A Russian state-sponsored hacking group APT44 ('Seashell Blizzard'/'Sandworm') has been conducting the 'BadPilot' cyber campaign since 2021, targeting critical infrastructure and government institutions globally. Initially focusing on Ukraine, Europe, and Asia, the campaign expanded to Wes...
Two critical security flaws discovered in Moxa industrial routers affect multiple device series across critical infrastructure sectors. CVE-2024-9138 enables root access through hard-coded credentials, while CVE-2024-9140 allows remote code execution. Affected users must upgrade to firmwar...
Iranian state-sponsored malware IOCONTROL targets critical infrastructure in Israel and the US, affecting IoT devices and OT/SCADA systems across multiple manufacturers. With sophisticated features including modular design, encrypted communications, and remote command execution capabilitie...
A new malware campaign targeting Taiwan's manufacturing, healthcare, and IT sectors employs SmokeLoader, a sophisticated malware strain from 2011. Despite recent disruption by Europol, attackers use cracked versions to deploy phishing attacks, exploiting Excel vulnerabilities to steal cred...
A significant dual-threat Chinese cyber campaign has emerged in 2024, comprising both direct cyber attacks and influence operations:...
