#advancedpersistentthreats — Public Fediverse posts

Wazuh Cloud Tackles Security Ops Complexity With AI-Driven Analysis

Tired of drowning in security ops complexity? Wazuh Cloud simplifies threat detection and response with AI-driven analysis, freeing you from infrastructure headaches and empowering you to stay ahead of evolving threats like ransomware and supply chain attacks.

https://osintsights.com/wazuh-cloud-tackles-security-ops-complexity-with-ai-driven-analysis?utm_source=mastodon&utm_medium=social

#CloudSecurity #SecurityOperations #AidrivenAnalysis #Ransomware #AdvancedPersistentThreats

Palo Alto Networks’ Unit 42 has detailed a prolonged cyber espionage campaign affecting government agencies and critical infrastructure across 37 countries.

The activity demonstrates advanced tradecraft, including phishing-delivered loaders, exploitation of enterprise platforms, multi-layered infrastructure, and stealthy persistence mechanisms. While intelligence collection appears to be the primary objective, researchers warn that the scale and duration of the campaign present long-term risks to public services.

For defenders, this highlights the need for deeper visibility across networks, identities, and supply chains.

💬 What detection gaps does this research expose?
Source: https://unit42.paloaltonetworks.com/shadow-campaigns-uncovering-global-espionage/

🔔 Follow TechNadu for in-depth threat intelligence coverage

#ThreatIntelligence #AdvancedPersistentThreats #CriticalInfrastructure #NationStateThreats #InfoSec #CyberDefense #TechNadu

ToddyCat APT evolves to target Outlook archives and Microsoft 365 tokens https://www.csoonline.com/article/4096650/toddycat-apt-evolves-to-target-outlook-archives-and-microsoft-365-tokens.html #AdvancedPersistentThreats #Cyberattacks #Cybercrime #Security

ToddyCat APT evolves to target Outlook archives and Microsoft 365 tokens https://www.csoonline.com/article/4096650/toddycat-apt-evolves-to-target-outlook-archives-and-microsoft-365-tokens.html #AdvancedPersistentThreats #Cyberattacks #Cybercrime #Security

Iranian APT hacks helped direct missile strikes in Israel and the Red Sea https://www.csoonline.com/article/4093375/iranian-apt-hacks-helped-direct-missile-strikes-in-israel-and-the-red-sea.html #AdvancedPersistentThreats #Cyberattacks #Cybercrime #Security

Iranian APT hacks helped direct missile strikes in Israel and the Red Sea https://www.csoonline.com/article/4093375/iranian-apt-hacks-helped-direct-missile-strikes-in-israel-and-the-red-sea.html #AdvancedPersistentThreats #Cyberattacks #Cybercrime #Security

Zero-day exploits hit Cisco ISE and Citrix systems in an advanced campaign https://www.csoonline.com/article/4089200/zero-day-exploits-hit-cisco-ise-and-citrix-systems-in-an-advanced-campaign.html #AdvancedPersistentThreats #Vulnerabilities #Cyberattacks #Cybercrime #Security

Zero-day exploits hit Cisco ISE and Citrix systems in an advanced campaign https://www.csoonline.com/article/4089200/zero-day-exploits-hit-cisco-ise-and-citrix-systems-in-an-advanced-campaign.html #AdvancedPersistentThreats #Vulnerabilities #Cyberattacks #Cybercrime #Security

Russian APT abuses Windows Hyper-V for persistence and malware execution https://www.csoonline.com/article/4085272/russian-apt-abuses-windows-hyper-v-for-persistence-and-malware-execution.html #AdvancedPersistentThreats #EndpointProtection #WindowsSecurity #Cyberattacks #Cybercrime #Security

Russian APT abuses Windows Hyper-V for persistence and malware execution https://www.csoonline.com/article/4085272/russian-apt-abuses-windows-hyper-v-for-persistence-and-malware-execution.html #AdvancedPersistentThreats #EndpointProtection #WindowsSecurity #Cyberattacks #Cybercrime #Security

