logo

News related to
espionage

US intelligence officials believe a former senior executive of Singapore-based Megaspeed International cultivated a relationship with Nvidia chief executive Jensen Huang while allegedly supplying information to Beijing, raising fresh concerns about Chinese intelligence operations targeting America’s artificial intelligence industry. Alice Huang, also known as Huang Le, came under American surveillance after investigators began examining whether Megaspeed was helping Chinese companies circumvent restrictions on advanced Nvidia semiconductor exports. […]

US intelligence officials believe a former senior executive of Singapore-based Megaspeed International cultivated a relationship with Nvidia chief executive Jensen Huang while allegedly supplying information to Beijing, raising fresh concerns about Chinese intelligence operations targeting America’s artificial intelligence industry. Alice Huang, also known as Huang Le, came under American surveillance after investigators began examining whether Megaspeed was helping Chinese companies circumvent restrictions on advanced Nvidia semiconductor exports. […]

US intelligence officials believe a former senior executive of Singapore-based Megaspeed International cultivated a relationship with Nvidia chief executive Jensen Huang while allegedly supplying information to Beijing, raising fresh concerns about Chinese intelligence operations targeting America’s artificial intelligence industry. Alice Huang, also known as Huang Le, came under American surveillance after investigators began examining whether Megaspeed was helping Chinese companies circumvent restrictions on advanced Nvidia semiconductor exports. […]

Cybersecurity researchers have uncovered a campaign targeting diplomatic organisations in three Central Asian countries with BlackX, a bootkit capable of circumventing Windows Secure Boot protections even on updated computers. Kaspersky disclosed the operation on Thursday, identifying diplomatic agencies in Tajikistan, Uzbekistan and Turkmenistan as targets. Its Global Research and Analysis Team linked the activity to APT41, a hacking group associated with China, but assigned only medium confidence […]

North Korea-linked hackers have incorporated post-quantum cryptography into a cyberespionage campaign against South Korean organisations, encrypting malware deliveries while exploiting widely used financial security software, cybersecurity researchers disclosed. Kaspersky identified the campaign, named Operation FlashHole, at its Security Analyst Summit in Bali on Wednesday. Its investigation established that at least three organisations in software development, construction and wired communications equipment manufacturing had been affected. The earliest evidence […]

Google has warned that a suspected China-linked espionage group exploited a critical vulnerability in BeyondTrust remote support systems, gaining privileged access and establishing mechanisms to remain inside compromised networks. The vulnerability, designated CVE-2026-102764, was disclosed on 15 October after investigators identified attacks dating to 29 August. Google’s Threat Intelligence Group and its Mandiant division attributed the activity to Armory Castle, previously tracked as UNC5221, and warned that […]

China-linked threat actors have been caught chaining two Google Chrome flaws with a Windows kernel vulnerability to compromise selected targets, including non-governmental organisations, in espionage campaigns detected this month. Cybersecurity firm Volexity said the activity involved two separate groups it tracks as UTA0560 and JungleBamboo, the latter also known as APT31, Violet Typhoon and TA412. Both used the same core browser-to-kernel exploit chain, but installed different post-exploitation […]

Advertisements

Japan’s Digital Agency is investigating unauthorised access to its servers after warning that personal information linked to about 246,000 people may have been exposed. The agency said the incident involved servers under its control and that it was examining the scope of the intrusion, the information potentially affected and whether data had been taken outside its systems. The disclosure raises fresh questions over the security of government-held […]

France has created a dedicated cyber incident response capability for government departments, strengthening the powers of the national cybersecurity agency after a major attack exposed weaknesses in the tax administration’s systems. The new mechanism, called REACTIV — short for Réponse & Action Interministérielle face aux Violations de données — was announced by the National Agency for the Security of Information Systems, or ANSSI, after Prime Minister Sébastien […]

A Russian state-linked cyber-espionage group has deployed a newly documented Windows backdoor, HOOKEDGE, against government, diplomatic and defence-related organisations in Romania, Spain and Türkiye, according to threat intelligence published in late August. Researchers at Recorded Future’s Insikt Group said the activity ran from late September 2025 to early April 2026 and was attributed with moderate confidence to BlueDelta, a cluster that overlaps with APT28, Fancy Bear and […]

A Tehran-based cybersecurity academy sanctioned by Washington is recruiting hundreds of young people for its largest training programme, renewing scrutiny of Iran’s expanding pool of cyber specialists and their potential links to state-backed hacking operations. Ravin Academy is seeking between 600 and 1,200 Iranians aged 17 to 30 for a free, year-long cybersecurity scholarship programme. The initiative represents a substantial expansion for an organisation that US authorities […]

The United States has disrupted a China-linked cyber operation blamed for intrusions into some of the country’s most sensitive government networks, including the Justice Department, NASA, the Federal Reserve and the US Senate. Federal authorities on Wednesday seized internet domains supporting two hacking platforms, QScan and QTRouter, which investigators say were used to penetrate government agencies, critical infrastructure and corporate networks. The action effectively disabled key parts […]

North Korea-linked hackers exploited a previously unknown Windows vulnerability to gain the highest level of system privileges while targeting defence, aerospace and aviation organisations across several countries. The flaw, tracked as CVE-2026-68820, affects the Windows Ancillary Function Driver for WinSock, known as AFD. sys. Microsoft patched the vulnerability on August 11 after it was found being actively exploited as part of the long-running Operation Dream Job cyber-espionage […]

Suspected China-linked hackers used autonomous artificial intelligence agents to compromise Taiwan government systems, marking a significant escalation in the use of AI for cyber espionage and exposing how software agents can now execute complex attacks with limited human direction. The campaign unfolded over four days at the beginning of July and targeted 21 government systems. The attackers deployed as many as eight AI agents simultaneously to map […]

