Loading...
Loading...
Stay informed about the latest cybersecurity threats, incidents, and guidance affecting rural America and the agricultural sector.
Showing all 100 articles
A guide aims to help tech buyers navigate their switch to post-quantum encryption, but experts cautioned that most products and backend internet protocols have yet to be updated. The post CISA publishes a post-quantum shopping list for agencies. Security professionals aren’t sold appeared first o...
MAKING AMERICA SAFE: DHS Highlights National Security Threats Arrested During First Year of Trump Administration
Kaspersky researchers analyze updated CoolClient backdoor and new tools and scripts used in HoneyMyte (aka Mustang Panda or Bronze President) APT campaigns, including three variants of a browser data stealer.
PeckBirdy command-and-control framework targeting gambling, government sectors in Asia since 2023 has been linked to China-aligned APTs
Introduction The Google Threat Intelligence Group (GTIG) has identified widespread, active exploitation of the critical vulnerability CVE-2025-8088 in WinRAR, a popular file archiver tool for Windows, to establish initial access and deliver diverse payloads. Discovered and patched in July 2025, g...
Cybersecurity researchers have discovered a JScript-based command-and-control (C2) framework called PeckBirdy that has been put to use by China-aligned APT actors since 2023 to target multiple environments. The flexible framework has been put to use against Chinese gambling industries and malicio...
Building and car alarm systems managed by Russian company Delta have been disrupted by a cyberattack blamed on a "hostile foreign state."
Cybersecurity researchers have disclosed details of a new campaign that combines ClickFix-style fake CAPTCHAs with a signed Microsoft Application Virtualization (App-V) script to distribute an information stealer called Amatera. "Instead of launching PowerShell directly, the attacker uses this sc...
Russell Vought’s updated memo using a common attestation form voluntary. A critic told CyberScoop it’s the “first major policy step back” on cybersecurity under Trump. The post OMB rescinds ‘burdensome’ Biden-era secure software memo appeared first on CyberScoop .
The North Korean threat actor known as Konni has been observed using PowerShell malware generated using artificial intelligence (AI) tools to target developers and engineering teams in the blockchain sector. The phishing campaign has targeted Japan, Australia, and India, highlighting the adversar...
A major cyberattack that nearly cut electricity to half-a-million people in Poland last year was reportedly carried out by the Russia-linked hacking group Sandworm, which likely attempted to knock out systems using wiper malware.
Cybersecurity researchers have discovered an ongoing campaign that's targeting Indian users with a multi-stage backdoor as part of a suspected cyber espionage campaign. The activity, per the eSentire Threat Response Unit (TRU), involves using phishing emails impersonating the Income Tax Departmen...
CISA has flagged a critical VMware vCenter Server vulnerability as actively exploited and ordered U.S. federal agencies to secure their servers within three weeks. [...]
10 years after disrupting the Ukrainian power grid, the APT targeted Poland with data-wiping malware. The post Russian Sandworm Hackers Blamed for Cyberattack on Polish Power Grid appeared first on SecurityWeek .
A destructive cyber attack targeting Poland’s energy sector has been linked to Russian APT group Sandworm
Suspected Russian cyber attackers tried to take down parts of Poland’s energy infrastructure with new data-wiping malware and failed. According to information shared by the Polish government earlier this month, the attacks happened on 29 and 30 December 2025, and targeted two combined heat and po...
TikTok has finalized a deal to create a new American entity, avoiding the looming threat of a ban in the United States. The post TikTok Finalizes a Deal to Form a New American Entity appeared first on SecurityWeek .
Supply chain breach in eScan antivirus distributes multi-stage malware via legitimate updates
Linux Kernel contains an integer overflow vulnerability in the create_elf_tables() function which could allow an unprivileged local user with access to SUID (or otherwise privileged) binary to escalate their privileges on the system.
On January 15, non-governmental organization Human Rights in China (HRIC) reported that, for the first time, the Chinese government obstructed the annual New Year’s gathering of the Tiananmen Mothers. Formed in September 1989 by Ding Zilin and other parents whose children were killed in the milit...
