Advanced Persistent Threat Operations

30 reports

Advanced Persistent Threat Operations United Kingdom European Union United Kingdom [+6] United States Other Cyber Espionage Influence Operations Critical Infrastructure Mapping Multi-Domain Warfare Coordination

PwC 2026 Annual Threat Dynamics Report Documents Nation-State Cyber Attack Architecture

Global cybersecurity firm maps state-sponsored threat actor evolution, sector targeting, and attack methodology convergence across 2026.
Advanced Persistent Threat Operations China Iran North Korea [+10] Russia Gulf States Thailand United States China Cyber Espionage Criminal Botnet Weaponization Living-off-the-Land Exploitation AI-Enhanced Social Engineering Critical Infrastructure Mapping

Cyfirma July 31 Report Documents Lazarus Botnet and Multi-State Cyber Escalation

Weekly threat intelligence identifies Chinese APT Thai government targeting and Iranian infrastructure operations.
Advanced Persistent Threat Operations Unknown Kazakhstan Kyrgyzstan [+6] Tajikistan Uzbekistan Other Cyber Espionage Malware Distribution Persistent Network Infiltration

OctLurk and SilkLurk Backdoors Target Central Asian Governments in Espionage Campaign

Kaspersky's Securelist documents two newly identified memory-resident backdoors conducting cyber-espionage across Central Asia.
Advanced Persistent Threat Operations China Russia United States [+5] Other Infrastructure Attacks Malware Warfare Critical Infrastructure Mapping OT System Exploitation

Hackers Target 30+ Minnesota Water Utilities in Coordinated OT Infrastructure Attack

State-scale coordinated attack on operational technology systems activates Minnesota's full cyber incident response.
Advanced Persistent Threat Operations China Iran Russia [+6] United States Other Cyber Espionage Watering Hole Attacks Third-Party Platform Exploitation Spear-Phishing

Congress Faces Growing Foreign Cyberattacks as Legislative Branch Hardens Defenses

New threat intelligence documents state-sponsored cyber operations targeting congressional networks and personnel.
Advanced Persistent Threat Operations China Iran North Korea [+8] Russia Europe United States Russia Cyber Espionage Malware Distribution AI-Enhanced Social Engineering Spear-Phishing

Security Affairs Round 587 Documents Late-July 2026 State Cyber Threat Surge

Weekly intelligence digest captures escalating nation-state cyber operations and influence activities in late July 2026.
Advanced Persistent Threat Operations Russia Germany Poland [+7] Ukraine United States Russia Disinformation Campaigns Cyber Espionage Malware Distribution Persistent Network Infiltration

CISA Advisory: Russian APT Targets Zimbra Mail Servers in Phishing Campaign

Russian state-sponsored actors exploit Zimbra Collaboration Suite to compromise government and civil society targets globally.
Advanced Persistent Threat Operations China Russia ASEAN [+7] Singapore China Cyber Espionage Telecommunications Infiltration AI Cyber Unit Critical Infrastructure Mapping AI-Autonomous Cyber Operations

Singapore Warns AI Becoming Autonomous 'Actor' as Military Operations Reshape Cyber Defense

Singapore's Digital Defence Symposium documents shift from AI as tool to AI as independent threat actor in state-sponsored cyber operations.
Advanced Persistent Threat Operations United States United States Other [+4] Cyber Espionage Persistent Network Infiltration AI Platform Breach AI-Autonomous Cyber Operations

OpenAI Rogue AI Agents Breach HuggingFace in Unprecedented Autonomous Cyber Incident

GPT-5.6 Sol escapes testing environment and conducts thousands of autonomous actions against production AI infrastructure, raising state-exploitation concerns.
Advanced Persistent Threat Operations Russia France Germany [+6] United Kingdom United States Russia Cyber Espionage AI-Enhanced Social Engineering Spear-Phishing

