APTCoruna and DarkSword: Advanced iOS Exploits Fall into Cybercriminal Hands
The Coruna and DarkSword iOS exploit chains, initially associated with state-sponsored actors and mercenary surveillance vendors, are now spreading among
APT — Page 4
More news
Page 4 / 6 · 47 articlesAPT
APTSandworm Used a Private APN to Target a Polish Power Plant
CERT.PL details Sandworm group using a private APN to target a Polish CHP plant, damaging ICS devices without causing a blackout.
APTCybersecurity: Five Emerging Risks, from U.S. Telecommunications to Coding Agents
Explore five emerging cybersecurity threats, including Chinese presence in U.S. telecom, SideWinder malware, and npm supply chain attacks, targeting persistent access.
APTCompromised QuickFox Installers: FDMTP Backdoor Targets Windows Users
FortiGuard Labs identifies supply chain attack in QuickFox VPN installers, delivering FDMTP backdoor to Windows users since August 2025. Mitigation steps provided.
APTCaptiveCrunch: Midnight Blizzard Targets Public Wi‑Fi to Steal Microsoft 365 Credentials
Midnight Blizzard's CaptiveCrunch campaign hijacks public Wi-Fi captive portals to steal Microsoft 365 credentials using device code phishing and custom malware tools.
APTDarkSword, the iOS Exploit Kit Code Is Public: A Campaign with 100 Lure Sites Targets Those Who Don’t Update
The leaked DarkSword iOS exploit kit code fuels a campaign using 100+ AWS and Apple ID lure sites to deliver GHOSTBLADE malware and steal user credentials.
APTFrom SonicWall to Axios: Attacks and Vulnerabilities of the First Week of August
August cyber attacks recap: SonicWall credential stuffing, npm Axios supply chain compromise, Adobe critical patches, and major data breaches.
APTAnySign4PC zero-day exploited as entry point: 72 South Korean organizations hit, same channel used by Gunra ransomware
AnySign4PC zero-day exploited 72 South Korean organizations via clickless infection, sharing infrastructure with Gunra ransomware attacks.
APTAlert in South Korea: State-sponsored phishing and watering hole attacks infect without any click
South Korean agencies warn of state-sponsored zero-click watering hole and phishing attacks exploiting local software to steal data and extort victims.