Threats | KITEFALL

Charming Kitten Unveiled: Iran’s Elite Cyber Army Targeting Israel Exposed 2025-11-23 20:45 Sri Lanka Guardian A massive leak has revealed the identities, infrastructure, tools, and operations of Iran’s Revolutionary Guards’ top cyber unit, Charming Kitten, exposing their long-term efforts to infiltrate Israel’s military, defense industries, critical infrastructure …
SEC Drops Lawsuit Against SolarWinds and CISO Over Sunburst Attack 2025-11-22 08:22 WebProNews In a move that has sent ripples through the cybersecurity and corporate governance worlds, the U.S. Securities and Exchange Commission (SEC) has voluntarily dismissed its high-profile lawsuit against SolarWinds Corp. and its chief information security …
SEC Drops SolarWinds Case After Years of High-Stakes Cybersecurity Scrutiny 2025-11-21 08:09 The Hacker News Nov 21, 2025Ravie LakshmananCompliance / Cyber Attack The U.S. Securities and Exchange Commission (SEC) has abandoned its lawsuit against SolarWinds and its chief information security officer, alleging that the company had misled investors about the …
When IT fails, OT pays the price 2025-11-20 06:47 Help Net Security State groups, criminal crews, and hybrid operators are all using familiar IT entry points to reach systems that support industrial processes, according to the latest Operational Technology Threat Report from Trellix. The report covers attacks observed from …
Google patches worrying Chrome zero-day flaw being exploited in the wild - here's how to stay safe 2025-11-19 19:38 TechRadar Google patches Chrome zero-day CVE-2025-13223 in V8 engine Bug enabled arbitrary code execution, likely exploited by state-sponsored threat actors Users should update Chrome to version 142.0.7444.175/.176 across platforms Google has patched a worrying …
EdgeStepper Implant Reroutes DNS Queries to Deploy Malware via Hijacked Software Updates 2025-11-19 16:06 The Hacker News Nov 19, 2025Ravie LakshmananCyber Espionage / Malware The threat actor known as PlushDaemon has been observed using a previously undocumented Go-based network backdoor codenamed EdgeStepper to facilitate adversary-in-the-middle (AitM) attacks. …
Iranian Hackers Launch ‘SpearSpecter’ Spy Operation on Defense & Government Targets 2025-11-14 20:13 The Hacker News The Iranian state-sponsored threat actor known as APT42 has been observed targeting individuals and organizations that are of interest to the Islamic Revolutionary Guard Corps (IRGC) as part of a new espionage-focused campaign. The activity, detected in …
China and the risks of renewables 2025-11-08 07:53 Prospect Since the dawn of the industrial age, energy security has been defined as a reliable supply of fossil fuels at a stable and reasonable price. The pursuit of it has seen countries invaded, regimes toppled and civil wars prolonged in repeated battles to …
Kaspersky shares top trends in the financial sector 2025-11-08 06:50 bizbahrain The financial industry is rapidly advancing into a new digital era– more dynamic, intelligent, and interconnected than ever before. However, it brings not only rapid operational processes, highly personalized customer experiences, and limitless scalability …
Sora 2 Makes Videos So Believable, Reality Checks Are Required 2025-11-07 15:01 Dark Reading Generative artificial intelligence (GenAI) tools can produce entertaining content, aid in research, and advance user productivity. But the rapid emergence in the market of new tools such as the new audio and video generation model Sora 2, combined with a …
Iranian Hackers Exploit RMM Tools to Target Academics and Foreign-Policy Experts 2025-11-06 20:52 GBHackers Proofpoint Threat Research has identified a previously unknown Iranian threat actor, dubbed UNK_SmudgedSerpent, that conducted sophisticated phishing campaigns against academics and foreign policy experts between June and August 2025. The group employed …
Kaspersky Shares Top 5 Trends in the Financial Sector 2025-11-06 14:50 IT News Africa The financial industry is rapidly advancing into a new digital era—more dynamic, intelligent, and interconnected than ever before. However, it brings not only rapid operational processes, highly personalized customer experiences, and limitless scalability, …
APT 'Bronze Butler' Exploits Zero-Day to Root Japan Orgs 2025-11-06 02:00 Dark Reading A Chinese advanced persistent threat (APT), "Bronze Butler," breached organizations in Japan using a zero-day vulnerability in a locally popular endpoint management tool. The software at issue, "Lanscope," is used by tens of thousands …
