, organized criminal networks, and a disparity in cybersecurity maturity.According to INTERPOL’s 2025/2026 Asia and South Pacific Cyberthreat Assessment Report, phishing has emerged as the most widespread and First seen…