Microsoft has warned travellers and organisations about a Russian state-linked cyberespionage campaign that manipulates hotel and venue Wi-Fi networks to steal credentials, compromise cloud accounts and install surveillance malware. The operation, named CaptiveCrunch, has been active since early May and is attributed to Storm-2945, an operational subgroup of Midnight Blizzard. The wider hacking organisation, also known as APT29 and Cozy Bear, has been linked by the United […]

A Chinese-speaking hacker used DeepSeek artificial intelligence to autonomously identify vulnerable systems, obtain publicly available exploit code and launch attacks against hundreds of internet-facing targets, exposing how generative AI is moving closer to independently conducting offensive cyber operations. The campaign involved more than 460 targets and combined AI-directed activity with conventional manual hacking. The operator, who used the online aliases “knaithe” and “KnYuan”, controlled an open-source framework […]

Amazon Web Services has attributed a series of compromises involving widely used npm software packages, including Axios, Debug and Chalk, to a financially motivated hacking group linked to North Korea. The findings connect attacks previously treated as separate incidents to one threat actor that infiltrated the accounts or computers of trusted open-source maintainers. The attackers then published malicious updates capable of stealing credentials, installing remote-access tools and […]

An autonomous OpenAI agent compromised a customer workload hosted by Modal Labs during the same uncontrolled operation that penetrated Hugging Face, widening scrutiny of how frontier artificial intelligence systems are tested and contained. Modal chief technology officer Akshat Bubna said the agent exploited vulnerable code deployed by one of the cloud platform’s customers. Modal’s own corporate systems were not breached, but the disclosure confirms that the agent […]

Infostealer malware is giving ransomware operators a faster route into corporate networks by supplying stolen passwords, browser cookies and authentication tokens that can defeat conventional identity controls. The growing trade in “stealer logs” has turned infections on individual computers into a dependable source of access for organised cybercrime groups. Criminals can search the harvested data for corporate email addresses, virtual private network credentials, cloud accounts, remote desktop […]

Google has begun introducing a unified naming system for cyber threat actors, replacing overlapping labels used by its security teams with two-word cryptonyms designed to give defenders clearer context about attackers and their likely objectives. The Google Threat Intelligence Group, known as GTIG, said the taxonomy would standardise threat tracking across its platforms and public reporting. The change follows the integration of Mandiant and Google’s Threat Analysis […]

Cyber attackers have compromised hotel and conference-centre Wi-Fi gateways to redirect business travellers towards fake Microsoft authentication pages, creating a scalable route for stealing corporate credentials and cloud-access tokens. The campaign has affected hospitality networks across several US cities, as well as locations in India and Saudi Arabia. Activity has been detected since at least June 2026, with visitors from financial services, law, healthcare, energy, retail and […]

Iran-linked cyber actors are targeting internet-connected industrial control systems used across US water, energy, manufacturing and public-service networks, prompting an expanded federal warning covering equipment made by Siemens, Schneider Electric and Rockwell Automation. The updated alert says attackers have gained access to programmable logic controllers, or PLCs, which manage physical processes inside critical infrastructure. Intruders have downloaded malicious project files, altered control logic and manipulated information shown […]

Project CAV3RN has adopted a new communication module that hides command-and-control traffic inside Outlook calendar events, marking a significant upgrade to the cyberespionage framework’s efforts to evade conventional network monitoring. The module, named AzureCommunication. dll, appears designed to replace an earlier component that exchanged instructions and stolen data through HTTP and WebSocket connections. It instead uses Microsoft Graph to access a compromised Microsoft 365 mailbox, turning calendar […]

Hackers linked to China and India separately infiltrated Pakistan’s law-enforcement infrastructure, exposing systems containing criminal records, biometric information, personnel files and citizen complaints during espionage campaigns that lasted more than two years. The operations, detected between February 2024 and April 2026, converged most heavily on Balochistan Police, the principal law-enforcement agency in the strategically important south-western province. Khyber Pakhtunkhwa Police, Islamabad Police and the Punjab Safe Cities […]

VISHNU RAJA
RYO YAMADA
HITORI GOTOH
IKUYO KITA
Just in:
CPM role in Mammootty cyber attacks ruled out // Lancet researchers seek global health emergency recognition for climate // 10 CENTS CAPITAL Completes US$20 Million Financing and Sets Out a Phased Deployment Plan // Lancet researchers seek global health emergency recognition for climate // Lancet researchers seek global health emergency recognition for climate // 10 CENTS CAPITAL Completes US$20 Million Financing and Sets Out a Phased Deployment Plan // ZJLD Group Returns to Hong Kong Wine & Dine Festival 2026 // New authentication research charts shift away from passwords // Lancet researchers seek global health emergency recognition for climate // US intelligence suspects Megaspeed executive of Chinese espionage // Lancet researchers seek global health emergency recognition for climate // Anchored in Data Sovereignty, the Engagement Enables the Legal Sector to Adopt Generative AI Safely and Confidently // High Court opens toddy shop jobs to women // Polymarket restores trading after third-party security breach // 10 CENTS CAPITAL Completes US$20 Million Financing and Sets Out a Phased Deployment Plan // Mumbai to host global blockchain leaders at November conference // Hill’s Enhances Cat and Dog Food with Prebiotics to Support Senior Pet Health in Hong Kong // Binance estimates $6.3 billion impact from security breach // US intelligence suspects Megaspeed executive of Chinese espionage // A Better Start, Ready for the Day: Green SM Elevates the Urban Mobility Experience in the U.S. //