A suspected Chinese (PRC) state-sponsored cyber threat group, Salt Typhoon, was recently identified accessing multiple United States internet service providers (ISPs) to conduct cyber espionage. This attack is the latest of campaigns sponsored by the Chinese government.

As the implementation of multi-factor authentication (MFA) becomes prevalent, there is a growing surge in attempts to bypass, breach, and hijack its security measures. Threat actors have increasingly utilized session hijacking in attempts to bypass MFA checkpoints.

The FBI, CISA, NSA, and several partner-nation organizations attributed various cyber operations to Unit 29155, also known as EMBER BEAR , a group affiliated with the Russian General Staff Main Intelligence Directorate (GRU) 161st Specialist Training Center.

The FBI, CISA, and NSA, assess that cyber actors affiliated with the Russian General Staff Main Intelligence Directorate (GRU) 161st Specialist Training Center (Unit 29155) are responsible for computer network operations against global targets since at least 2020.

Over the past few weeks, there has been a significant increase in reported activity associated with Iranian state-sponsored or state-affiliated cyber threat groups. One of these cyber threat actors was observed targeting US and foreign organizations in various sectors.

The current state of geopolitical unrest has led to nation-state threat actors launching cyberattacks to advance their political and economic agendas, thereby influencing and endangering critical information, as well as public safety and services. Click to learn more.

While other state-sponsored cyber threat activity has recently surged, MuddyWater, an Iranian threat group affiliated with the Ministry of Intelligence (MOIS), has consistently targeted Israel and its allies with a barrage of cyberattacks since the onset of the Israeli-Hamas War.

A joint international cybersecurity advisory from across 8 countries, including the U.S., warns of the recently observed tactics used by the Chinese state-sponsored APT40, also known as Kryptonite Panda, GINGHAM TYPHOON, Leviathan, and Bronze Mohawk.

The Cybersecurity and Infrastructure Security Agency (CISA) has collaborated with the Australian Signals Directorate’s Australian Cyber Security Centre (ASD's ACSC) to release an advisory outlining a People's Republic of China (PRC) state-sponsored cyber threat group.

There has been an observed escalation of various state-sponsored cyber threat actors' activities. Recently exposed activity by Russian and Chinese-backed hacking groups indicates that the cyber threat landscape has been permanently altered.