North Korean threat actors turn blockchains into malware delivery servers https://www.csoonline.com/article/4074916/north-korean-threat-actors-turn-blockchains-into-malware-delivery-servers.html #AdvancedPersistentThreats #Cyberattacks #Cybercrime #Security #Malware

North Korean threat actors turn blockchains into malware delivery servers https://www.csoonline.com/article/4074916/north-korean-threat-actors-turn-blockchains-into-malware-delivery-servers.html #AdvancedPersistentThreats #Cyberattacks #Cybercrime #Security #Malware

Flax Typhoon exploited ArcGIS to gain long-term access https://www.csoonline.com/article/4072876/flax-typhoon-exploited-arcgis-to-gain-long-term-access.html #AdvancedPersistentThreats #Security

Flax Typhoon exploited ArcGIS to gain long-term access https://www.csoonline.com/article/4072876/flax-typhoon-exploited-arcgis-to-gain-long-term-access.html #AdvancedPersistentThreats #Security

Chinese APT group Phantom Taurus targets gov and telecom organizations https://www.csoonline.com/article/4066651/chinese-apt-group-phantom-taurus-targets-gov-and-telecom-organizations.html #AdvancedPersistentThreats #Cyberattacks

Chinese APT group Phantom Taurus targets gov and telecom organizations https://www.csoonline.com/article/4066651/chinese-apt-group-phantom-taurus-targets-gov-and-telecom-organizations.html #AdvancedPersistentThreats #Cyberattacks

Chinese spies had year-long access to US tech and legal firms https://www.csoonline.com/article/4062723/chinese-spies-had-year-long-access-to-us-tech-and-legal-firms.html #ThreatandVulnerabilityManagement #AdvancedPersistentThreats #NetworkSecurity

Chinese spies had year-long access to US tech and legal firms https://www.csoonline.com/article/4062723/chinese-spies-had-year-long-access-to-us-tech-and-legal-firms.html #ThreatandVulnerabilityManagement #AdvancedPersistentThreats #NetworkSecurity

Salt Typhoon APT techniques revealed in new report https://www.csoonline.com/article/4047953/salt-typhoon-apt-techniques-revealed-in-new-report.html #AdvancedPersistentThreats #CriticalInfrastructure #Cyberattacks

Salt Typhoon APT techniques revealed in new report https://www.csoonline.com/article/4047953/salt-typhoon-apt-techniques-revealed-in-new-report.html #AdvancedPersistentThreats #CriticalInfrastructure #Cyberattacks

China-linked Silk Typhoon Hackers Target SaaS Providers, Zero Days https://thecyberexpress.com/silk-typhoon-hackers-target-saas-providers/ #AdvancedPersistentThreats #TheCyberExpressNews #ThreatIntelligence #TheCyberExpress #Chinesehackers #FirewallDaily #CyberThreat #SilkTyphoon #CyberNews #APTgroups #China

China-linked Silk Typhoon Hackers Target SaaS Providers, Zero Days https://thecyberexpress.com/silk-typhoon-hackers-target-saas-providers/ #AdvancedPersistentThreats #TheCyberExpressNews #ThreatIntelligence #TheCyberExpress #Chinesehackers #FirewallDaily #CyberThreat #SilkTyphoon #CyberNews #APTgroups #China

Russian APT group Curly COMrades employs novel backdoor and persistence tricks – Source: www.csoonline.com https://ciso2ciso.com/russian-apt-group-curly-comrades-employs-novel-backdoor-and-persistence-tricks-source-www-csoonline-com/ #advancedpersistentthreats #rssfeedpostgeneratorecho #CyberSecurityNews #CSOonline #CSOOnline #Malware

Russian APT group Curly COMrades employs novel backdoor and persistence tricks – Source: www.csoonline.com https://ciso2ciso.com/russian-apt-group-curly-comrades-employs-novel-backdoor-and-persistence-tricks-source-www-csoonline-com/ #advancedpersistentthreats #rssfeedpostgeneratorecho #CyberSecurityNews #CSOonline #CSOOnline #Malware

Russian APT group Curly COMrades employs novel backdoor and persistence tricks https://www.csoonline.com/article/4039318/russian-apt-group-curly-comrades-employs-novel-backdoor-and-persistence-tricks.html #AdvancedPersistentThreats #Malware

