The Cybersecurity and Infrastructure Security Agency (CISA) and the United Kingdom’s National Cyber Security Centre, in collaboration with other federal and international partners, released this Joint Cybersecurity Advisory to provide network defenders with vital tools and resources.
CyberAv3ngers is intensifying its attacks on US water and energy utilities. The group is an Iranian advanced persistent threat (APT) with ties to the Islamic Revolutionary Guard Corps Cyber-Electronic Command (IRGC-CEC). In its latest campaign, CyberAv3ngers have been observed...
The Federal Bureau of Investigation (FBI) and the Cybersecurity and Infrastructure Security Agency (CISA) jointly issued this Public Service Announcement (PSA) to warn the public about ongoing phishing campaigns by threat actors associated with the Russian...
Iranian state-sponsored cyber threat actors—including groups operating under the direction of the Islamic Revolutionary Guard Corps (IRGC) and the Ministry of Intelligence and Security (MOIS)—represent a persistent and strategically motivated threat.
Salt Typhoon continues to target US critical infrastructure through sustained and coordinated cyber operations. The group, an advanced persistent threat (APT) linked to the People’s Republic of China (PRC), focuses much of its activity in communications and government.
The Cybersecurity and Infrastructure Security Agency (CISA), along with the NSA, FBI, and international partners released this Joint Cybersecurity Advisory on People’s Republic of China (PRC) state-sponsored Advanced Persistent Threat (APT) actors targeting critical infrastructure.
Russian nation-state cyber actors remain among the most persistent, capable, and strategically aligned threats in the global cyber landscape. Their operations routinely target Western governments, critical infrastructure, defense contractors, and political institutions.
The NJCCIC’s email security solution observed an uptick in campaigns spreading Astaroth malware from TA2725 . Astaroth, first spotted in 2017, is an information-stealing trojan that primarily targets businesses in Brazil, Europe, and other countries throughout Latin America.
China is engaging in sustained cyber operations against US critical infrastructure. The NJCCIC's latest threat analysis report analyzes Chinese state-sponsored cyber campaigns targeting key sectors with the intent to disrupt vital services during a geopolitical conflict.
This Joint Cybersecurity Advisory highlights a Russian state-sponsored cyber campaign targeting Western logistics entities and technology companies. This campaign includes those involved in the coordination, transport, and delivery of foreign assistance to Ukraine.
