Advanced Persistent Threat (APT) stories - Page 2

Storm-0249 hijacks trusted security and Windows tools to stealthily broker high-value network access for ransomware operators.

Chinese state-backed hackers mimic Microsoft Teams downloads in a false flag campaign to infect Chinese speakers and blame Russian actors.

CrowdStrike's Falcon platform scores 100% detection and protection with zero false positives in MITRE ATT&CK's toughest cloud-era tests.

China-linked WARP PANDA cyberespionage group targets US cloud networks, exploiting vulnerabilities in Microsoft 365, VMware, and more for sustained data access.

ThreatBook launches its Advanced Threat Intelligence solution to enhance cyber risk detection in Asia Pacific, analysing billions of attack records daily.

Broadcom patches a VMware zero-day flaw exploited for nearly a year, allowing attackers root access to virtual machines in certain configurations.

WatchGuard launches FireCloud Total Access, a hybrid SASE service offering Zero Trust security for MSPs and IT teams to protect remote and hybrid workforces.

A Chinese cyber group has targeted US government and policy organisations with spearphishing attacks amid trade talks, using advanced tactics to gain persistent access.

Chinese-linked EggStreme malware targets Philippine military firm, signalling rising espionage efforts in Asia-Pacific by advanced threat groups.

Proofpoint warns of a potential vulnerability where FIDO authentication can be bypassed via downgrade attacks, exposing users to phishing risks despite advanced security.

Half of Australian government agencies have not adopted the strongest email security, risking cyberattacks on sensitive public sector data and communications.

Microsoft's June 2025 patch fixes 67 flaws, including the first WebDAV zero-day in seven years and critical remote code execution issues across Windows and Office.

Ransomware attacks on industrial firms surged to 708 in Q1 2025, led by manufacturing, with North America and Europe hardest hit, warns Dragos report.

BlackFog updates its AI-powered platform to detect dormant cyber attackers by baseline activity, bolstering defences against advanced persistent and insider threats.

Kaspersky is recognised as a Leader in the 2025 SPARK Matrix for Digital Threat Intelligence Management, praised for its advanced cyber threat intelligence services.

Gurucul unveils Self-Driving SIEM with AI agents to automate security tasks, cutting costs by 40% and boosting analyst productivity in threat management.

Kaspersky has uncovered and patched a critical zero-day vulnerability in Google Chrome, enabling attackers to bypass sandbox protections via malicious links.

Bitdefender has identified a new ransomware group named RedCurl, which has operated discreetly since 2018, utilising advanced cyber mercenary tactics.

A new report by ConnectWise reveals evolving ransomware tactics and attacker evasion techniques, increasing challenges for Managed Service Providers.

As cybersecurity predictions flood in for 2025, analysts warn against sensationalist claims, emphasising the dangers of AI in attacks like Business Email Compromise.