Related Threat Clusters
-
Critical Check Point VPN Vulnerability Exploited by Ransomware Gang
Check Point Software Technologies disclosed a critical authentication bypass vulnerability (CVE-2026-50751) affecting its Remote Access VPN and Mobile Access products, with exploitation confirmed since May 7, 2026. The…
46 articles · Updated June 8, 2026 -
Jewelbug APT Group Engages in Espionage and Cryptocurrency Fraud
The Jewelbug APT group, based in China, has been conducting simultaneous cyber espionage and cryptocurrency fraud operations. Utilizing a single command-and-control platform named XG-Web, the group has compromised over…
15 articles · Updated August 13, 2026 -
APT28 Exploits Vulnerable Routers for Global DNS Hijacking Campaign
Russian cyber group APT28, also known as Fancy Bear, has been exploiting vulnerabilities in TP-Link and MikroTik routers to conduct large-scale DNS hijacking operations. This campaign, which has affected over 18,000…
100 articles · Updated April 7, 2026 -
Chinese APT CL-STA-1062 Deploys TinyRCT Backdoor Against Southeast Asian Targets
The Chinese-speaking threat group CL-STA-1062 has been actively deploying a new .NET backdoor named TinyRCT against government and critical energy infrastructure in Southeast Asia throughout 2025. This campaign utilizes…
6 articles · Updated June 26, 2026 -
CISA Launches CI Fortify to Enhance Critical Infrastructure Resilience Amid Cyber Threats
The Cybersecurity and Infrastructure Security Agency (CISA) has initiated the CI Fortify program to bolster the resilience of critical infrastructure operators against cyberattacks. This initiative encourages…
24 articles · Updated May 5, 2026 -
UAT-7810 Expands Malware Arsenal to Enhance ORB Network
The China-linked threat actor UAT-7810 is evolving its malware toolkit, notably introducing LONGLEASH, an upgraded version of the SHORTLEASH backdoor. This group exploits known vulnerabilities in unpatched Ruckus…
12 articles · Updated July 7, 2026 -
State-Sponsored Actors Target Network Edge Devices Amid Rising Exploits
Recent reports indicate a significant rise in the exploitation of edge devices, such as VPN gateways and firewalls, by state-sponsored actors. These devices have become the primary attack vector for espionage…
3 articles · Updated July 22, 2026 -
Tropic Trooper Expands Tactics with Multi-Stage Attacks on Japanese and Taiwanese Targets
On March 12, 2026, Zscaler ThreatLabz reported a campaign by the Tropic Trooper APT targeting Chinese-speaking individuals in Taiwan, Japan, and South Korea. The attack involved a malicious ZIP archive containing…
5 articles · Updated April 24, 2026 -
TA416 Resumes Cyber Espionage Against European Governments Amid Geopolitical Tensions
Chinese state-backed group TA416 has reemerged with intensified cyber espionage campaigns targeting European governments, following a quiet period since 2023. Proofpoint reported that the group's renewed activity began…
9 articles · Updated April 1, 2026 -
Daxin Malware and New Backdoor Stupig Resurface in Taiwan
Daxin, a sophisticated backdoor linked to China, has reappeared in Taiwan, targeting a multinational high-tech manufacturer. Discovered in May 2026, it operates stealthily by hijacking legitimate TCP connections for…
6 articles · Updated July 16, 2026
Recent Intelligence Reports
- Chinese Routers Sold Worldwide Contain Backdoors — Darkreading · August 27, 2026
- Taiwan charges nine people for smuggling 'high-end' AI servers to China — Theguardian · August 27, 2026
- Cht Security Receives Frost Sullivans 2026 Taiwan Company Of The Year Recognition For Excellence In Cybersecurity Services 302857822 — www.prnewswire.com · August 25, 2026
- CHT Security Receives Frost & Sullivan's 2026 Taiwan Company of the Year Recognition for ... — Markets.Ft · August 25, 2026
- Taiwan reportedly indicted NVIDIA employees for exporting prohibited AI servers to China — Engadget · August 24, 2026
- Automotive Cybersecurity Market — www.marketsandmarkets.com · August 18, 2026
- Risky Bulletin: The EU publishes its upcoming cybersecurity standards — News.Risky.Biz · August 17, 2026
- Jewelbug Apt Russia — www.security.com · August 16, 2026