Russian APT group Curly COMrades employs novel backdoor and persistence tricks https://www.csoonline.com/article/4039318/russian-apt-group-curly-comrades-employs-novel-backdoor-and-persistence-tricks.html #AdvancedPersistentThreats #Malware

Black Hat 2025: Latest news and insights – Source: www.csoonline.com https://ciso2ciso.com/black-hat-2025-latest-news-and-insights-source-www-csoonline-com/ #ThreatandVulnerabilityManagement #DataandInformationSecurity #advancedpersistentthreats #rssfeedpostgeneratorecho #ApplicationSecurity #CyberSecurityNews #SecurityPractices #NetworkSecurity #vulnerabilities #Windowssecurity #CloudSecurity #CSOonline #CSOOnline #blackhat #Security

Black Hat 2025: Latest news and insights – Source: www.csoonline.com https://ciso2ciso.com/black-hat-2025-latest-news-and-insights-source-www-csoonline-com/ #ThreatandVulnerabilityManagement #DataandInformationSecurity #advancedpersistentthreats #rssfeedpostgeneratorecho #ApplicationSecurity #CyberSecurityNews #SecurityPractices #NetworkSecurity #vulnerabilities #Windowssecurity #CloudSecurity #CSOonline #CSOOnline #blackhat #Security

5 challenges CISOs face in using threat intel effectively – Source: www.csoonline.com https://ciso2ciso.com/5-challenges-cisos-face-in-using-threat-intel-effectively-source-www-csoonline-com/ #ThreatandVulnerabilityManagement #advancedpersistentthreats #rssfeedpostgeneratorecho #CyberSecurityNews #SecurityPractices #CSOandCISO #CSOonline #CSOOnline

5 challenges CISOs face in using threat intel effectively – Source: www.csoonline.com https://ciso2ciso.com/5-challenges-cisos-face-in-using-threat-intel-effectively-source-www-csoonline-com/ #ThreatandVulnerabilityManagement #advancedpersistentthreats #rssfeedpostgeneratorecho #CyberSecurityNews #SecurityPractices #CSOandCISO #CSOonline #CSOOnline

5 challenges CISOs face in using threat intel effectively https://www.csoonline.com/article/653990/the-value-of-threat-intelligence-and-challenges-cisos-face-in-using-it-effectively.html #ThreatandVulnerabilityManagement #AdvancedPersistentThreats #SecurityPractices #CSOandCISO

5 challenges CISOs face in using threat intel effectively https://www.csoonline.com/article/653990/the-value-of-threat-intelligence-and-challenges-cisos-face-in-using-it-effectively.html #ThreatandVulnerabilityManagement #AdvancedPersistentThreats #SecurityPractices #CSOandCISO

Novel malware from Russia’s APT28 prompts LLMs to create malicious Windows commands – Source: www.csoonline.com https://ciso2ciso.com/novel-malware-from-russias-apt28-prompts-llms-to-create-malicious-windows-commands-source-www-csoonline-com/ #advancedpersistentthreats #rssfeedpostgeneratorecho #ArtificialIntelligence #CyberSecurityNews #cyberattacks #CSOonline #CSOOnline #Phishing

Novel malware from Russia’s APT28 prompts LLMs to create malicious Windows commands – Source: www.csoonline.com https://ciso2ciso.com/novel-malware-from-russias-apt28-prompts-llms-to-create-malicious-windows-commands-source-www-csoonline-com/ #advancedpersistentthreats #rssfeedpostgeneratorecho #ArtificialIntelligence #CyberSecurityNews #cyberattacks #CSOonline #CSOOnline #Phishing

Novel malware from Russia’s APT28 prompts LLMs to create malicious Windows commands https://www.csoonline.com/article/4025139/novel-malware-from-russias-apt28-prompts-llms-to-create-malicious-windows-commands.html #AdvancedPersistentThreats #ArtificialIntelligence #Cyberattacks #Phishing

