Executive Summary

Commvault updates its March advisory after detecting nation-state threat activity in Azure; no data breach confirmed, advanced defenses deployed.

ANSSI reveals sustained cyber espionage by APT28 (Fancy Bear) targeting French institutions since 2021. Learn about their tactics and targets.

Timeline of the Cyber Intrusion (May 2023 — Feb 2025)

In the stillness of cyberspace, a silent army is rising. Over 8,600 ASUS routers have fallen into the hands of unknown adversaries…

ConnectWise disclosed a targeted cyber intrusion by a sophisticated nation-state actor affecting a small subset of ScreenConnect customers. Enhanced monitoring is in place.

Amidst India-Pakistan tensions, Bitter APT launched a spear phishing campaign against Pakistan Telecommunication Company, using WmRAT for espionage.

CISA adds 5 new exploited vulnerabilities to KEV, including flaws in ASUS routers, Craft CMS, and ConnectWise. Urgent patching required!

In late 2024, cybersecurity provider SentinelOne discovered that it had become a direct target of a China-linked cyber-espionage operation…

Introduction

Nation-state actors pose a significant and evolving threat to organizations of all sizes. Their sophisticated cyber espionage campaigns…

An Iranian state-sponsored group is using sophisticated phishing and malware to target European defense, telecom, and aviation companies.

F5 disclosed a breach by a "highly sophisticated nation-state" that stole BIG-IP source code and internal vuln info. CISA issued an Emergency Directive mandating immediate patching of 44 flaws.

F5 confirmed a breach by a "highly sophisticated nation-state" that stole BIG-IP source code and internal vuln info. The attack was contained, and F5 is pushing patches and free CrowdStrike EDR licenses.

Over 269,000 F5 BIG-IP devices are exposed on the internet after F5 revealed hackers stole source code and undisclosed vulnerability data. Patch immediately.

Unit 42 exposed Airstalk, a suspected nation-state malware that abuses VMware AirWatch (MDM) APIs for a covert C2 dead drop. The tool is used to steal credentials and browser data in supply chain attacks.

With the arrival of digitalization, waterworks and treatment plants have become prime targets for APT hackers. Yet they are not random victims. Rather, attackers deliberately choose them as pressu…