NVIDIA is investigating reports of a suspected Chinese intelligence operation targeting CEO Jensen Huang, but the board states no company secrets or U.S. national security were compromised.
Nate Singer says he has seen at least three similar cases and believes more remain unreported.
SilentDelivery, OceanGate and DarkWire share Sparrow tooling against telecom, government, military and research targets.
ESET found the passive backdoor in Kazakhstan and Romania, with the victim Exchange server acting as the control point.
The unnamed 41-year-old was arrested near Gloucester under the National Security Act and remains in custody in London.
Saudi national Abdulrahman Alfozan pleaded not guilty to placing a recording device in an OpenAI executive meeting room.
ESET tracks China-aligned group SlippyNunchucks abusing Sogou Input Method updates via DNS hijacking to deploy DarkVigil since mid-2026.
Public-facing application exploits were the top entry path, with 98 of 461 recorded cases.
Abraham Teklu Lemma, 53, agreed to 120 to 262 months after copying at least 133 intelligence reports.
Gorbag steals data from Ukrainian defense and law enforcement using phishing and WinRAR exploit.
Gorbag deploys BeautyStealer after exploiting a now-patched WinRAR flaw in attacks on Ukrainian targets.
VAPOR PANDA targeted over 200 organizations with ARTEX AI agents in 11 days, confirming post-exploitation at nine sites.
Iran-aligned DarkBlinders compromises Israeli target and Iraqi Kurdish government cloud using spear-phishing and SHELBYC2.
Palo Alto Unit 42 tracks CL-UNK-1211 campaign using SysGoRAT RAT and AI scripts to compromise government Linux servers for espionage
CrowdStrike says the China-linked campaign has hit more than 200 organizations in at least 14 countries since October 17.
From October 17 the China-linked group hit ministries, telecoms, and U.S. defense-related targets; post-exploitation is confirmed at nine.
Anonymous sources told the Times that a Megaspeed executive close to Jensen Huang may have sought Nvidia plans and China export policy.
The New York Times says Trump was briefed about a year ago and Jensen Huang was not warned; Nvidia denies any sensitive leak.
CVE-2026-41709 bypasses ESXi command logging; CrowdStrike does not say it gave initial access.
China-, Iran-, North Korea- and Russia-aligned groups hit governments, semiconductors, drones, crypto firms and Ukraine.
Yossi Cohen says the pager method began in 2002–2004 and was not deployed enough in Gaza before October 7, 2023.
Kaspersky says suspected APT41 used the BlackLotus-like bootkit on diplomats in three Central Asian countries after gaining administrator access.
The item is only a Hacker News link title, with 34 points and 8 comments and no further details.
Matthew Cole writes that MIVD saw a Dubai account that had received hundreds of millions from Azerbaijan.