Botnets powered by residential proxy networks are proliferating, with nearly 60 million victim IP addresses worldwide, according to Lumen's Black Lotus Labs.
Xu Zewei, a Chinese national accused of conducting cyberespionage on behalf of China's Ministry of State Security, has been extradited from Italy to the United States to face criminal charges tied to the Silk Typhoon hacking group.
A Beijing-linked influence operation attempted to interfere with Tibetan parliament-in-exile elections using AI-generated imagery and inauthentic social media accounts, but researchers say the campaign gained virtually no organic traction.
A newly tracked threat actor, UNC6692, overwhelms victims with emails then impersonates IT helpdesk staff on Microsoft Teams to trick them into installing a modular malware framework dubbed Snow.
Static audits and point-in-time dashboards can no longer keep pace with AI-accelerated threats. Security leaders must shift toward runtime visibility, identity governance, and outcome-based metrics.
A joint advisory from a dozen government agencies across the U.S., U.K., and allied nations warns of a major strategic shift in Chinese cyber operations toward large-scale covert networks built from compromised everyday devices.
Trigona ransomware operators are using a custom-built command-line exfiltration utility to steal data faster and avoid triggering security solutions that flag publicly available tools like Rclone and MegaSync.
Version 2026.4.0 of the Bitwarden CLI NPM package was found to contain malicious code capable of stealing credentials and secrets from victim machines, with links to recent attacks on Checkmarx and the Shai-Hulud worm campaigns.
CrowdStrike has addressed a critical unauthenticated path traversal bug in its LogScale product, while Tenable patched a high-severity flaw in its Nessus scanner that could allow arbitrary file deletion and code execution with System privileges.
A White House memo from chief science adviser Michael Kratsios accuses Chinese entities of industrial-scale campaigns to extract capabilities from U.S. AI models, while a bipartisan House bill seeks sanctions against foreign actors engaged in model extraction attacks.