Mysterious 'SmudgedSerpent' Hackers Target U.S. Policy Experts Amid Iran–Israel Tensions 2025-11-06 00:59 The Hacker News Nov 05, 2025Ravie LakshmananCybersecurity / Cyber Espionage A never-before-seen threat activity cluster codenamed UNK_SmudgedSerpent has been attributed as behind a set of cyber attacks targeting academics and foreign policy experts between June and …
Google Uncovers PROMPTFLUX Malware That Uses Gemini AI to Rewrite Its Code Hourly 2025-11-06 00:58 The Hacker News Google on Wednesday said it discovered an unknown threat actor using an experimental Visual Basic Script (VB Script) malware dubbed PROMPTFLUX that interacts with its Gemini artificial intelligence (AI) model API to write its own source code for improved …
Virtual Shadows: How Russian Hackers Hide Malware in Linux VMs on Windows 2025-11-05 23:52 WebProNews In the ever-evolving cat-and-mouse game of cybersecurity, a sophisticated new tactic has emerged from Russian state-aligned hackers. Dubbed ‘Curly COMrades’ by researchers, this group is exploiting Microsoft’s Hyper-V virtualization technology to embed …
Microsoft’s Scareware Sensor: Edge’s New Scam Shield Unveiled 2025-11-04 23:36 WebProNews In the ever-evolving battle against online scams, Microsoft has rolled out a significant upgrade to its Edge browser: a new scareware sensor designed to detect and block fraudulent pages with unprecedented speed. This feature, integrated into Microsoft …
China’s Stealthy Zero-Day Strike on European Diplomats Exposed 2025-11-03 18:32 WebProNews In the shadowy world of cyber espionage, a sophisticated campaign has emerged, with Chinese state-sponsored hackers exploiting an unpatched vulnerability in Microsoft Windows to infiltrate the systems of European diplomats. This zero-day flaw, actively …
120 Most Attractive Hobbies for Men 2025-10-31 02:59 The Gentleman's Journal There comes a moment in every man’s life, usually somewhere between his second espresso and his third minor existential crisis, when he realises he has absolutely no hobbies. He has emails, opinions, and perhaps a gym membership that exists mainly as …
Malicious NPM Packages Disguised With 'Invisible' Dependencies 2025-10-29 20:43 Dark Reading As poisoned software continues to pop up across the industry, some threat actors have found a way to hide malicious code in npm packages and avoid detection from most security tools. In an blog post published today, Koi Security detailed how it uncovered …
Linux Security 2026: Emerging Risks Impacting Cloud and IoT Infrastructure 2025-10-29 10:27 Linux Security It’s clear that a growing number of these incidents began on Linux-based systems. Attackers continue to use automation and AI to scan for unpatched packages, weak SSH setups, and kernel flaws faster than most teams can respond. The pattern isn’t new, but …
Microsoft Warns AI-Driven Cyber Threats 2025-10-24 23:35 DevX Nation-state hackers from Russia, China, Iran, and North Korea are turning to artificial intelligence to sharpen cyberattacks on U.S. targets, according to Microsoft. The company’s new research says AI is helping adversaries improve speed, scale, and …
Middle East Cyber Resilience 2030: Unified Defense in a $26B Market 2025-10-24 21:33 Security Boulevard The Middle East is undergoing one of the fastest digital transformations in the world. National initiatives such as Saudi Vision 2030, Kuwait Vision 2035, and the UAE Digital Government Strategy are fueling large-scale modernization across every sector. …
The Best Ways To Incorporate Bahamut Into Your D&D Campaign 2025-10-24 18:45 TheGamer Bahamut, Paladeen, Fizban. These are just some of the names used by the God of Dragons. Bahamut is a key figure in the lore of Dungeons & Dragons, famous for being one of the very few CR 30 creatures in the game, too, and the only one who is …
APT36 Targets Indian Government with Golang-Based DeskRAT Malware Campaign 2025-10-24 15:41 The Hacker News Oct 24, 2025Ravie LakshmananCyber Espionage / Malware A Pakistan-nexus threat actor has been observed targeting Indian government entities as part of spear-phishing attacks designed to deliver a Golang-based malware known as DeskRAT. The activity, …
