SecurityBrief US - Technology news for CISOs & cybersecurity decision-makers
United States

Cyber espionage Stories

American Stories

Cyber espionage stories

Global Stories

Cyber espionage stories

New China-linked OP-512 cluster targets old IIS servers
Security Operations Centres

New China-linked OP-512 cluster targets old IIS servers

Older, internet-facing IIS servers are being singled out by China-linked hackers, with one new cluster able to persist despite partial containment.

By Sean Mitchell • 5 min read • This month
China-linked hackers target tech firms for AI secrets
Ransomware

China-linked hackers target tech firms for AI secrets

Access to AI research and software is drawing state-backed and criminal attacks, with technology firms now the world's most targeted sector.

By Joseph Gabriel Lagonsin • 3 min read • This month
Technology firms become top cyber target in AI race
Data Protection

Technology firms become top cyber target in AI race

CrowdStrike said state-backed espionage and extortion are surging as AI assets inside tech groups draw hackers seeking code, models and access.

By Sofiah Nichole Salivio • 3 min read • This month
ESET links China-aligned hacks to oil, Syria & tech
Robotics

ESET links China-aligned hacks to oil, Syria & tech

The report says Chinese threat groups are now tracking oil, reconstruction and strategic technologies across Venezuela, Syria, South Korea and the Gulf.

By Sofiah Nichole Salivio • 4 min read • This month
Webworm targets European governments with Discord malware
Cloud Security

Webworm targets European governments with Discord malware

European ministries face a stealthier cyber-espionage campaign as Webworm shifts to Discord and Microsoft cloud tools to steal data.

By Joseph Gabriel Lagonsin • 4 min read • Last month
North Korea-linked hackers stole USD $2.02 billion
Software-as-a-Service

North Korea-linked hackers stole USD $2.02 billion

Losses from North Korea-linked digital asset theft jumped 51% in 2025, exposing banks and fintech firms to more identity-based intrusions.

By Sofiah Nichole Salivio • 3 min read • Last month
Bitdefender finds FamousSparrow energy sector campaign
Supply Chain

Bitdefender finds FamousSparrow energy sector campaign

Repeat breaches exposed an Azerbaijani oil and gas operator to espionage as FamousSparrow exploited Microsoft Exchange flaws for two months.

By Sean Mitchell • 4 min read • Last month
Google says AI-powered cyberattacks are already here
Malware

Google says AI-powered cyberattacks are already here

AI is now being used to write exploits and malware, with Google saying it has traced the first zero-day linked to machine assistance.

By Joseph Gabriel Lagonsin • 5 min read • Last month
State actors target defence suppliers in long game
Firewalls

State actors target defence suppliers in long game

Small defence contractors are left exposed as state-backed hackers spend years mapping supply chains and laying covert access routes before striking.

By Joseph Gabriel Lagonsin • 5 min read • Last month
Cyber attacks on universities rise 63% around the world
Malware

Cyber attacks on universities rise 63% around the world

Data breaches and hacktivism are driving a sharper threat mix, with universities hit 425 times across 67 countries in a year.

By Shannon Williams • 4 min read • Thu, 23rd Apr 2026
BlackBerry survey flags secure messaging gaps in government
Data Protection

BlackBerry survey flags secure messaging gaps in government

Most respondents still trust consumer chat apps for sensitive work, despite widespread confusion over what encryption does not protect.

By Jake MacAndrew • 3 min read • Wed, 22nd Apr 2026
China-aligned TA416 resumes spying on EU & Mideast
Phishing

China-aligned TA416 resumes spying on EU & Mideast

Diplomatic missions in Europe and the Middle East face renewed PlugX-backed espionage as TA416 shifts tactics and targets amid regional tensions.

By Sean Mitchell • 4 min read • Tue, 7th Apr 2026
North Korean operatives target Australian jobs, DTEX warns
Human Capital Management

North Korean operatives target Australian jobs, DTEX warns

Australian employers face a growing insider-threat risk as DTEX says North Korean operatives are applying under false identities for tech roles.

By Shannon Williams • 4 min read • Wed, 1st Apr 2026
China-linked Red Menshen hides inside telecoms networks
Unified Communications

China-linked Red Menshen hides inside telecoms networks

Dormant implants in carrier systems could expose subscriber data and signals across Europe and APAC, Rapid7 warned.

By Joseph Gabriel Lagonsin • 4 min read • Fri, 27th Mar 2026
CrowdStrike flags faster AI-driven cyber attacks worldwide
Ransomware

CrowdStrike flags faster AI-driven cyber attacks worldwide

AI-fuelled cyber attacks are spreading faster worldwide, CrowdStrike warns, as breakout times plummet and criminals weaponise mainstream tools.

By Sofiah Nichole Salivio • 3 min read • Wed, 25th Mar 2026

Stories from Other Regions

Cyber espionage stories

Attackers shift upstream into Australia's network edge
Firewalls

Attackers shift upstream into Australia's network edge

Critical infrastructure and cloud operators face harder-to-detect attacks as criminals turn routers, VPN gateways and IoT kit into proxies.

By Shannon Williams • 4 min read • Fri, 10th Apr 2026
UK firms face rising cyberwarfare threat & soaring ransoms
Ransomware

UK firms face rising cyberwarfare threat & soaring ransoms

UK firms report rising nation-state cyberattacks as average ransomware payouts soar to GBP £7.71 million, outstripping security budgets.

By Shannon Williams • 4 min read • Wed, 18th Mar 2026