Search: “Home Assistant”

10 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Ransomware 164 Vulnerability 155 Malware 127 Policy & legal 126 Industry 100 Phishing & fraud 99 Data breach 82 Exploit / PoC 61 Threat actor 55 Research 21 AI safety & security 15 AI industry 10 Advisory 8 AI tools & infra 7

SeverityAll critical 328 high 256 medium 191 low 237 info 32

US takes down alleged Chinese hacking tools used against Federal Reserve, DOJ and Senate

DOJ takes down QScan and QTRouter Chinese obfuscation platforms used to breach Federal Reserve, DOE, DOJ, and Senate since 2018.

The DOJ and FBI seized domains hard-coded into QScan and QTRouter, platforms run by Nanjing Xinjiuwei Network Technology Company and used by China's Ministry of State Security and PLA. QScan automatically infected IoT devices worldwide which were absorbed into QTRouter, allowing attackers to disguise intrusions as originating from other countries or local sources. Victims included the Federal Reserve, Department of Energy, DOJ, US Senate, NASA, HHS, NIH, plus hospitals, telecoms, power companies, financial institutions, and defense contractors. The FBI investigated QTFY since 2018, tracing a 2019 NASA incident through Pulse Secure VPN exploitation.

The RecordAug 26, 16:36 UTC · 21d agoThreat actor in the wild

Threat actors steal firewall configs, impacting all SonicWall Cloud Backup users

Security AffairsOct 9, 09:35 UTC · Oct 9, 2025Threat actor

DOJ raids 29 ‘laptop farms’ in crackdown on North Korean IT worker scheme

The RecordJun 30, 20:27 UTC · Jun 30, 2025Threat actor

How Arkady Bukh, a New York-based immigrant from the former Soviet bloc, emerged as the go-to defense lawyer for the cybercrime underworld.

CyberScoopSep 22, 21:36 UTC · Sep 22, 2020Threat actor

Friday Squid Blogging: China Bans Taiwanese Squid Imports

Schneier on SecurityDec 9, 22:06 UTC · Dec 9, 2022Threat actor

A Conversation With the DoJ Attorney Who Is Exposing State

The RecordNov 17, 00:00 UTC · Nov 17, 2022Threat actor

Balancing telecom security, law enforcement, and customer trust

Help Net SecurityNov 5, 11:05 UTC · Nov 5, 2025Threat actor

Biden expected to nominate first woman as Army Cyber chief

The RecordDec 21, 00:00 UTC · Dec 21, 2022Threat actor

APT36 Suspected in PATCHCORD Espionage Campaign Using Google Sheets C2

Acronis links the PATCHCORD espionage campaign targeting Afghan telecom and South Asian critical infrastructure to APT36 with moderate confidence.

Acronis Threat Research Unit documented PATCHCORD, a previously undocumented C/C++ backdoor delivered via fake VPN installers impersonating Afghan Telecom (AFTEL), which hijacks Edge, Chrome and Firefox shortcuts for persistence and executes in-memory shellcode. A related Go implant, SHEETCORD, abuses the Google Sheets API for per-victim C2 and was distributed via a domain impersonating India's National Informatics Centre, while a third tool, HACKERAI C2 Agent, uses GitHub Gists and shows signs of LLM-assisted coding. An exposed staging server revealed SuperShell, RAT frameworks, credential-harvesting tools and OpenSSH exploit code, and the researchers attribute the activity to APT36/Transparent Tribe at moderate confidence.

Security AffairsAug 16, 07:24 UTC · Aug 16, 2026Threat actor in the wild

Multiple US citizens plead guilty to helping North Korean IT workers earn $2 million

The RecordNov 14, 20:20 UTC · Nov 14, 2025Threat actor