Laundry Bear exploited a zero-day vulnerability for five months before it was patched in November 2025, and the group is still actively exploiting vulnerable environments.

State-sponsored attackers are targeting critical infrastructure networks in defense, communications, energy, finance, government and health care.

An international effort sanctioned Russia-based Media Land and took action against companies and people who helped Aeza Group evade previously issued sanctions.

Produced with other world cyber agencies, the document is a “shared vision” of SBOMs, or software bill of materials.

An analysis from iVerify found U.S. allies on the list where mobile providers employ China-based networks.

In a joint advisory with Western allies, the National Cyber Security Centre sounded the alarm about variants of BADBAZAAR and MOONSHINE.

The United States and other Western nations released guidance Tuesday designed to evict the China-linked group in the wake of the high-profile hack.

ForeScout said one of them warranted rating at the maximum severity level, although DrayTek has issued patches.

The internationally coordinated notice offers specific best practices for MSPs and customers amid warnings of increasing threats.

CISA's director said that the vulnerability "is one of the most serious I've seen in my entire career, if not the most serious."