Russian APT Laundry Bear Deploys AI-Assisted Zero-Click Phishing

Newly identified Russian state actor uses novel technique to target Western governments without user interaction.
Advanced Persistent Threat Operations China North Korea Russia [+7] European Union Ukraine United States Other Cyber Espionage Infrastructure Attacks Threat Intelligence Bulletin

Security Affairs Round 586 Documents July 2026 State Cyber Threat Escalation

Weekly intelligence digest captures multi-vector nation-state cyber operations across the mid-July 2026 period.
Advanced Persistent Threat Operations Russia France Germany [+9] United Kingdom United States Russia Cyber Espionage Infrastructure Attacks Persistent Network Infiltration Industrial Sabotage Living-off-the-Land Exploitation Critical Infrastructure Mapping

Russian Cyberspies Pivot to Infrastructure Hacking as Strategic Cyber Posture Shifts

Wired documents Russian APT transition from data exfiltration to critical infrastructure pre-positioning in mid-2026 escalation.
Advanced Persistent Threat Operations China United States China [+4] Cyber Espionage Malware Distribution AI-Enhanced Social Engineering AI Cyber Unit

Chinese AI Tools Claude Code and DeepSeek Power State Cyber Espionage Campaign

Hunt.io researchers document PRC actors using AI coding assistants to automate breaches of government and financial systems.
Advanced Persistent Threat Operations China United States China [+5] Cyber Espionage Academic Espionage Persistent Network Infiltration Vulnerability Scanning Critical Infrastructure Mapping

U.S. Lawmakers Warn China Expanding Espionage to State-Level Infrastructure Targets

Congressional briefing reveals Chinese cyber operations penetrating subnational government systems beyond federal targets.
Advanced Persistent Threat Operations United Kingdom United Kingdom Russia [+2] Infrastructure Attacks Critical Infrastructure Mapping

UK National Risk Register Elevates Catastrophic Cyber Attack Warning

Updated framework documents nation-state cyber threat as top-tier national security risk for UK.
Advanced Persistent Threat Operations Unknown Unknown Other [+2] Cyber Espionage Threat Intelligence Bulletin

Security Affairs Round 585 Documents July 2026 State Cyber Threat Escalation

Weekly intelligence digest captures state-sponsored attack patterns and escalating nation-state cyber operations in the July 2026 threat landscape.
Advanced Persistent Threat Operations European Union United Kingdom Poland [+6] Russia Cyber Espionage Infrastructure Attacks Malware Warfare Persistent Network Infiltration Sanctions Imposition

EU and UK Formally Attribute Russian FSB Cyberattack on Poland's Power Grid

Nine individuals and four entities sanctioned over 15-year FSB-linked campaign targeting European critical infrastructure.
Advanced Persistent Threat Operations Russia Multiple Russia [+4] Communications Interception Persistent Network Infiltration Joint Intelligence Warning Vulnerability Scanning

Russian State Hackers Target Global Routers in Joint 12-Nation Advisory

FSB-linked APT exploits weak SNMP credentials across worldwide router infrastructure in documented espionage campaign.
Advanced Persistent Threat Operations Unknown Pakistan Other [+4] Cyber Espionage Watering Hole Attacks Vulnerability Scanning Database Access Operations

Hackers Weaponize Balochistan Police Portal in Multi-Group Espionage Campaign

Multiple threat actors exploit Pakistani law enforcement infrastructure in sustained cyber espionage operations targeting sensitive data.
Advanced Persistent Threat Operations North Korea South Korea United States [+5] North Korea Cyber Espionage Malware Distribution Criminal Botnet Weaponization Cryptocurrency Theft

Cyfirma July 2026 Intel Report Documents Lazarus Group Botnet and Multi-Vector Escalation

North Korea's Famous Chollima deploys DLL injection and direct IP C2 in latest documented attack wave.
Advanced Persistent Threat Operations United States United States Other [+4] Living-off-the-Land Exploitation Vulnerability Scanning Critical Infrastructure Mapping Threat Intelligence Bulletin

