#apt
-
China's Vapor Panda Hits Over 200 Organizations Using AI Framework ARTEX
CrowdStrike reports that China-based Vapor Panda is using ARTEX, an agentic framework built on large language models, to run dozens of intrusions at once with a small team.
-
Chinese APT Group Exploits VMware vCenter Flaw and Deploys Babuk-Based Ransomware
German firm QUIRSO has attributed the exploitation of a fresh vulnerability, CVE-2026-59310, with moderate confidence to a Chinese-speaking group that has hit 361 systems across 47 countries.
-
Attack on VMware vCenter: CVE-2026-59310 exploited for stealthy remote access
Just five days after the public disclosure of a critical vulnerability in VMware vCenter, attackers began actively exploiting it, gaining a foothold on servers via reverse_ssh. According to QUIRSO, a suspected APT group is behind the campaign.
-
Why Hacking Groups Get Codenames: Google Explains
Google has revamped its naming system for hacking groups. The company's top “hacker hunter” told TechCrunch why codenames aren't a game, but a defensive tool.
-
OctLurk and SilkLurk: a new espionage campaign against Central Asia
Kaspersky has documented a wave of attacks on government bodies in Central Asia dating back to January 2025. Behind them stands a presumably Chinese-speaking group armed with two previously unknown backdoors.
-
Laundry Bear Hackers Exploit Outlook Web Access Zero-Day for Stealthy Mailbox Access
A Russian pro-government group is exploiting an XSS vulnerability in the web version of Outlook to deliver the OWAReaper backdoor, which keeps its foothold in a mailbox even after a password change and a full system reinstall.
-
Russian Group Spent Six Months Reading Western Email via a 0-day in Zimbra
Opening the message was enough: the attack stole 90 days of correspondence, the password from the browser and two-factor authentication codes. The NSA, CISA and partners issued a joint advisory.
-
Hackers exploit ViPNet's update mechanism to attack Russian government bodies
An advanced hacking group is abusing the ViPNet software update mechanism to attack Russian organizations, including government agencies.
-
Russian APT Groups Adopt the ClickFix Technique
The ClickFix social-engineering trick, previously used mostly by financially motivated cybercriminals, is now being deployed by elite hacking groups linked to Russia.