cyberespionage news
4 stories
Security Affairs newsletter Round 586 by Pierluigi Paganini – INTERNATIONAL EDITION
SonicWall has issued a warning regarding the active exploitation of two zero-day vulnerabilities affecting its SMA 1000 series products. The company did not immediately disclose specific details about the nature of these vulnerabilities or the extent of the observed exploitation.
China-Linked APT Expands Proxy Network With New Malware
A China-linked advanced persistent threat (APT) group, identified as UAT-7810, has been observed expanding its network of compromised devices, known as Operational Relay Box (ORB) networks, and equipping it with new custom malware. Researchers at Cisco Talos assessed with high confidence that UAT-7810 is a China-nexus group. These ORB networks consist of hijacked routers and other devices that…
Canadian spy agency reports hacking three criminal groups in 2025
Canada's Communications Security Establishment (CSE), the nation's equivalent of the NSA, conducted state-sanctioned cyber operations against three distinct criminal organizations in 2025. These operations targeted a ransomware gang, drug traffickers, and violent extremists operating outside of Canada but posing a threat to the country. The details of these "active cyber operations" were…
Analysis of Ongoing Ousaban Attacks Targeting the Iberian Peninsula
Researchers have observed a new campaign by the banking Trojan Ousaban, which is actively targeting users in Spain and Portugal. This malware, previously known for its activity in Brazil, is being distributed via a sophisticated phishing scheme that employs geofencing and environmental checks to limit its reach.