NSA outlines 26 zero-trust measures to secure Department of War OT systems
The agency’s guidance targets legacy environments, emphasizing remote-access controls, asset inventories, and passive testing to avoid disrupting operations.
nation-state
-
-
Anthropic launches Critical Infrastructure Defense Program for OT security
Anthropic said the program’s founding partners include Accenture, Booz Allen, CrowdStrike, Deloitte, Dragos, Hitachi, Insane Cyber, Nozomi Networks, Palo Alto Networks, PwC and Rockwell Automation.
-
Google revises hacker group naming system with two‑part names
John Hultquist, chief analyst at Google Threat Intelligence Group, stated that Google tracks more than 5,000 activity clusters in several countries
-
State Department Posts $10 Million Reward for Zhang Yu, Charged Over 2021 Exchange Hacking
The $10 million reward is part of an existing Rewards for Justice program for foreign-government hackers targeting U.S. critical infrastructure, terms unchanged since January 2025.
-
US agencies warn Integrity Technology Group enables China‑linked critical‑infra attacks
The Oct. 8, 2026 advisory urges disabling unused services, patching vulnerabilities and using multifactor authentication.
-
Apple spyware alert reaches 110 countries
Apple says it has sent similar warnings to users in 150 countries to date about mercenary spyware threats.
-
FBI and six other countries link stolen-email portal to China-based firm
Advisory issued Oct. 8, 2026 said hackers tied to Integrity Technology Group stole email from government, law enforcement, healthcare and religious groups and ran a portal giving third parties access
-
Yandex confirms service outage after drone attacks damage three data centers
The attacks hit facilities in Sasovo, Kaluga and Vladimir between October 8 and October 11, shutting down Sasovo and Vladimir completely.
-
Researchers explain APT designations and naming trends for state‑sponsored cyberattacks
Different security vendors may use different names or aliases for the same threat actor, such as APT28 also known as Fancy Bear or Forest Blizzard.
-
Canonical confirms second major DDoS attack on Ubuntu sites this year
On October 8, Canonical said its websites were under a sustained distributed denial-of-service attack, marking the second major such incident in 2026.
-
Analysis: Ukrainian strikes on Yandex data centers did not reduce Russian bot traffic
Cloudflare Radar data indicated Yandex automated web traffic fell to 0.3% after the strikes, while experts said the decline reflected indexing crawlers, not influence‑operation bots.
-
Microsoft, CrowdStrike and Mandiant use different taxonomies for nation‑state hackers
These naming schemes affect attribution confidence and hinder intelligence sharing when vendors apply different names to the same group.