
UK and Allies Issue Alert on Malicious Activity Linked to China’s Integrity Technology Group
The UK, US, and allied nations have published a joint warning detailing cyber threats associated with a Chinese technology firm.

The UK, US, and allied nations have published a joint warning detailing cyber threats associated with a Chinese technology firm.

A surge of cyberattacks on Japanese firms in September has exposed vast amounts of data, prompting officials to mandate immediate security audits.

Microsoft warns that unsupported Windows versions will cease receiving security patches following next year's certificate rotation.

A dual citizen admitted to running a massive laundering operation that processed millions for global cybercrime groups, according to reports.

Attackers compromised the .gh, .sl, and .as country-code top-level domains to issue HTTPS certificates for several Google properties.

Comparitech data shows a surge in claimed attacks during the third quarter, with finance, tech, and healthcare sectors facing significant increases in volume.

As AI agents gain authority over business systems, attackers can manipulate them like business email compromise victims.

OpenAI’s safety team reports disrupting propaganda efforts by Russian and Iranian actors that exploited ChatGPT for fake identities and disinformation.

The Belarusian hacktivist group admits to spending months inside the Moscow Department of Health system, validating earlier Russian security research findings.

Authorities in Germany have detained a Russian national suspected of being a key member of the Qilin ransomware group following his extradition from Japan.

Leader of the Your Mule Cashout network pleaded guilty to orchestrating a sophisticated money laundering scheme across the U.S. and Europe from 2007 to 2014.

The 30-year-old pleaded guilty to drug conspiracy and will forfeit over $100 million in Bitcoin and Virginia properties.

ESET Research details how the MATCHBOIL downloader, linked to threat actor UAC-0099, has evolved its tactics between 2024 and 2026.

Microsoft Security advises organizations to begin testing post-quantum authentication now via its new TLS Pilot Program to prepare for future cryptographic shifts.

The FBI disrupted Flax Typhoon’s MicroScan and FishHub tools, seizing domains linked to a Chinese firm targeting global critical infrastructure.

The FBI and six other nations say hackers tied to Integrity Technology Group accessed stolen emails from government and health sectors in Southeast Asia.

Microsoft plans to significantly reduce the 1 TB OneDrive storage allowance for each member of shared Microsoft 365 family subscriptions.

The National Cyber Security Centre has issued an advisory after ASOS stated it is probing a cyber incident that may have exposed personal customer information.

Intelligence reports indicate that the Russia-aligned threat group UAC-0099 has been steadily upgrading its MATCHBOIL downloader malware throughout 2024.

Attackers exploited stolen employee credentials to breach ASOS via the Simon AI marketing platform, confirming a significant security incident.

OpenAI says it disrupted a far-reaching Russian influence operation tied to the Politology network that targeted schools and officials.

Cyberattacks on two major Protestant churches in South Korea may have compromised sensitive financial and personal records of hundreds of thousands of congregants.

New legal documents reveal ExxonMobil’s internal deliberations on climate science, adding evidence to allegations of a decades-long campaign to mislead the public.

CrowdStrike reports that attackers weaponized the ARTEX AI penetration testing tool to steal data from South Korean financial firms in late 2026.