GreyNoise observed an increase in scanning and exploitation attempts against Digital Video Recorders (DVRs) in Ukraine between 21 September and 1 October 2026, coinciding with an escalation in Russian strikes. Most of the activity targeted CVE-2021-36260, an unauthenticated command injection flaw in unpatched Hikvision products. GreyNoise…
A Chinese-speaking operator used autonomous AI agents on the open-source Cairn platform to compromise the websites of more than 100 companies. NorForge tracks the most active campaign as AIA0001: over 1,100 attack projects across 14 dashboards, and more than 1,200 break-in attempts overall. Targets were e-commerce businesses in the United…
A joint advisory (AA25-343A) from FBI, CISA, NSA and some 18 other US, European, Five Eyes and Czech agencies warns that pro-Russia hacktivist groups are conducting opportunistic, low-sophistication attacks on critical infrastructure OT. The groups named are Cyber Army of Russia Reborn (CARR), Z-Pentest, NoName057(16) and Sector16. They e…
F5 Labs, using Efflux sensor telemetry, reports on the most exploited CVEs of April 2025 and on internet-wide scanning for SparkRAT command-and-control servers. A single actor, using three IPs in DigitalOcean ASN 14061, sent identical HTTP POST requests to the SparkRAT in-place update endpoint, each IP scanning for about 13 hours and reac…
A joint advisory (AA26-194a) from NSA, CISA, FBI, DC3 and 15 allied agencies warns that Russian FSB Center 16 cyber actors continue to opportunistically compromise poorly configured and vulnerable networking devices worldwide, primarily routers. The advisory builds on the FBI's August 2025 PSA on the decade-plus campaign and adds TTPs. Go…
A joint advisory (AA26-281A) attributes China-based malicious cyber activity to Integrity Technology Group (Integrity Tech), a for-profit company with links to the Chinese government. The company builds and sells tools, hosts infrastructure and compromises networks worldwide. The actors' TTPs are consistent with Flax Typhoon, Ethereal Pan…