Hacked by Iran, this Toronto activist fears 'the Salman Rushdie syndrome' 2025-10-24 10:14 Pincher Creek Echo Breadcrumb Trail Links News Knowing she was being monitored was chilling for Raheel Raza, as she’d just learned a Pakistani journalist friend was attacked by gunmen and died from his injuries “You are on Iran’s radar,” Iranian dissidents told human rights …
Iran’s IRGC Targets Canadian Counter-Islamist Raheel Raza 2025-10-23 01:40 Middle East Forum The Islamic Revolutionary Guard Corps (IRGC)—the dreaded military and intelligence arm of Iran’s theocratic regime—has allegedly targeted Raheel Raza, a prominent Pakistani-Canadian journalist and human-rights activist known for her outspoken criticism of …
Russian Hackers Deploy Malware via Fake CAPTCHA Phishing Attacks 2025-10-22 15:30 WebProNews In the shadowy world of cyber espionage, Russian state-sponsored hackers have refined a deceptively simple tactic: weaponizing the ubiquitous “I am not a robot” CAPTCHA prompt to infiltrate high-value targets. This method, which tricks users into …
Heart’s Home 2025-10-22 14:36 Orion Magazine TWENTY-FIVE YEARS AGO, Julian Hoffman and his wife, Julia, decided to pack up their busy London lives and move to a place they’d never seen: a remote village near the shores of a wild lake in the mountains of northern Greece. The idea came to them at the …
US denies Hamas violating deal, is aiming to set up safe zone for Gazans fleeing group 2025-10-16 03:26 The Times of Israel The United States denied on Wednesday that Hamas is violating the ceasefire deal with Israel, insisting that a dragged-out process to return the bodies of hostages held in Gaza was expected, given the difficult conditions on the ground. “We’ve heard a lot …
Mapping South Korea’s Defence Industrialisation in the Age of Smart Technologies 2025-10-15 19:44 Observer Research Foundation Introduction: Phases of South Korea’s Defence Industrialisation Phase 1: Heavy Chemical Industries Lead the Way South Korea’s initial defence industrialisation started in the early 1950s, five years after its independence, when it faced a war with North …
APT35: Inside the Structure, Toolset, and Espionage Operations of an IRGC-Linked Group 2025-10-08 12:06 GBHackers In a groundbreaking disclosure, CloudSEK’s TRIAD unit has unearthed internal operational materials that shed light on Charming Kitten (APT35), revealing an intricate espionage apparatus linked to Iran’s Islamic Revolutionary Guard Corps (IRGC). The leak …
Russia, Chinese Hacking Buffets Europe 2025-10-01 23:17 Bank Information Security - New Jersey Cyberwarfare / Nation-State Attacks , Fraud Management & Cybercrime ENISA: Nation-State Hacking 'Steadily Intensified' Over 12-Month Period Akshaya Asokan (asokan_akshaya) • October 1, 2025 Image: Shutterstock Nearly every member …
APT35 Hackers Targeting Government and Military to Steal Login Credentials 2025-09-30 10:49 GBHackers Stormshield CTI researchers have identified two active phishing servers linked to APT35, revealing ongoing credential-stealing operations targeting government and military entities. In an active threat-hunting operation, Stormshield’s Cyber Threat …
Cyber criminals from Russia and Iran target MoD staff with fake LinkedIn job ads 2025-09-29 16:05 The i paper Sophisticated AI-generated job adverts are being used in a brazen attempt to breach devices belonging to UK and allied military officials Cyber criminals based in Iran, Russia and Belarus are targeting UK defence personnel with fake job advertisements …
Threat Actors Exploiting Dynamic DNS Providers for Malicious Activity 2025-09-29 09:24 GBHackers Cybersecurity researchers have identified a growing trend where threat actors are increasingly exploiting Dynamic DNS providers to host malicious infrastructure, posing significant risks to enterprise organizations worldwide. Dynamic DNS providers, also …
Iranian State APT Blitzes Telcos & Satellite Companies 2025-09-19 19:41 Dark Reading In the span of just a couple of weeks, Iranian hackers have stolen highly sensitive data from 11 global telecommunications companies, satellite operators, and aerospace equipment manufacturers. Cyber defenders have been tracking or otherwise fending off …
Obrela’s latest Digital Universe report reveals shift to stealthier, more sophisticated attacks 2025-09-19 09:04 Mid East Information Obrela, a global leader in cyber risk management and Managed Detection and Response (MDR), has published its H1 2025 Digital Universe Report, providing insight into the current global cyber threat landscape. The report reveals that attackers are …
