Espionage

Two Kinds of Bot 2 min read

Ukraine struck three of Yandex’s five data centres from 8 October. Within days a Cloudflare chart was circulating as proof that Russian bot networks had gone dark, and President Zelensky …

Threat Actors Chain 0-day Exploits in Chrome & Windows Byte

ZRON: An Espionage Suite, Allegedly Byte

Orchestration Has No ATT&CK ID 5 min read

MITRE ATT&CK can tell you an attacker dumped credentials (T1003) and moved laterally over SSH (T1021). It cannot tell you those two steps were chosen, sequenced, and executed by an AI agent with …

Bad Connection: Global Telecom Exploitation by Covert Surveillance Actors Byte

GitLab Threat Intelligence on North Korean Tradecraft Byte

2025 Top 20 Chinese Cybersecurity Enterprises 6 min read

On December 29, 2025, the Internet Society of China (中国互联网协会, ISC, an industry association affiliated with MIIT) published the China Internet Enterprise Comprehensive Strength Index (2025). Buried in …

PeckBirdy: LOLBins Exploitation by China-aligned Threat Groups Byte

The Knownsec Leak: China's Cyber-Espionage Exposed Byte

Knownsec: The King of Vulnerability Missed Three Vulnerabilities of Its Own Byte

KnownSec Data Breach: Inside China's State-Sponsored Cyber Arsenal 6 min read

In early November 2025, a massive data breach at Knownsec, a prominent Chinese cybersecurity firm with government connections, exposed over 12,000 classified documents revealing the company’s …

Gotta fly: Lazarus targets the UAV sector Byte

The Rise of Collaborative Tactics Among China-aligned Cyber Espionage Campaigns Byte

Kimsuky leak in Phrack exposes a credential theft playbook Byte

Inside Salt Typhoon: China's State-Corporate Advanced Persistent Threat Byte

Spotting Malicious Remote IT Applicants Byte

Hafnium-affiliated hacker Xu Zewei's arrest and China's cyber ecosystem Byte

An inside look at NSA (Equation Group) TTPs from China's lense Byte

Analysis of the NSO BLASTPASS iMessage exploit Byte

MirrorFace invites Europe to Expo 2025 Byte

Analysis of Spyware That Helped to Compromise a Syrian Army from Within Byte

Operation AkaiRyū: MirrorFace invites Europe to Expo 2025 and revives ANEL backdoor Byte

An inside look at NSA (Equation Group) TTPs from China’s lense Byte

Cellebrite zero-day exploit used to target phone of Serbian student activist Byte

Ruling in WhatsApp against NSO Group case Byte