Executive summary

Over the past two decades, China’s vulnerability research industry has evolved from a disorganized network of enthusiasts into a highly structured ecosystem deeply intertwined with state interests…

An iOS exploit developer was shocked to receive an Apple warning after being targeted by the same kind of state-sponsored mercenary spyware he researches.

China's CNCERT claims the US NSA conducted a two-year cyber operation using 42 tools to steal data and infiltrate the National Time and Frequency Center.

Hackers, possibly state-linked, infiltrated Ribbon Communications for 9 months, accessing client files. The telecom supplier (Verizon, DoD clients) has notified victims.

The world’s largest technology companies have begun issuing notifications to users who may have been targeted by state-linked

A Critical RCE (CVSS 10.0) flaw, React2Shell, in React/Next.js's Flight protocol allows unauthenticated system takeover. North Korean and Chinese state actors are actively exploiting the deserialization bug.

Apple patched two critical zero-days in WebKit (UAF & Memory Corruption) under active exploitation in extremely sophisticated attacks against targeted individuals. Update iOS 26 immediately.

The United Kingdom has announced sanctions against two Chinese technology companies, accusing them of reckless and indiscriminate cyberattacks

Koi Security unmasks DarkSpectre, a Chinese threat group that used 300+ browser extensions to spy on 8.8M users and steal corporate meeting data.