Advanced Persistent Threat Operations

30 reports

Advanced Persistent Threat Operations United States European Union United Kingdom [+7] United States Other Zero-Day Exploitation Supply Chain Exploitation AI-Enhanced Social Engineering Critical Infrastructure Mapping Threat Intelligence Bulletin

Security Affairs Newsletter Documents State-Sponsored Cyber Threat Landscape in June 2026

Weekly intelligence digest aggregates nation-state cyber operations targeting critical infrastructure and government networks globally.
Advanced Persistent Threat Operations China Canada United States [+5] China Cyber Espionage Malware Distribution Living-off-the-Land Exploitation Kernel-Level Rootkit Implantation

China-Linked SprySOCKS Backdoor Expands to Windows with Driver-Based Stealth

Previously Linux-only Chinese espionage backdoor evolves to target Windows systems using kernel-level driver concealment techniques.
Advanced Persistent Threat Operations China Iran Russia [+9] Canada Mexico United States Russia Infrastructure Attacks Supply Chain Exploitation Close Access Operations Payment Card Breach Critical Infrastructure Mapping

2026 World Cup Assessed as Largest Entertainment Attack Surface in Cyber History

Palo Alto Networks warns temporary supplier ecosystems and municipal infrastructure create unprecedented state-sponsored targeting opportunities.
Advanced Persistent Threat Operations United States United States Other [+3] Cyber Capability Development AI Cyber Unit AI-Autonomous Cyber Operations

AI Cyber Warfare Startup Twenty Raises $100M at $1B Valuation for Military Intelligence Market

Venture-backed firm developing autonomous cyber warfare software for U.S. military signals acceleration of AI-driven offensive capabilities.
Advanced Persistent Threat Operations China Canada United States [+5] China Cyber Espionage Persistent Network Infiltration Living-off-the-Land Exploitation Cloud Trust Abuse

Chinese Hackers Exploit Google Workspace to Steal Defense Research Data

UNC6508 spent over a year inside North American medical, academic, and military networks exfiltrating sensitive research.
Advanced Persistent Threat Operations Russia Eastern Europe NATO Countries [+3] Russia Zero-Day Exploitation RTF Weaponization

Russian Electronic Warfare Operations Compromise WinRAR Vulnerabilities

State-sponsored APT groups continue exploiting patched file compression software for malware deployment
Advanced Persistent Threat Operations China Other China [+2] Cyber Espionage Critical Infrastructure Mapping

Chinese State-Sponsored Hackers Target Asian Governments in Multi-Domain Campaign

Research documents systematic cyber espionage operations exploiting regional vulnerabilities during 2026.
Advanced Persistent Threat Operations Unknown Global Other [+3] Supply Chain Exploitation Industrial Sabotage Critical Infrastructure Mapping

Advanced Persistent Threat Groups Execute Coordinated Industrial Espionage Campaign During Q1 2026

Transportation and logistics sectors face systematic cyber attacks targeting physical goods and intelligence
Advanced Persistent Threat Operations Other Other Other [+2] Cyber Espionage Industrial Sabotage

Advanced Persistent Threat Groups Intensify Industrial Espionage Campaign

Q1 2026 assessment reveals coordinated cyber attacks targeting transportation and logistics sectors
Advanced Persistent Threat Operations China Europe United States [+3] China Supply Chain Exploitation Critical Infrastructure Mapping

Chinese State-Sponsored APT Groups Intensify Industrial Espionage Campaign During Q1 2026

Transportation and logistics sectors face coordinated cyber attacks aimed at intelligence gathering
Advanced Persistent Threat Operations Russia Poland Russia [+2] Infrastructure Attacks Critical Infrastructure Mapping

Poland Documents Critical Infrastructure Cyberattacks by Russian APT Groups

ABW confirms hackers breached industrial control systems at five water treatment facilities
Advanced Persistent Threat Operations Multiple Multiple Other [+4] Infrastructure Attacks Communications Interception Telecommunications Infiltration Mass Surveillance Operations

Citizen Lab Exposes Sophisticated Global Telecommunications Surveillance Operations During 2026

Investigation reveals covert actors exploiting telecom infrastructure for mass surveillance campaigns
Advanced Persistent Threat Operations China Japan Philippines [+6] South Korea Thailand Vietnam China Cyber Espionage Academic Espionage

Chinese State-Sponsored Hackers Target Asian Governments in Multi-Domain Espionage Campaign

Sophisticated operation compromises government, defense, and civil society targets
Advanced Persistent Threat Operations China Australia Japan [+5] United States China Industrial Sabotage Critical Infrastructure Mapping Cross-Border Intelligence Operations

Asian Government Espionage Campaign Breaches Critical Infrastructure During 2026

Multi-domain operation penetrates telecommunications and energy systems across multiple nations
Advanced Persistent Threat Operations Unknown United States Other [+2] Infrastructure Attacks Persistent Network Infiltration

FIRESTARTER Backdoor Compromises Federal Cisco Firepower Device, Survives Security Updates

CISA reveals persistent malware infiltrated unnamed federal civilian agency's network infrastructure
Advanced Persistent Threat Operations Russia Global United Kingdom [+7] United States Russia Infrastructure Attacks DNS Hijacking Persistent Network Infiltration Living-off-the-Land Exploitation Infrastructure Hijacking