Threat Actors: The Real Risk Isn’t Who, It’s How 2025-09-18 20:59 Information Security Buzz If you’ve read a cybersecurity headline recently, chances are you’ve seen names like “Fancy Bear,” “APT28,” “Sandstorm,” or “Storm-0539.” These “threat actor” labels are supposed to help defenders understand who might be behind a cyberattack. In practice, …
DarkSamural APT Group Deploys LNK/PDF Malware to Steal Critical Information 2025-09-10 08:20 GBHackers DarkSamural, a newly identified subspecies of the notorious OceanLotus APT, has launched a sophisticated campaign targeting high-value organizations in Pakistan. Leveraging malicious LNK files masquerading as PDF documents and sophisticated MSC containers …
GONEPOSTAL Malware Exploits Outlook for Stealthy Command-and-Control 2025-09-10 08:20 GBHackers A sophisticated espionage campaign leveraging a previously unknown malware strain dubbed GONEPOSTAL, attributed to the notorious Russian state-sponsored group KTA007, better known as Fancy Bear or APT28. The malware transforms Microsoft Outlook into a …
$10M reward for Russia’s FSB officers accused of hacking US Critical infrastructure 2025-09-04 23:32 Security Affairs $10M reward for Russia’s FSB officers accused of hacking US Critical infrastructure US offers $10M for Russian FSB officers Tyukov, Gavrilov & Akulov, accused of attacking US critical infrastructure and over 500 energy firms worldwide. The US …
US Offers $10M Bounty For FSB Hackers Who Exploited Cisco Vulnerability To Attack Critical Infrastructure 2025-09-04 09:11 Cyber Security News The United States government has announced a reward of up to $10 million for information leading to the identification or location of three Russian intelligence officers. The bounty, offered through the Department of State’s Rewards for Justice program, …
Amazon shuts down watering hole attack attributed to Russia’s APT29 hacking group 2025-09-03 04:23 The Record A digital trap set by Russia’s foreign intelligence service was disrupted by Amazon in a recent operation. The company’s threat intelligence team said it identified a so-called watering hole campaign in August where hackers compromised a legitimate …
Amazon Disrupts Russian Hacking Campaign Targeting Microsoft Users 2025-09-02 12:12 SecurityWeek Amazon has disrupted a Russian watering hole campaign targeting Microsoft users via compromised websites opportunistically redirecting users to malicious infrastructure. Attributed to the state-sponsored cyberespionage group known as Midnight Blizzard ( …
Amazon Disrupts Russian APT29 Watering Hole Targeting Microsoft Authentication 2025-09-01 16:36 Hackread Amazon has disrupted a Russian APT29 watering hole campaign that used compromised sites to target Microsoft authentication with malicious redirects. Amazon’s security team has identified and disrupted a new campaign by APT29, also tracked as Midnight …
Amazon Dismantles Russian APT 29 Infrastructure Used to Attack Users 2025-09-01 11:21 Cyber Security News Amazon’s threat intelligence team uncovered a sophisticated watering hole campaign in late August 2025, which is orchestrated by APT29, also known as Midnight Blizzard, a Russian Foreign Intelligence Service–linked actor. The operation relied on the …
Amazon blocks APT29 campaign targeting Microsoft device code authentication 2025-08-31 12:06 Security Affairs Amazon blocks APT29 campaign targeting Microsoft device code authentication Amazon stopped a Russia-linked APT29 watering hole attack that hijacked Microsoft device code authentication via compromised sites. Amazon announced that it had disrupted an …
Amazon Takes Down Russian APT29 Infrastructure Targeting Users 2025-08-30 11:11 GBHackers Amazon’s cybersecurity team has successfully disrupted a sophisticated watering hole campaign orchestrated by APT29, a notorious hacking group linked to Russia’s Foreign Intelligence Service. The August 2025 operation represents the latest chapter in an …
AWS catches Russia's Cozy Bear clawing at Microsoft credentials 2025-08-29 21:42 The Register Amazon today said it disrupted an intel-gathering attempt by Russia's APT29 to trick Microsoft users into unwittingly granting the Kremlin-backed cyberspies access to their accounts and data. APT29, also known as Cozy Bear and Midnght Blizzard, is …
