LIVE · cybersecurity feed
Live wire
security

New Zealand says China tried using space investments to spy on local affairs

Intelligence Service says finding domestic threats is harder due to proliferation of toxic content online

zeroday.news ·

New Zealand’s Security Intelligence Service (NZSIS) has accused Chinese entities of attempting to establish space infrastructure within the country for military intelligence gathering. This allegation was detailed in the NZSIS’s annual threat environment assessment, released by Director-General of Security Andrew Hampton.

The report highlights New Zealand’s growing space sector, noting its geographical suitability for Ground Based Space Infrastructure (GBSI) used for tracking satellites, space debris, and collecting scientific data. However, the NZSIS warns that such infrastructure is also attractive to foreign states seeking to advance military capabilities and intelligence operations.

As a case study, the assessment cited a China-based organization identified as "Purple Mountain Observatory," which reportedly has "close links" to Beijing. This organization allegedly attempted to install GBSI in New Zealand, collaborating with a local company that was likely unaware of the equipment's potential for collecting military intelligence or the ultimate recipients of the data. The NZSIS believes Purple Mountain would have willingly shared any collected data, noting that Chinese laws could compel such an organization to provide information to the Chinese government.

The NZSIS stated that it successfully disrupted this particular activity, but indicated it was not the first attempt by Purple Mountain Observatory to install its own GBSI in New Zealand, and likely would not be the last. The report identifies China as the only country observed to be targeting New Zealand "at scale."

Beyond space infrastructure, the assessment also detailed China's military intelligence services' increased targeting of professional networking sites and online job platforms for espionage. Chinese intelligence officers, or their affiliates, reportedly pose as consultants or employees of think tanks or recruitment firms, posting job advertisements for analysts in foreign policy, international relations, defense, or security. Candidates are then vetted to assess their access to information and willingness to divulge it. These job offers are described as lucrative, with intelligence officers often encouraging candidates to retain their government positions to maintain information flow and create opportunities for recruiting colleagues.

The report also suggested that some recent cyberattacks were likely carried out by state-backed groups aiming to destabilize New Zealand.

Domestically, the NZSIS faces challenges in identifying violent extremism amidst a vast and complex online landscape. The report describes this task as "looking for the sharpest needle in endless giant stacks of needles," a shift from the previous analogy of finding a needle in a haystack. The proliferation of toxic content, widespread anonymity, and hidden online locations complicate efforts to differentiate genuine support for violent extremism from hateful language or content designed merely for engagement.

The NZSIS monitors encrypted messaging services and gaming platforms to counter violent online communities. The report notes that algorithms on social media platforms can link non-violent content to progressively more extreme material, potentially exposing individuals to violent extremist content that supports radicalization. New Zealand violent extremists are also observed using encrypted messaging systems, social media, and online gaming platforms to circulate violent material, including weapon tutorials and objectionable content, and to find like-minded individuals.

ShareXLinkedInWhatsAppFacebook

More News

view all →
ransomware

Philips and GE investigating Clop ransomware data theft claims

Tech giants General Electric (GE) and Philips have also confirmed they're investigating claims that the Clop ransomware gang breached their systems and stole data. [...]

security

Hacking Public Wi-Fi DNS to Steal Credentials

Criminals are hacking into public Wi-Fi devices—at hotels, conference centers, and so on—around the world and changing their DNS settings. The goal is to redirect users to fake login pages and steal their credentials.

security

Fake TikTok rewards promise cash you’ll never get

TikTok-branded rewards pages offer cash for simple tasks and daily check-ins. But getting your hands on the money is another story.

vulnerability

Recent macOS Screen Sharing Vulnerability Exploited in Attacks

Threat actors gained root access to the vulnerable systems and deployed a Monero miner. The post Recent macOS Screen Sharing Vulnerability Exploited in Attacks appeared first on SecurityWeek.

CVE-2026-58231critical

Critical SAP Commerce Cloud Vulnerability Exploited 3 Days After Disclosure

The vulnerability tracked as CVE-2026-58231 can be exploited to execute arbitrary code and compromise internal components. The post Critical SAP Commerce Cloud Vulnerability Exploited 3 Days After Disclosure appeared first on SecurityWeek.

vulnerability

Police bust cybercrime ring accused of stealing €30 million in four-day spree

German and Brazilian police dismantled an international bank fraud ring blamed for a €30 million cyberattack on a German financial institution, arresting four people in Brazil and pursuing three more suspects in Spain and Bulgaria. Brazilian police named the operation “Klonen.” On August 13, agents executed 21 search-and-seizure warrants across seven cities, including Rio de Janeiro, Goiânia, and