iranian
-
Strategic Vulnerabilities: The Geopolitical Weaponization of Water and Wastewater Infrastructure
Modern water and wastewater utilities have transitioned into high-value strategic targets within the “gray-zone” of international conflict. Driven by decades…
Read More » -
Critical Path Traversal Vulnerability in Langflow Enables Remote Code Execution (RCE)
Security researchers have identified an active exploitation campaign targeting a high-severity vulnerability in Langflow, tracked as CVE-2026-5027. This flaw facilitates…
Read More » -
Destructive Cyber Campaign “Ababil of Minab” Targets Critical IT and Backup Infrastructure
A sophisticated and highly destructive cyber campaign is currently sweeping through organizations in the Middle East and beyond. Unlike traditional…
Read More » -
Escalation in Iranian Espionage: Analyzing the MiniUpdate and MiniJunk V2 Malware Families
A sophisticated espionage campaign attributed to the Iran-nexus advanced persistent threat (APT) group known as Screening Serpens (also tracked as…
Read More » -
Seedworm’s Evolution: Inside the Iranian-Linked APT’s Surgical Global Espionage Push
The advanced persistent threat (APT) group known as Seedworm—also identified by the monikers MuddyWater, Temp Zagros, and Static Kitten—has long…
Read More » -
False Flag Operations: How MuddyWater Leveraged Chaos Ransomware for Stealthy Espionage
In a sophisticated display of digital deception, Iranian state-sponsored threat actors—widely identified as MuddyWater (Seedworm)—have been observed utilizing the Chaos…
Read More » -
Iranian-Linked Espionage Campaign Targets Omani Government Infrastructure
A sophisticated and wide-reaching espionage campaign has been identified targeting multiple ministries within the Sultanate of Oman. Threat actors, displaying…
Read More » -
Iranian-Linked Hackers Leak Data on 2,379 U.S. Marines, Issue Threats
A cyberattack group with ties to Iran’s Ministry of Intelligence has escalated its campaign against the United States by leaking…
Read More » -
Steganographic Stealth: Deconstructing OilRig’s Newest Cloud-Native Attack Chain
The cybersecurity landscape is witnessing a sophisticated evolution in state-sponsored espionage. APT-C-49—widely recognized by researchers as OilRig, APT34, or Helix…
Read More » -
Analyzing DinDoor, the Deno-Powered Backdoor Disguised as Legitimate Tooling
In the evolving landscape of advanced persistent threats (APTs), attackers are increasingly moving away from custom compiled binaries in favor…
Read More » -
Threat Group Disrupts Middle East Critical Sectors in Cyber Reconnaissance Operation
Cybersecurity researchers have identified a persistent threat group operating with high fidelity to the tradecraft of MuddyWater. This actor recently…
Read More » -
Iran’s CyberAv3ngers Escalates Attacks on U.S. Water Utilities and Industrial Systems
CyberAv3ngers, an Iranian state-linked threat group, has intensified disruptive campaigns against U.S. water utilities and industrial control systems, shifting from…
Read More » -
5,219 Rockwell PLCs exposed online
Censys has warned that more than 5,000 Rockwell Automation/Allen-Bradley PLCs are currently exposed to the internet, as Iranian-affiliated APT actors…
Read More » -
Iranian-Linked Hackers Targeting U.S. Critical Infrastructure Programmable Logic Controller
A joint advisory from multiple U.S. federal agencies warns that Iranian-affiliated advanced persistent threat (APT) actors are actively targeting internet-exposed…
Read More » -
Iran-Linked Hackers Hit M365 Tenants in Middle East Password Spray Campaign
Iran-linked threat actors have launched a coordinated password-spraying campaign targeting Microsoft 365 environments across the Middle East, according to new…
Read More » -
Iranian Hacker Group Handal Claims Breach of Israeli Defense Firm
The international cybersecurity community has been notified about a significant data breach targeting Israeli military infrastructure. Handala, identified as an…
Read More » -
FBI Director’s Personal Email Breached by Iran-Linked Hackers
Iran-linked hackers have compromised the personal email account of Kash Patel, the FBI’s director, and publicly released photographs and documents…
Read More »