TAG-144: Actors Attacking Government Entities With New Tactics, Techniques, and Procedures 2025-08-27 15:32 GBHackers The threat actor known as TAG-144, also referred to as Blind Eagle or APT-C-36, has been linked to five distinct activity clusters operating from May 2024 through July 2025, primarily targeting Colombian government entities at local, municipal, and federal …
Russian Hackers Exploit 7-Year-Old Security Flaw in Cisco Devices to Target Critical Infrastructure 2025-08-25 16:05 CPO Magazine Russian hackers linked to the country’s Federal Security Service (FSB) Center 16 have exploited vulnerable Cisco devices for over a year to target critical infrastructure organizations for cyber espionage. The campaign that involves harvesting and …
Weekly Cybersecurity News Recap : Apple 0-day, Chrome, Copilot Vulnerabilities and Cyber Attacks 2025-08-24 20:42 Cyber Security News This past week was packed with high-severity disclosures and active exploitation reports across the global threat landscape. At the forefront, Apple rushed out emergency patches for yet another zero-day vulnerability affecting iOS, iPadOS, and macOS …
Russia-Sponsored Cyber Attack Campaign Targets Networking Devices, Critical Infrastructure 2025-08-22 16:49 Security Magazine A Russia-sponsored cyberattack campaign is targeting end-of-life Cisco devices that remain unpatched against CVE-2018-0171, a security flaw discovered seven years ago. This flaw was exploited by Chinese threat actor Salt Typhoon earlier this year and …
Russian Hackers Exploit 7-Year-Old Cisco Flaw to Steal Industrial System Configs 2025-08-21 15:06 GBHackers Static Tundra, a Russian state-sponsored threat actor connected to the FSB’s Center 16 unit, has been responsible for a sustained cyber espionage effort, according to information released by Cisco Talos. Operating for over a decade, this group specializes …
FBI Warns of Russian Government Hackers Attacking Networking Devices of Critical Infrastructure 2025-08-21 13:48 Cyber Security News The Federal Bureau of Investigation has issued a critical security alert regarding sophisticated cyber operations conducted by Russian Federal Security Service (FSB) Center 16, targeting networking infrastructure across the United States and globally. The …
Legacy Devices Worldwide Under Siege From Hackers, FBI Warns 2025-08-21 12:07 Daily Voice The agency is urging organizations to lock down legacy gear before it opens the door to bigger attacks in an alert issued on Wednesday, Aug. 20. An end-of-life (EOL) networking device is hardware, like a router or switch, that a manufacturer no longer …
Russian APT Exploiting 7-Year-Old Cisco Vulnerability: FBI 2025-08-21 11:10 SecurityWeek For years, a Russian state-sponsored threat actor has been exploiting an old vulnerability in Cisco networking devices to collect configuration information, Cisco and the FBI warn. Patches for the flaw, tracked as CVE-2018-0171 (CVSS score of 9.8) and …
Russian state cyber group Static Tundra exploiting Cisco devices, FBI warns 2025-08-21 02:53 The Record A Russian cyber-espionage group is increasingly targeting unpatched Cisco networking devices through a vulnerability discovered in 2018, according to the FBI. Advisories released on Wednesday by both the FBI and Cisco Talos warned that the Russian Federal …
FBI, Cisco warn of Russia-linked hackers targeting critical infrastructure organizations 2025-08-21 01:36 Cybersecurity Dive Hackers linked to the Russian government have been exploiting a vulnerability in Cisco networking devices to target critical infrastructure organizations, the FBI said on Wednesday. “In the past year, the FBI detected the actors collecting configuration …
FBI Warns FSB-Linked Hackers Exploiting Unpatched Cisco Devices for Cyber Espionage 2025-08-20 22:37 The Hacker News Aug 20, 2025Ravie LakshmananCyber Espionage / Vulnerability A Russian state-sponsored cyber espionage group known as Static Tundra has been observed actively exploiting a seven-year-old security flaw in Cisco IOS and Cisco IOS XE software as a means …
FBI, Cisco Warn of Russian Attacks on 7-Year-Old Flaw 2025-08-20 21:55 Dark Reading Hackers linked to Russia's main domestic intelligence agency are exploiting a seven-year-old vulnerability in unpatched end-of-life Cisco networking devices to target enterprise and critical infrastructure networks in the US and abroad, the FBI and …
Sandy Szwarc: Rare earth minerals, Trump, and the Pebble Mine paradox 2025-08-19 22:28 Must Read Alaska By SANDY SZWARC – PART 1 President Trump has been meeting with Russia, and some speculate it was, in part, to make a deal for Russian rare earth minerals. No country on earth has a greater abundance of critical and rare earth elements than the US yet we …
