Advanced Threats

Russia's FSB intelligence agency says the zero-click attacks range far beyond Kaspersky, and it has blamed them on the United States' NSA. Those allegations are thus far uncorroborated.

This is the first incident where a threat actor from the country appears to be laying the groundwork for disruptive attacks in the future, researchers say.

The infamous North Korean APT group is using Log4Shell, the 3CX supply chain attack, and other known vectors to breach Microsoft Web servers.

According to Microsoft and researchers, the state-sponsored threat actor could very well be setting up a contingency plan for disruptive attacks on the US in the wake of an armed conflict in the South China Sea.

Security professionals warn that Google's new top-level domains, .zip and .mov, pose social engineering risks while providing little reason for their existence.

The data shows how most cyberattacks start, so basic steps can help organizations avoid becoming the latest statistic.

RSA's Innovation Sandbox 2023 focused on the software supply chain, as well as attack surfaces exposed by generative AI, ML systems, and APIs.

The notorious Chinese APT is spreading cyber maliciousness around Southeast Asia, and its next targets are already in sight.

APT37 is among a growing list of threat actors that have switched to Windows shortcut files after Microsoft blocked macros last year.

Never before has cyber been higher on the FBI's list of priorities. Will more money allow the feds to make a greater impact?

As threat actors around the world grow and evolve, APTs from the DPRK stand out for their spread and variety of targets.

Researchers observed downloads of installers for the APT's flagship backdoor, MgBot, when users at a Chinese NGO were updating legitimate applications.

Researchers are unraveling the threads connecting two separate, but in some ways overlapping, Russian-language APTs.

Kim Jong Un's Swiss Army knife APT continues to spread its tendrils around the world, showing it's not intimidated by the researchers closing in.

As is typical with emerging technologies, both innovators and regulators struggle with developments in generative AI, much less the rules that should govern its use.