Justice Department Disrupts Russian APT28 DNS Hijacking Network Targeting Microsoft Authentication Systems

Court-authorized operation neutralizes GRU military intelligence infrastructure exploiting consumer routers for credential theft
Advanced Persistent Threat Operations Iran Israel Iran [+2] Cyber Espionage Defense Procurement Fraud

Iranian Handala Group Breaches Israeli Defense Contractor in Escalating Cyber Campaign

Pro-Iran hackers target PSK Wind Technologies, developer of critical air defense command and control systems
Advanced Persistent Threat Operations North Korea Global United States [+5] North Korea Identity Spoofing Asset Recruitment Cryptocurrency Theft AI-Enhanced Social Engineering

North Korean Kimsuky Group Executes $285 Million Cryptocurrency Theft Through Extended Social Engineering Campaign

DPRK Intelligence Operatives Conduct Six-Month Targeted Operation Against Drift Platform Using Sophisticated Identity Deception
Advanced Persistent Threat Operations China Canada European Union [+6] United States China Cyber Espionage Government Infiltration Supply Chain Exploitation Telecommunications Infiltration

Chinese Government Conducts Massive Cyber Espionage Campaign Against U.S. Government Personnel

Salt Typhoon operation breaches multiple agencies and private sector targets in extensive intelligence gathering
Advanced Persistent Threat Operations Russia Global United States [+2] Russia Zero-Day Exploitation

Russian TA446 Group Deploys Leaked DarkSword iOS Exploit Kit in Targeted Campaign

Russia-linked actors leverage recently disclosed iOS vulnerabilities in sophisticated spear-phishing operations
Advanced Persistent Threat Operations China Global China [+3] Cyber Espionage Malware Distribution Military Espionage

China-Linked Hackers Conducted Multi-Year Espionage Campaign Against Southeast Asian Military Organizations

Custom malware tools targeted intelligence on military capabilities and Western defense partnerships
Advanced Persistent Threat Operations China European Union China [+4] Cyber Espionage Zero-Day Exploitation Living-off-the-Land Exploitation Critical Infrastructure Mapping

CERT-EU Documents Chinese UNC6201 Zero-Day Dell Exploitation in February 2026

China-linked threat actor exploited unpatched Dell RecoverPoint vulnerability in targeted European government infrastructure attacks.
Advanced Persistent Threat Operations Russia Romania Slovakia [+7] Ukraine United States Russia Cyber Espionage Malware Distribution Zero-Day Exploitation RTF Weaponization

Russian APT28 Deploys New Exploit Against Eastern European Targets

Operation Neusploit leverages CVE-2026-21509 vulnerability in coordinated campaign across Ukraine, Slovakia, and Romania
Advanced Persistent Threat Operations Unknown Asian State Multiple Other [+3] Cyber Espionage Infrastructure Attacks Living-off-the-Land Exploitation

Asian State-Backed TGR-STA-1030 Group Compromises 70 Government Infrastructure Entities

Previously undocumented cyber espionage campaign targets critical infrastructure across multiple regions
Advanced Persistent Threat Operations China Unknown Global [+4] Multiple China Cyber Espionage Critical Infrastructure Mapping

State Actor Launches Shadow Campaigns Global Espionage Operation Across 155 Countries

Massive international intelligence collection effort targets government and commercial entities worldwide
Advanced Persistent Threat Operations China Singapore China [+2] Persistent Network Infiltration Telecommunications Infiltration

Singapore Executes Largest Cyber Operation to Remove APT Actor from National Telecommunications Infrastructure

Operation Cyber Guardian targets advanced persistent threat group embedded in four major telecom networks
Advanced Persistent Threat Operations China Multiple China [+3] Cyber Espionage Government Infiltration Living-off-the-Land Exploitation

Chinese State-Sponsored APT Groups Intensify Cyber Espionage Operations Targeting Global Government Networks During 2025

RedNovember threat group maintains persistent access to intergovernmental organizations using advanced techniques
Advanced Persistent Threat Operations China Global China [+3] Cyber Espionage AI-Enhanced Social Engineering Critical Infrastructure Mapping

Chinese State-Sponsored Cyber Espionage Surges 150% During 2025 Global Campaign

CrowdStrike analysis reveals dramatic escalation in Chinese cyber operations with AI weaponization
Advanced Persistent Threat Operations China Argentina Australia [+22] Bangladesh Brazil Canada Germany Indonesia Japan Malaysia Mexico Myanmar New Zealand Philippines South Africa Thailand United Kingdom United States China Cyber Espionage Infrastructure Attacks Communications Interception Persistent Network Infiltration Telecommunications Infiltration Wiretapping System Compromise

Chinese Salt Typhoon Campaign Breaches Over 200 Companies Across 80 Countries

MSS-linked hackers maintained years-long access to telecommunications infrastructure and law enforcement wiretapping systems
Advanced Persistent Threat Operations China North Korea Russia [+12] Allied Nations Global South Korea United States China Cyber Espionage Defense Procurement Fraud Social Media Monitoring Ransomware Campaigns Critical Infrastructure Mapping APT Collaboration Model Cryptocurrency Platform Targeting

East Asian State-Backed Cyber Groups Intensify Espionage and Ransomware Operations in 2025

Chinese state-sponsored actors lead unprecedented surge in global network infiltration and data theft campaigns
Select an article to read