Novel malware from Russia’s APT28 prompts LLMs to create malicious Windows commands https://www.csoonline.com/article/4025139/novel-malware-from-russias-apt28-prompts-llms-to-create-malicious-windows-commands.html #AdvancedPersistentThreats #ArtificialIntelligence #Cyberattacks #Phishing

NightEagle hackers exploit Microsoft Exchange flaw to spy on China’s strategic sectors – Source: www.csoonline.com https://ciso2ciso.com/nighteagle-hackers-exploit-microsoft-exchange-flaw-to-spy-on-chinas-strategic-sectors-source-www-csoonline-com/ #advancedpersistentthreats #rssfeedpostgeneratorecho #CyberSecurityNews #cyberattacks #CSOonline #CSOOnline #Security

NightEagle hackers exploit Microsoft Exchange flaw to spy on China’s strategic sectors – Source: www.csoonline.com https://ciso2ciso.com/nighteagle-hackers-exploit-microsoft-exchange-flaw-to-spy-on-chinas-strategic-sectors-source-www-csoonline-com/ #advancedpersistentthreats #rssfeedpostgeneratorecho #CyberSecurityNews #cyberattacks #CSOonline #CSOOnline #Security

Void Blizzard nimmt NATO-Organisationen ins Visier – Source: www.csoonline.com https://ciso2ciso.com/void-blizzard-nimmt-nato-organisationen-ins-visier-source-www-csoonline-com/ #advancedpersistentthreats #rssfeedpostgeneratorecho #CyberSecurityNews #emailsecurity #cyberattacks #CSOonline #CSOOnline

Void Blizzard nimmt NATO-Organisationen ins Visier – Source: www.csoonline.com https://ciso2ciso.com/void-blizzard-nimmt-nato-organisationen-ins-visier-source-www-csoonline-com/ #advancedpersistentthreats #rssfeedpostgeneratorecho #CyberSecurityNews #emailsecurity #cyberattacks #CSOonline #CSOOnline

Void Blizzard nimmt NATO-Organisationen ins Visier https://www.csoonline.com/article/3999120/void-blizzard-nimmt-nato-organisationen-ins-visier.html #AdvancedPersistentThreats #EmailSecurity #Cyberattacks

Void Blizzard nimmt NATO-Organisationen ins Visier https://www.csoonline.com/article/3999120/void-blizzard-nimmt-nato-organisationen-ins-visier.html #AdvancedPersistentThreats #EmailSecurity #Cyberattacks

New Russian APT group Void Blizzard targets NATO-based orgs after infiltrating Dutch police https://www.csoonline.com/article/3996192/new-russian-apt-group-void-blizzard-targets-nato-based-orgs-after-infiltrating-dutch-police.html #DataandInformationSecurity #AdvancedPersistentThreats #EmailSecurity #Cyberattacks

New Russian APT group Void Blizzard targets NATO-based orgs after infiltrating Dutch police https://www.csoonline.com/article/3996192/new-russian-apt-group-void-blizzard-targets-nato-based-orgs-after-infiltrating-dutch-police.html #DataandInformationSecurity #AdvancedPersistentThreats #EmailSecurity #Cyberattacks

After helping Russia on the ground North Korea targets Ukraine with cyberespionage – Source: www.csoonline.com https://ciso2ciso.com/after-helping-russia-on-the-ground-north-korea-targets-ukraine-with-cyberespionage-source-www-csoonline-com/ #advancedpersistentthreats #rssfeedpostgeneratorecho #CyberSecurityNews #cyberattacks #CSOonline #CSOOnline

After helping Russia on the ground North Korea targets Ukraine with cyberespionage – Source: www.csoonline.com https://ciso2ciso.com/after-helping-russia-on-the-ground-north-korea-targets-ukraine-with-cyberespionage-source-www-csoonline-com/ #advancedpersistentthreats #rssfeedpostgeneratorecho #CyberSecurityNews #cyberattacks #CSOonline #CSOOnline

After helping Russia on the ground North Korea targets Ukraine with cyberespionage https://www.csoonline.com/article/3987073/after-helping-russia-on-the-ground-north-korea-targets-ukraine-with-cyberespionage.html #AdvancedPersistentThreats #Cyberattacks

