The attack is linked to TA397 (Bitter), a South Asian cyber espionage group known for targeting governments, critical infrastructure, and defense organizations.
In December 2024, Palo Alto Networks' Unit 42 discovered three security vulnerabilities in Microsoft's Azure Data Factory, a service for managing data pipelines across sources.
BadBox, a type of pre-installed malware, has been detected on more than 30,000 internet-connected devices sold globally, as reported by Germany's Federal Office for Information Security (BSI).
Security researchers at Datadog Security Labs have uncovered a campaign targeting security professionals and researchers by a threat actor dubbed MUT-1244 (Mysterious Unattributed Threat).
The U.S. Department of Justice (DOJ), alongside international law enforcement partners, seized Rydox, An online marketplace on the dark web for cybercriminals.