The current state of geopolitical unrest has led to nation-state threat actors launching cyberattacks to advance their political and economic agendas, thereby influencing and endangering critical information, as well as public safety and services. Click to learn more.

While other state-sponsored cyber threat activity has recently surged, MuddyWater, an Iranian threat group affiliated with the Ministry of Intelligence (MOIS), has consistently targeted Israel and its allies with a barrage of cyberattacks since the onset of the Israeli-Hamas War.

A joint international cybersecurity advisory from across 8 countries, including the U.S., warns of the recently observed tactics used by the Chinese state-sponsored APT40, also known as Kryptonite Panda, GINGHAM TYPHOON, Leviathan, and Bronze Mohawk.

The Cybersecurity and Infrastructure Security Agency (CISA) has collaborated with the Australian Signals Directorate’s Australian Cyber Security Centre (ASD's ACSC) to release an advisory outlining a People's Republic of China (PRC) state-sponsored cyber threat group.

There has been an observed escalation of various state-sponsored cyber threat actors' activities. Recently exposed activity by Russian and Chinese-backed hacking groups indicates that the cyber threat landscape has been permanently altered.

The NJCCIC continues to observe TOAD phishing email attacks. Prior to the attack, cybercriminals perform reconnaissance on victims, gathering information from various sources, such as past data breaches, social media profiles, and data purchased on the dark web.

LockBit ransomware has long held a dominant position at the forefront of the most active and prevalent threats in the cyber landscape. Since 2019, LockBit has orchestrated numerous attacks targeting entities regardless of their size or global location. Read to learn on how to protect against this.

The National Security Agency and FBI recently issued a cybersecurity advisory regarding APT43, a North Korean linked hacking group, that was exploiting weak email Domain-based Message Authentication Reporting and Conformance policies to mask spearphishing attacks.

There have been attempts by Democratic People’s Republic of Korea (a.k.a. North Korea) Kimsuky cyber threat actors to exploit DNS Domain-based Message Authentication, Reporting and Conformance (DMARC) record policies to conceal social engineering attempts.

The Cyber Army of Russia Reborn, a hacktivist group connected to the Russian government, is actively targeting Water and Wastewater facilities across the United States to break into Supervisory Control and Data Acquisition (SCADA) systems, which control water utilities.