Russian and Chinese cyber attack on Foreign Office was kept secret from public

Hackers from Russia and China infiltrated the Foreign Office’s emails and internal messages without the public’s knowledge, it has been revealed. The major security breach meant cyber attackers were able to see the day-to-day business of the government department in Read More …

The Road Map To Sino-US Cyber Cooperation Requires Both Nations To Look In The Mirror

The United States often poses itself as a champion of international cybersecurity despite its extensive record of transgressions in the realm of cyber-attacks and surveillance, according to which some would even proclaim the nation a global adversary. Concurrently, China’s involvement Read More …

Germany says Charming Kitten hackers target Iran dissidents

Germany’s Federal Office for the Protection of the Constitution (BfV) on Thursday warned critics of the Iranian leadership living in Germany that they might be targeted by hackers. The agency said the Charming Kitten online espionage group works by building Read More …

Spyware maker LetMeSpy shuts down after hacker deletes server data

Poland-based spyware LetMeSpy is no longer operational and said it will shut down after a June data breach wiped out its servers, including its huge trove of data stolen from thousands of victims’ phones. In a notice on its website Read More …

What is the status of US, Israel cyberwars?

On June 19, 2022, false rocket-warning sirens were activated in Jerusalem and Eilat, caused by a stunning cyber attack by Iran. Israel’s cyber authorities at the time tried to downplay the hack, which seemed to have significant national security implications. Read More …

Exploitation of Citrix Zero-Day by Possible Espionage Actors (CVE-2023-3519)

Security and networking devices are “edge devices,” meaning they are connected to the internet. If an attacker is successful in exploiting a vulnerability on these appliances, they can gain initial access without human interaction, which reduces the chances of detection. Read More …

CISA Releases Cybersecurity Advisory on Threat Actors Exploiting Citrix CVE-2023-3519

The Cybersecurity and Infrastructure Security Agency (CISA) released a Cybersecurity Advisory (CSA), Threat Actors Exploiting Citrix CVE-2023-3519 to Implant Webshells, to warn organizations about threat actors exploiting CVE-2023-3519, an unauthenticated remote code execution (RCE) vulnerability affecting NetScaler (formerly Citrix) Application Read More …

Intellexa and Cytrox are latest spyware firms to face U.S. wrath

The Biden administration struck its latest blow against foreign spyware makers on Tuesday, placing two Europe-based companies on its list that restricts U.S. companies’ business dealings with them. Greece-based Intellexa and the Hungarian company Cytrox are now on the Commerce Read More …

Analysis of Storm-0558 techniques for unauthorized email access

As described in more detail in our July 11 blogs, Storm-0558 is a China-based threat actor with espionage objectives. Beginning May 15, 2023, Storm-0558 used forged authentication tokens to access user email from approximately 25 organizations, including government agencies and Read More …

Malicious campaigns target government, military and civilian entities in Ukraine, Poland

Cisco Talos has discovered a threat actor conducting several campaigns against government entities, military organizations and civilian users in Ukraine and Poland. Cisco Talos judge that these operations are very likely aimed at stealing information and gaining persistent remote access. Read More …