After helping Russia on the ground North Korea targets Ukraine with cyberespionage https://www.csoonline.com/article/3987073/after-helping-russia-on-the-ground-north-korea-targets-ukraine-with-cyberespionage.html #AdvancedPersistentThreats #Cyberattacks

Chinese APT Billbug deploys new malware toolset in attack on multiple sectors https://www.csoonline.com/article/3967354/chinese-apt-billbug-deploys-new-malware-toolset-in-attack-on-multiple-sectors.html #AdvancedPersistentThreats #Cyberattacks #Malware

Chinese APT Billbug deploys new malware toolset in attack on multiple sectors https://www.csoonline.com/article/3967354/chinese-apt-billbug-deploys-new-malware-toolset-in-attack-on-multiple-sectors.html #AdvancedPersistentThreats #Cyberattacks #Malware

North Korea-backed Kimsuky targets unpatched BlueKeep systems in new campaign https://www.csoonline.com/article/3967013/north-korea-backed-kimsuky-targets-unpatched-bluekeep-systems-in-new-campaign.html #AdvancedPersistentThreats #Vulnerabilities #Security

North Korea-backed Kimsuky targets unpatched BlueKeep systems in new campaign https://www.csoonline.com/article/3967013/north-korea-backed-kimsuky-targets-unpatched-bluekeep-systems-in-new-campaign.html #AdvancedPersistentThreats #Vulnerabilities #Security

Russian Shuckworm APT is back with updated GammaSteel malware – Source: www.csoonline.com https://ciso2ciso.com/russian-shuckworm-apt-is-back-with-updated-gammasteel-malware-source-www-csoonline-com/ #advancedpersistentthreats #rssfeedpostgeneratorecho #CyberSecurityNews #cyberattacks #CSOonline #CSOOnline #Security #Malware

Russian Shuckworm APT is back with updated GammaSteel malware – Source: www.csoonline.com https://ciso2ciso.com/russian-shuckworm-apt-is-back-with-updated-gammasteel-malware-source-www-csoonline-com/ #advancedpersistentthreats #rssfeedpostgeneratorecho #CyberSecurityNews #cyberattacks #CSOonline #CSOOnline #Security #Malware

Russian Shuckworm APT is back with updated GammaSteel malware https://www.csoonline.com/article/3959665/russian-shuckworm-apt-is-back-with-updated-gammasteel-malware.html #AdvancedPersistentThreats #Cyberattacks #Security #Malware

Russian Shuckworm APT is back with updated GammaSteel malware https://www.csoonline.com/article/3959665/russian-shuckworm-apt-is-back-with-updated-gammasteel-malware.html #AdvancedPersistentThreats #Cyberattacks #Security #Malware

Salt Typhoon may have upgraded backdoors for efficiency and evasion – Source: www.csoonline.com https://ciso2ciso.com/salt-typhoon-may-have-upgraded-backdoors-for-efficiency-and-evasion-source-www-csoonline-com/ #advancedpersistentthreats #rssfeedpostgeneratorecho #CyberSecurityNews #CSOonline #CSOOnline #Security

Salt Typhoon may have upgraded backdoors for efficiency and evasion – Source: www.csoonline.com https://ciso2ciso.com/salt-typhoon-may-have-upgraded-backdoors-for-efficiency-and-evasion-source-www-csoonline-com/ #advancedpersistentthreats #rssfeedpostgeneratorecho #CyberSecurityNews #CSOonline #CSOOnline #Security

Salt Typhoon may have upgraded backdoors for efficiency and evasion https://www.csoonline.com/article/3856291/salt-typhoon-may-have-upgraded-backdoors-for-efficiency-and-evasion.html #AdvancedPersistentThreats #Security

Chinese APT Silk Typhoon exploits IT supply chain weaknesses for initial access – Source: www.csoonline.com https://ciso2ciso.com/chinese-apt-silk-typhoon-exploits-it-supply-chain-weaknesses-for-initial-access-source-www-csoonline-com/ #advancedpersistentthreats #rssfeedpostgeneratorecho #CyberSecurityNews #HackerGroups #Government #CSOonline #CSOOnline #hacking