Discovery in U.S. Spyware Litigation: A Double-Edged Sword? 2025-08-19 14:07 Just Security The U.S. civil litigation discovery process has been known as a double-edged sword, allowing for extensive fact-finding while also imposing significant costs and risks to the privacy, security, freedom of expression, and other values and interests of …
No patch available: AI-made malware could overwhelm cyber-defences 2025-08-17 01:23 The Malaysian Star BERLIN: The "growing weaponisation" of generative artificial intelligence (GenAI) could make older forms of cybersecurity and virus scanning obsolete. Hackers and scammers from North Korea are among those seemingly able to turn the technology to …
Yu-Gi-Oh!: 10 Strongest XYZ Monsters Ever, Ranked 2025-08-11 01:32 Comic Book Resources (CBR) In most trading card games, players have access to a deck that contains anywhere between 40 and 100 cards and a sideboard that they can use to switch cards in and out of their decks between games to counter the opponent. While every card game has its own …
Dark AI: The technology of cyber-evil 2025-08-09 18:07 The Manila Times DANANG, Vietnam — Artificial intelligence (AI) is currently the most powerful and accessible technology since the invention of the personal computer. That same power and accessibility are now being used for cybercrimes, made available by programmers hidden …
Emerging cyber threats for 2025 target healthcare & industry 2025-08-08 07:04 SecurityBrief New research from Secureframe has identified the five most significant emerging cyber threats for 2025, focusing on the risks posed to critical sectors including healthcare, infrastructure, and small and medium-sized businesses. The report by Secureframe …
AI-driven attacks, zero-days and cybercrime syndicates top Secureframe threat report 2025-08-07 13:15 SiliconANGLE A new report out today from compliance automation platform provider Secureframe Inc. details the most dangerous cyberthreats of 2025 so far, with artificial intelligence-enhanced attacks, zero-day exploits and organized cybercrime syndicates emerging as …
New Black Kite tool identifies which vendors are most vulnerable to targeted threat groups 2025-08-07 05:43 Help Net Security Black Kite has unveiled the Adversary Susceptibility Index (ASI), a tool designed for TPRM teams to proactively identify which vendors are most vulnerable to specific threat actors before threats escalate into breaches. “With high-profile threats like Volt …
SCYTHE Unveils Version 5.0: Next-Generation Adversarial Exposure Validation (AEV) Platform 2025-08-04 19:27 Middle East News 247 SCYTHE, the leading provider of advanced proactive cybersecurity solutions, today announced the release of version 5.0 of its flagship platform, marking a transformative leap from traditional Breach and Attack Simulation (BAS) to Evolved Adversarial …
AI is helping hackers automate and customize cyberattacks 2025-08-04 16:26 Cybersecurity Dive Dive Brief: Government-backed hackers are increasingly using artificial intelligence to make their attacks faster and more effective, CrowdStrike said in a report published on Monday. AI is helping cyber threat actors conduct reconnaissance, understand the …
Agentic AI a target-rich zone for cyber attackers in 2025 2025-08-04 15:54 Computer Weekly Cyber criminals and nation-states hostile to Western countries are weaponising artificial intelligence (AI) with gusto to carry out attacks and targeting AI agents as a novel attack vector, according to cyber security company CrowdStrike. The supplier’s …
2025 CrowdStrike Threat Hunting Report: Adversaries weaponise and target AI at scale 2025-08-04 11:21 Computer Reseller News CrowdStrike released the 2025 Threat Hunting Report, highlighting a new phase in modern cyberattacks: adversaries are weaponising GenAI to scale operations and accelerate attacks – and increasingly targeting the autonomous AI agents reshaping enterprise …
U.S. Nuclear Agency Breached via ToolShell SharePoint Vulnerability Chain 2025-07-30 18:11 CPO Magazine A U.S. nuclear agency was among the victims of the SharePoint vulnerability chain, which was exploited to compromise over 54 organizations across the United States, Europe, and Asia. The National Nuclear Security Administration (NNSA) was breached by …