The 10 latest articles on State‑Linked Operations come from 8 sources, published between Nov 9 and Nov 13. Most come from DEV Community (2) and Digital Watch Observatory (2).
People in these stories: Enea (4), SilentAir (4), Andy Piazza (2)
Organizations: SilentAir (4), Microsoft (4), Cairn (3), Liminal Panda (3), Artex (2), IPX (2)
Places: China (5), Europe (4), Singapore (4), Taiwan (3), Asia (3), US (2)
A suspected China-nexus threat group used an AI pen-testing framework in a campaign targeting key U.S. sectors, including advanced semiconductors, U.S. defense industry and civil-society organizations, according to a report released Thursday by Palo Alto Networks. The attackers combined the Cairn framework…
threataft Posted on Nov 13 Originally published at threataft.com SilentAir: A State-Level Actor Intercepted SMS 2FA From Inside the Carrier — and the Phone Never Knew #security #telecom #privacy #infosec A state-level signalling actor called SilentAir compromised equipment inside mobile operators in…
By Bill Toulas November 13, 2026 11:21 AM 0 Vulnerable Check Point Security Gateway instances have been targeted in PHP2Shell attacks that deployed data-wiping malware on VMware ESXi hosts. The attacks started on October 30, initially against Israeli organizations, and were conducted by an actor that…
Etairos.ai Posted on Nov 13 Originally published at threat-intelligence.redeyesecurity.com SilentAir Hijacks Signaling Gear in Asian Mobile Operators to Steal SMS 2FA Codes from Taiwanese Targets #cybersecurity #infosec #security TL;DR what: A state-level group Enea calls SilentAir took over…
Swati KhandelwalNov 13, 2026Cyber Espionage / Threat Intelligence A newly identified spying group used hacked equipment inside Asian mobile operators to intercept the calls and texts of selected people, mostly in Taiwan. Enea, a telecom and cybersecurity software company based in Stockholm,…
Cyber Security NewsMalware 3 min.Read New GhostFrame Malware Targets VMware ESXi Servers to Steal Credentials and Hijack Virtual Machines By Divya November 11, 2026 FacebookTwitterPinterestWhatsApp Researchers have uncovered GhostFrame, a previously undocumented command-and-control (C2) and post-exploitation framework that turns compromised VMware ESXi hosts…
A newly identified state-level actor has used compromised mobile operators in Asia to intercept calls and texts, mainly targeting subscribers in Taiwan. Enea has watched it since early 2025. Enea, a firm providing software for telecommunications and cybersecurity, named the actor…
9 Nov 2026 Cyber threat actors increasingly found using ARTEX Artex has emerged as a recurring feature in cyber threat intelligence reporting since September 2026. Image created via ChatGPT The use of ARTEX, an open-source, large language model (LLM)-driven autonomous penetration-testing framework, has…
12 Nov 2026 Hackers use autonomous AI agents to steal Tajik government documents CloudSEK identified Silent Lynx as the group behind the theft of more than 2,000 sensitive Tajik government documents. Image via Magnific In an investigation published on 11 November 2026 by Reuters, Singapore-based…
by Evan Schuman Contributor Palo Alto tracks a massive Chinese AI attack that sadly lives up to industry fears News Nov 12, 20265 mins if (!emtpy($headline_subheadline ) ):?> Vastly different attack vectors were used as the AI tailored its campaign to each target. endif;?
Campaigns tied to state actors and their cutouts.
An article joins this feed when it matches these terms. Each one is also a search of its own.