Microsoft Threat Intelligence has uncovered a cyberespionage campaign by the Russian state actor we track as Secret Blizzard that has been targeting embassies located in Moscow using an adversary-in-the-middle | microsoft.com/en-us/security… Microsoft

Unmasking the China-nexus #Storm2603 toolset that pre-dated the ToolShell wave. 📅Active since at least Apr 2025. 🔑Multiple ransomware deployed together: LockBit + Warlock. 💥Custom backdoors: ak47dns & ak47http. Read more --> research.checkpoint.com/2025/before-to…

From Laptops to Laundromats: How DPRK IT Workers Infiltrated the Global Remote Economy July 31, 2025, Domain Tools dti.domaintools.com/from-laptops-t… DomainTools

PlayPraetor's evolving threat: How Chinese-speaking actors globally scale an Android RAT | cleafy.com/cleafy-labs/pl… .Cleafy

SharePoint Zero-Day Exploit (ToolShell) - Network Infrastructure Mapping | Early attacks have been attributed to China-linked groups, in some cases leading to Warlock ransomware infections. resecurity.com/blog/article/s… Resecurity®

Threat Actor Groups Tracked by Palo Alto Networks Unit 42 | Unit 42 considers the following groups to have a motivation that is primarily state-backed rather than financial. unit42.paloaltonetworks.com/threat-actor-g…

CrowdStrike 2025, Threat Hunting Report | The integration of GenAI into insider threat operations by DPRK | Over the past 12 months, CrowdStrike observed a 40% increase in cloud intrusions attributed to China-nexus adversaries | crowdstrike.com/en-us/resource…

The targeting of (a German CEO) represented a new frontier, even when compared with Russia’s long-established and well-documented history of violence against enemies living on foreign soil. bloomberg.com/news/features/… Bloomberg

From the Depths of the Shadows: IRGC and Hacker Collectives Of The 12-Day War August 5, 2025, SecurityScorecard securityscorecard.com/blog/from-the-…

CNN: Thousands of North Korean IT workers have used stolen and made-up US identities to pose as Western developers, engineers, and tech consultants to funnel hundreds of millions of dollars a year to Pyongyang’s military programs. cnn.com/interactive/20… CNN

Two Chinese nationals have been arrested on a federal criminal complaint alleging they knowingly exported to China tens of millions of dollars’ worth of sensitive microchips used in artificial intelligence (AI) applications. justice.gov/opa/pr/two-chi… U.S. Department of Justice

Ukraine's military hackers have discovered detailed Russian records that documented the forced relocation and transfers of Ukrainian children from occupied regions, by compromising servers in Crimea. bitdefender.com/en-us/blog/hot… Bitdefender

Tracing ToneShell: Mustang Panda's Evolving Tradecraft and Campaign Infrastructure August 2, 2025, LinkedIn | by Kyaw Pyiyt Htet (Mikoyan) linkedin.com/pulse/tracing-…

Research: The Evolution of Chinese Smishing Syndicates and Digital Wallet Fraud August 5, 2025, SecAlliance secalliance.com/blog/the-evolu… Cyber Fusion Team