Threat Actor Activity Feed

Qwen 3.8 27B on my laptop can interpret model weights, too

Simon Willison –

Bitter Deploys PapRAT in Asian Cyber-Espionage Campaign

Infosecurity Magazine –

Binance links $6.3 billion crypto theft to compromised DevOps laptop

Bleeping Computer –

VAPOR PANDA Uses AI-Driven ARTEX to Scale a Global Espionage Campaign

CrowdStrike –

VAPOR PANDA Uses AI-Driven ARTEX to Scale a Global Espionage Campaign

CrowdStrike –

VAPOR PANDA Uses AI-Driven ARTEX to Scale a Global Espionage Campaign

CrowdStrike –

VAPOR PANDA Uses AI-Driven ARTEX to Scale a Global Espionage Campaign

CrowdStrike –

VAPOR PANDA Uses AI-Driven ARTEX to Scale a Global Espionage Campaign

CrowdStrike –

VAPOR PANDA Uses AI-Driven ARTEX to Scale a Global Espionage Campaign

CrowdStrike –

ESET APT Activity Report Q2 2026–Q3 2026

ESET WeLiveSecurity –

China APT Uses AI Pentest Tool Artex in ConnectWise Attacks

SecurityWeek –

Crime Stoppers chapter freezes tips after breach breaks anonymity promise

Malwarebytes Labs –

Iran’s Prince of Persia APT Hosts C&C in US for First Time Since 2016

SecurityWeek –

Russian GRU hackers hit NATO shipbuilder, aircraft engine maker, law enforcement agency in espionage campaign

CyberScoop –

Introducing a new AI chapter in the NCSC research problem book

NCSC UK –

How SentinelOne Blocked APT29's CaptiveCrunch Campaign

SentinelOne –

Prolific Chinese espionage group exploits BeyondTrust zero-day

CyberScoop –

Chinese APT Exploited BeyondTrust Vulnerability as Zero-Day

SecurityWeek –

China Espionage Actor Actively Targeting Critical BeyondTrust Flaw, Google Warns

Infosecurity Magazine –

AI-Powered Espionage Campaign Targets Government Linux Infrastructure

Unit 42 –