Rising Cyber Threats from Nation-States and Criminals Targeting U.S. Infrastructure

First seen 5 Jan 2026, 12:33 UTC • Cyberscoop

•24

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

The U.S. faces increasing cyber threats from nation-state actors like China and Russia, who are targeting critical infrastructure and federal networks. The ongoing federal government shutdown and the expiration of key cybersecurity legislation hinder the government's ability to respond effectively to these threats, which have escalated since 2024.

How this analysis works

Attack Flow

13 entities, 22 inferred relationships (STIX 2.1).

Threat Actor (3)

Salt Typhoon
Volt Typhoon
Interlock

Technique (2)

Data Breach
Ransomware

Organization (7)

Administrative Office of the U.S. Courts
City of Mission, Texas
Department of Energy
Department of Health and Human Services
Department of Homeland Security
St. Paul Department of Parks and Recreation
Education

Affected Platform (1)

Microsoft SharePoint

Relationships

Salt Typhoon uses Data Breach
Salt Typhoon uses Ransomware
Volt Typhoon uses Data Breach
Volt Typhoon uses Ransomware
Interlock uses Data Breach
Interlock uses Ransomware
Salt Typhoon targets Administrative Office of the U.S. Courts
Salt Typhoon targets City of Mission, Texas
Salt Typhoon targets Department of Energy
Salt Typhoon targets Department of Health and Human Services
Volt Typhoon targets Administrative Office of the U.S. Courts
Volt Typhoon targets City of Mission, Texas
Volt Typhoon targets Department of Energy
Volt Typhoon targets Department of Health and Human Services
Interlock targets Administrative Office of the U.S. Courts
Interlock targets City of Mission, Texas
Interlock targets Department of Energy
Interlock targets Department of Health and Human Services
Salt Typhoon related to Department of Homeland Security
Salt Typhoon related to St. Paul Department of Parks and Recreation
Salt Typhoon related to Education
Salt Typhoon related to Microsoft SharePoint

Continue Reading

APT28 Exploits Zimbra Vulnerability in Ongoing Attacks Against Ukraine Critical Cisco IMC Vulnerability Allows Full Admin Access via Authentication Bypass LeakNet Ransomware Expands Tactics with ClickFix and Deno Loader New Mistic Backdoor Linked to Ransomware Access Broker Activity Ransomware Attacks Target Dental Organizations, Exposing Sensitive Data Healthcare Cybersecurity Report Highlights Human Error as Major Risk Factor

Rising Cyber Threats from Nation-States and Criminals Targeting U.S. Infrastructure

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading