Curated security research, vulnerabilities, advisories and tools for practitioners.

#apt

Security coverage tagged apt.

1.

SilkParasite Infrastructure: SpiceRAT Servers Tied to Energy and Government Targets Across Central Asia

blog | 2026-09-16 00:00 | hunt.io | original ↗ | #threat-intelligence | #apt | #c2

2.

Chinese-Speaking Operator Uses AI Agents to Target Government and Education Systems Across Asia

blog | 2026-09-03 00:00 | hunt.io | original ↗ | #ai-security | #threat-intelligence | #apt

3.

Philippine Nuclear Agency and Naval Contractor Targeted by Suspected Chinese-Speaking Operator Using Known Vulnerabilities

blog | 2026-08-26 00:00 | CVE-2023-49105 | hunt.io | original ↗ | #rce | #threat-intelligence | #attack-surface

4.

Kali Linux 2026.2 Release (GNOME 50, KDE 6.6, Helper Scripts, APT Formats & VM Boot Tweaking)

blog | 2026-06-29 00:00 | kali.org | original ↗ | #pentesting | #red-team | #apt

5.

The Smash-and-Grab Era

blog | 2026-06-17 00:00 | bishopfox.com | original ↗ | #ai-security | #ransomware | #apt

6.

Operation Roundish: Uncovering an APT28 Roundcube Exploitation Toolkit Targeting Ukraine

research | 2026-03-11 00:00 | hunt.io | original ↗ | #threat-intelligence | #malware | #xss

7.

Iranian APT Infrastructure in Focus: Mapping State-Aligned Clusters During Geopolitical Escalation

blog | 2026-03-04 00:00 | hunt.io | original ↗ | #threat-intelligence | #threat-hunting | #apt

8.

Top 10 Critical Threat Actors to Watch in 2026: Ransomware, APTs & Defensive Strategies

incident | 2026-01-23 00:00 | netlas.io | original ↗ | #threat-intelligence | #ransomware | #apt

9.

Operation SouthNet: SideWinder Targets South Asia Maritime

blog | 2025-10-01 00:00 | hunt.io | original ↗ | #threat-intelligence | #phishing | #apt

10.

A CISO’s guide to red teaming part 4: Red teaming for finance and insurance

blog | 2025-09-18 12:00 | bugcrowd.com | original ↗ | #red-teaming | #apt | #threat-landscape

11.

A CISO’s guide to red teaming part 1: The role of red teaming in cybersecurity strategies

blog | 2025-08-21 12:00 | bugcrowd.com | original ↗ | #red-teaming | #offensive-security | #apt

12.

APT MuddyWater Targets CFOs with Multi-Stage Phishing & NetBird Abuse

blog | 2025-08-20 00:00 | hunt.io | original ↗ | #phishing | #social-engineering | #apt

13.

APT Sidewinder Abuses Netlify to Mimic Government and Military Portals in South Asia

blog | 2025-08-08 00:00 | hunt.io | original ↗ | #cloud | #phishing | #apt

14.

TraderTraitor: Deep Dive

research | 2025-07-28 13:17 | wiz.io | original ↗ | #cloud | #supply-chain | #threat-intelligence

15.

A New Kali Linux Archive Signing Key

blog | 2025-04-28 00:00 | kali.org | original ↗ | #supply-chain | #incident-response | #apt

16.

GreenSpot APT Targets NetEase 163.com Users with Fake Download Pages & Spoofed Domains

blog | 2025-02-04 00:00 | hunt.io | original ↗ | #credential-theft | #phishing | #apt

17.

Security flash: Salt Typhoon

blog | 2025-01-16 21:07 | bugcrowd.com | original ↗ | #threat-intelligence | #attack-surface | #apt

18.

APT kết hợp với Ransomware: Phân tích thực trạng

incident | 2024-12-26 08:00 | blog.viettelcybersecurity.com | original ↗ | #threat-intelligence | #ransomware | #apt

19.

DarkPeony’s Trail: Certificate Patterns Point to Sustained Campaign Infrastructure

blog | 2024-11-21 00:00 | hunt.io | original ↗ | #threat-intelligence | #apt | #cyber-espionage

20.

Unmasking Adversary Infrastructure: How Certificates and Redirects Exposed Earth Baxia and PlugX Activity

blog | 2024-10-10 00:00 | hunt.io | original ↗ | #threat-intelligence | #apt | #redirects

21.

The iSOON Disclosure: Exploring the Integrated Operations Platform

blog | 2024-03-21 00:00 | bishopfox.com | original ↗ | #threat-intelligence | #apt | #data-leak

22.

Beyond Headlines & Borders: An Overview of Advanced Threats You Should Know

blog | 2024-02-06 00:00 | hunt.io | original ↗ | #threat-intelligence | #apt | #state-linked

23.

The great non-free-firmware transition

blog | 2024-01-22 00:00 | kali.org | original ↗ | #firmware | #apt | #kali-linux

24.

3 Steps to Protect AD from Wiperware

blog | 2023-02-10 21:42 | semperis.com | original ↗ | #active-directory | #cyber-resilience | #identity-security

25.

Defining Cyber Attack Liability

blog | 2022-08-30 18:44 | bugcrowd.com | original ↗ | #ransomware | #risk-management | #cybersecurity-policy

26.

MICROSOFT SAYS: RUSSIAN SOLARWINDS HACKERS HIT U.S. GOVERNMENT AGENCIES AGAIN

blog | 2021-06-02 15:44 | hackerone.com | original ↗ | #supply-chain | #phishing | #apt

27.

Kaboxer - Kali Applications Boxer

blog | 2021-05-25 00:00 | kali.org | original ↗ | #apt | #kali-linux | #containers

28.

Bug Bytes for December 21: Nation State Attacks, Cybersecurity Legislation and Bug Bounty News

blog | 2018-12-21 00:00 | bugcrowd.com | original ↗ | #bug-bounty | #cloud | #phishing

29.

Making your own Kali Linux Metapackages

blog | 2018-09-18 00:00 | kali.org | original ↗ | #apt | #kali-linux | #debian

30.

Finding Packages for Kali Linux

blog | 2018-04-17 00:00 | kali.org | original ↗ | #linux | #apt | #kali-linux