Advanced Persistent Threat (APT) Stories

Global Stories

Advanced Persistent Threat (APT) stories

Google warns public sector on 22-second cyber hand-off

Public agencies risk ransomware within seconds as attackers exploit identities, cloud tools and virtualisation layers, Google warns.

By Sean Mitchell • 4 min read • 3 days ago

Malware

China-aligned spies target university Roundcube servers

Sensitive physics and engineering research at US and Canadian universities may have been exposed after hackers used Roundcube flaws to enter mail servers.

By Mark Tarre • 4 min read • Last week

Endpoint Protection

Jamf launches Beacon threat-hunting service for Mac

Rising Mac adoption has left many security teams short of Apple-specific expertise, prompting Jamf to add dedicated threat hunting and investigations.

By Joseph Gabriel Lagonsin • 3 min read • This month

Malware

Ransomware victims spot attacks only after data theft

Almost half of ransomware victims discovered breaches only after data theft, underscoring how attackers are evading detection for weeks.

By Mark Tarre • 4 min read • Last month

Multi-factor authentication

Google sues Chinese phishing network over fake texts

The scam network's fake texts may have reached millions of Android users, with authorities linking it to major card theft and losses.

By Joseph Gabriel Lagonsin • 5 min read • Last month

Data Protection

Varist launches DICOM engine to spot hidden malware

Healthcare providers face a new malware route as Varist's engine scans DICOM, HL7 and FHIR files for hidden threats in imaging systems.

By Sofiah Nichole Salivio • 3 min read • Last month

Network Security

Sygnia uncovers Velvet Ant breach dating back to 2016

A near-decade of undetected access raises fresh concern after investigators found the group had hidden in a disconnected network since 2016.

By Sean Mitchell • 4 min read • Last month

Malware

Rapid Brigantine ties ClickFix malware to fake updates

BlueVoyant says a ClickFix malware campaign using fake browser updates is linked to the Rapid Brigantine ransomware ecosystem.

By Mark Tarre • 3 min read • Last month

Security Operations Centres

New China-linked OP-512 cluster targets old IIS servers

Older, internet-facing IIS servers are being singled out by China-linked hackers, with one new cluster able to persist despite partial containment.

By Sean Mitchell • 5 min read • Last month

Malware

North Korea-linked hackers target developers via GitHub

Nearly 100 organisations were hit in a six-week phishing spree that used GitHub repositories and Visual Studio Code tools to infect developers.

By Mark Tarre • 4 min read • Last month

Data Protection

Technology firms become top cyber target in AI race

CrowdStrike said state-backed espionage and extortion are surging as AI assets inside tech groups draw hackers seeking code, models and access.

By Sofiah Nichole Salivio • 3 min read • Last month

Malware

China-linked TA4922 expands attacks to Europe & Africa

Businesses in Europe and Africa now face localised phishing and malware attacks from a suspected China-aligned group that has widened beyond Asia.

By Mark Tarre • 4 min read • Last month

Robotics

ESET links China-aligned hacks to oil, Syria & tech

The report says Chinese threat groups are now tracking oil, reconstruction and strategic technologies across Venezuela, Syria, South Korea and the Gulf.

By Sofiah Nichole Salivio • 4 min read • Last month