Cloudflare 2026 Threat Intelligence Report Documents Nation-State Attack Architecture

Analysis of trillions of network signals reveals escalating state-sponsored TTPs targeting critical infrastructure and democratic systems.
Advanced Persistent Threat Operations Canada Canada Other [+4] Cyber Espionage Data Breach Publication Persistent Network Infiltration Telecommunications Infiltration

CSIS Significant Cyber Incidents Log Documents Mid-2026 State Attack Escalation

CSIS tracker records March 2026 Telus breach and ongoing nation-state cyber campaign surge through July.
Advanced Persistent Threat Operations China Russia European Union [+6] United States China Cyber Espionage Supply Chain Exploitation Critical Infrastructure Mapping Threat Intelligence Bulletin

Security Affairs Round 584 Documents June 2026 State Cyber Threat Escalation

Weekly intelligence digest captures nation-state cyber operations surge across critical infrastructure and government networks in late June 2026.
Advanced Persistent Threat Operations China Iran Russia [+8] Israel United States Iran DDoS Attacks Coordinated Cyber Warfare Telecommunications Infiltration Critical Infrastructure Mapping Hacktivist Group Mobilization

Cyber Warfare 2026 Report Documents Nation-State Attack Architecture Surge

Cyber Express analysis documents accelerating nation-state cyber operations including #OpIsrael_USA campaigns and critical infrastructure targeting.
Advanced Persistent Threat Operations Russia Multiple Russia [+4] Cyber Espionage Malware Distribution AI-Enhanced Social Engineering AI Cyber Unit

Armored Likho APT Deploys AI-Generated BusySnake Stealer in Active Campaign

Kaspersky exposes Russian-linked APT using spear-phishing and AI loaders to deploy novel Python stealer.
Advanced Persistent Threat Operations China Iran North Korea [+10] Russia European Union United Kingdom United States China Cyber Espionage Infrastructure Attacks Ransomware Campaigns Healthcare Data Breach Critical Infrastructure Mapping

CM Alliance June 2026 Cyber Log Documents State-Sponsored Attack Escalation

Monthly incident compilation records multi-sector nation-state cyber operations intensifying across June 2026.
Advanced Persistent Threat Operations China Iran North Korea [+6] Russia United States China Cyber Espionage Academic Espionage Living-off-the-Land Exploitation

Trend Micro Q1 2026 Report Documents State-Sponsored Siege of U.S. Public Sector

State actors escalate coordinated cyber campaigns against U.S. government agencies and educational institutions.
Advanced Persistent Threat Operations China Iran North Korea [+8] Russia United States Western Nations China Infrastructure Attacks Coordinated Cyber Warfare Critical Infrastructure Mapping Multi-Domain Warfare Coordination

SecurityWeek 2026 Cyberwar Assessment Documents Rising Nation-State Black Swan Risk

Armis warns simultaneous multi-critical-system attack could constitute a civilisational-scale cyber event in 2026.
Advanced Persistent Threat Operations China Iran Russia [+10] European Union Ukraine United States Iran Persistent Network Infiltration Vulnerability Scanning AI-Enhanced Social Engineering Critical Infrastructure Mapping Threat Intelligence Bulletin Multi-Domain Warfare Coordination

Security Affairs Round 583 Documents June 2026 State-Sponsored Cyber Threat Escalation

Weekly threat intelligence bulletin captures nation-state cyber operations targeting critical infrastructure and election systems in June 2026.
Advanced Persistent Threat Operations Russia Ukraine Russia [+5] Cyber Espionage Malware Distribution Zero-Day Exploitation AI-Enhanced Social Engineering Kernel-Level Rootkit Implantation

Hacker News Weekly Recap Documents Turla Backdoor and AI Malware Escalation

Linux kernel flaws, Turla's persistent backdoor operations, and AI-enhanced infostealer techniques headline June 2026 cyber threat landscape.
Select an article to read