cyber espionage

China-linked state actors have spent the last several years systematically compromising backbone and edge networking equipment — from provider-edge routers to customer-facing devices — to build a global espionage capability that steals subscriber metadata, intercepts authentication traffic, and...

Israel's military intelligence agency, Unit 8200, has been utilizing Microsoft's Azure cloud platform to store and analyze vast amounts of intercepted Palestinian communications, including millions of phone calls from Gaza and the occupied West Bank. This cloud-based system, operational since...

North Korea’s infamous Lazarus Group has returned to the international cyber stage with worrying new tactics. In a move that marks a tactical shift from sheer disruption to subtle infiltration, recent research reveals the group is seeding malware-laden open source software, bringing fresh...

Here is a summary of the main points from the article on The Register regarding China's accusation against US intelligence: Chinese Claims: China has accused US intelligence agencies of exploiting a Microsoft Exchange zero-day vulnerability to steal defense-related data and control more than 50...

In April 2025, Chinese authorities in Harbin accused the U.S. National Security Agency (NSA) of conducting sophisticated cyberattacks during the February Asian Winter Games, targeting critical infrastructure such as energy, transportation, and defense institutions in Heilongjiang province. The...

Foreign embassies in Moscow are facing an unprecedented onslaught of cyber espionage, orchestrated by Russian state-backed hackers leveraging an array of advanced techniques to compromise their digital security. According to recent disclosures from Microsoft Threat Intelligence, these actors...

Diplomatic missions working in Moscow now face a newly exposed, advanced cyber threat: Secret Blizzard’s adversary-in-the-middle (AiTM) campaign, designed to penetrate even the most security-conscious organizations. According to detailed analysis from Microsoft Threat Intelligence, this Russian...

In a revelation that has sent shockwaves through diplomatic circles and cybersecurity communities alike, recent investigations have exposed a Kremlin-backed espionage campaign leveraging local internet service providers (ISPs) within Moscow to target foreign embassies and siphon intelligence...

Microsoft has recently announced a significant policy change: the company will no longer permit engineers based in China to provide technical support for cloud services utilized by the U.S. Department of Defense (DoD). This decision follows investigative reports that raised concerns about...

In recent weeks, the technology industry has been rattled by revelations that Microsoft, the world’s largest software company and a linchpin of US government cloud infrastructure, permitted engineers based in China to provide maintenance and support for American government agencies utilizing its...

Amid heightening U.S.-China tech rivalry and gathering clouds of suspicion around supply chain security, Microsoft’s recently announced decision to cease using China-based engineers for support on Pentagon cloud projects marks both a watershed moment for defense technology policy and a sobering...

A significant cyberattack exploiting vulnerabilities in Microsoft's SharePoint server software has compromised over 400 organizations worldwide, including South Africa's National Treasury. This breach underscores the escalating threat of state-sponsored cyber espionage and the critical need for...

A significant cybersecurity incident has recently unfolded, targeting Microsoft SharePoint servers worldwide. This attack has compromised numerous organizations, including government agencies and businesses, by exploiting previously unknown vulnerabilities in SharePoint's on-premises software...

Microsoft has recently issued an urgent alert regarding active cyberattacks targeting its on-premises SharePoint Server software. These attacks exploit previously unknown vulnerabilities, commonly referred to as "zero-day" exploits, allowing unauthorized access to sensitive organizational data...

In the world of global technology, nothing happens in isolation, and few decisions ripple as widely as those affecting the intersection of national security and enterprise cloud computing. This reality was underscored recently when Microsoft—one of the world’s foremost tech giants—announced that...

GhostContainer, a newly identified and highly sophisticated backdoor malware, has recently come to light following in-depth research by Kaspersky’s Global Research and Analysis Team (GReAT). Discovered during a critical incident response operation in a government exchange infrastructure...

The abrupt policy change by Microsoft to sever technical support ties between its China-based engineers and US defense clients has sent shockwaves across the tech and national security sectors, exposing the intricate web of challenges faced when securing critical digital infrastructure in a...

In the aftermath of a sweeping global cyberattack that has compromised tens of thousands of Microsoft SharePoint servers, both US government agencies and major energy corporations find themselves grappling with the daunting implications of one of the most significant data breaches in recent...

The revelation that Microsoft allowed China-based engineers to provide support for U.S. military cloud systems has ignited a firestorm within both the tech industry and national security circles, forcing a rapid and highly visible policy reversal from the technology giant. This episode, coming...

In a move sending shockwaves through the global tech and security communities, Microsoft has formally halted the use of China-based engineers for technical support on U.S. military cloud contracts. This decision, which swiftly followed a detailed investigative report, has placed the issue of...