Apple has implemented Threat Notifications to alert iPhone users who are targeted by mercenary spyware, providing users with direct notification when they may be under attack. The feature represents Apple's approach to protecting high-risk individuals and journalists from sophisticated targeted surveillance threats.
APT group HoneyMyte has enhanced its CoolClient backdoor with a kernel-mode rootkit driver, significantly expanding its stealth capabilities. The upgraded malware can now hide malicious processes, files, and network connections from security tools and forensic analysis, making detection and investigation considerably more difficult for defenders.
Broadcom threat intelligence researchers have connected a known Chinese APT group to a lucrative crypto fraud operation, suggesting the group may be engaged in hack-for-hire activities. The findings indicate that the "Jewelbug" APT has expanded beyond traditional espionage to monetize its capabilities through criminal schemes targeting cryptocurrency.
Intelligence Service says finding domestic threats is harder due to proliferation of toxic content online
Researchers have identified a threat actor group operating under the moniker 'Jewelbug' that manages both state-sponsored espionage campaigns and financially motivated cryptocurrency theft operations from a single command infrastructure. This dual operational model suggests a flexible mercenary approach where the same attackers pivot between geopolitical intelligence gathering and direct financial gain depending on client objectives. The consolidated nature of their operations indicates sophisticated operational security practices that allow them to compartmentalize distinct mission types while maintaining unified command and control.
Some say the world will end in fire, some say an agentic swarm
The Polish CERT has released details of another 2025 attack on a combined heat and power plant in the country