State-sponsored hackers have actively exploited CVE-2025-59689, a command injection vulnerability in Libraesva Email Security Gateway systems. The flaw allows attackers to execute unauthorized commands through malicious compressed email attachments, affecting ESG versions 4.5 through 5.5.x...
Russian state-sponsored hackers APT28 (Fancy Bear) have been targeting international organizations across 13 countries since 2022 to monitor and disrupt Ukraine aid efforts. The sophisticated campaign employs password spraying, spear-phishing, vulnerability exploitation, and stealth techni...
A critical Windows vulnerability involving .LNK files has been exploited by 11 nation-state hacking groups from China, Iran, North Korea, and Russia since 2017. The flaw allows attackers to hide malicious commands using Line Feed and Carriage Return characters to bypass security controls. ...
Investigation reveals 57 state-sponsored APT groups from China, Iran, North Korea, and Russia are exploiting Google's Gemini AI for advanced cyber operations, including reconnaissance, code development, and attack planning. Iranian APT42 leads usage at 30%, while underground markets offer ...