France on Sunday took into custody the Indian captain of an oil tanker suspected of belonging to Russia’s sanctions-busting “shadow fleet” for the vessel’s failure to fly a flag, prosecutors said. The 58-year-old captain was in charge of the tanker, the Grinch, which was seized by the French navy...
After a months-long war of words between an online influencer and a restaurant chain owner, a Communist Party mouthpiece has taken the unusual step of direct intervention – underlining China’s desire to rein in internet celebrities and social media platforms. Since Sunday, People’s Daily has publ...
A critical vulnerability (CVE-2024-37079) in Broadcom VMware vCenter Server could allow remote code execution. Rural businesses and local governments must act now to patch their systems and protect their data.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added a critical security flaw affecting Broadcom VMware vCenter Server that was patched in June 2024 to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation in the wild. The vulnerabil...
A cyberattack targeting Poland's power grid in late December 2025 has been linked to the Russian state-sponsored hacking group Sandworm, which attempted to deploy a new destructive data-wiping malware dubbed DynoWiper during the attack.. [...]
A new multi-stage phishing campaign has been observed targeting users in Russia with ransomware and a remote access trojan called Amnesia RAT. "The attack begins with social engineering lures delivered via business-themed documents crafted to appear routine and benign," Fortinet FortiGuard Labs r...
The Russian nation-state hacking group known as Sandworm has been attributed to what has been described as the "largest cyber attack" targeting Poland's power system in the last week of December 2025. The attack was unsuccessful, the country's energy minister, Milosz Motyka, said last week. "The ...
The North Korean hacker group Konni (Opal Sleet, TA406) is using AI-generated PowerShell malware to target developers and engineers in the blockchain sector. [...]
FTC Finalizes Order Settling Allegations that GM and OnStar Collected and Sold Geolocation Data Without Consumers' Informed Consent
Court Approves Order Requiring Disney to Pay $10 Million to Settle FTC Allegations the Firm Enabled the Unlawful Collection of Children's Personal Data
Executive Summary: The Jiutian (九天) unmanned aerial system (UAS), the People's Liberation Army's (PLA) newest drone, made its first flight in December 2025. Capable of carrying a 6,000-kilogram payload, it was tested releasing 100 smaller loitering drones (Xinhua; CCTV, December 11, 2025). Akin t...
Executive Summary: The People’s Republic of China (PRC) has emerged as the world’s largest producers of electric vehicles (EVs). In becoming the dominant global player, it has had to grapple with the high cost and low supply of raw lithium materials—critical inputs for the batteries that fuel mos...
Executive Summary: Beijing’s high-level diplomatic overtures are following a familiar path in the new year. Foreign Minister Wang Yi (王毅) has taken the foreign minister’s traditional first trip of the year to select African countries; a politburo standing committee member—in this case Vice Premie...
Iran-related Designations; Issuance of Iran-related General License
Counter Terrorism Designations and Designations Removals
Report for Licensing Activities Undertaken Pursuant to the Trade Sanctions Reform and Export Enhancement Act (TSRA)
Issuance of Amended Russia-related General License; Publication of Amended Russia-related Frequently Asked Questions
Russia-related Designation Update and Designation Removal
Department of Homeland Security and Department of Justice Recognize National Human Trafficking Prevention Month
FTC to Host Workshop on Consumer Injuries and Benefits in the Data-Driven Economy
"Russia's aggressive actions have consequences," Foreign Minister Johann Wadephul said after Germany announced a Russian diplomat had been expelled on suspicions of espionage.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added four security flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation in the wild. The list of vulnerabilities is as follows - CVE-2025-68645 (CVSS score: 8.8) - A PHP rem...
The Cybersecurity and Infrastructure Security Agency (CISA) in the U.S. warned of active exploitation of four vulnerabilities impacting enterprise software from Versa and Zimbra, the Vite frontend tooling framework, and the Prettier code formatter. [...]
The ShinyHunters extortion gang claims it is behind a wave of ongoing voice phishing attacks targeting single sign-on (SSO) accounts at Okta, Microsoft, and Google, enabling threat actors to breach corporate SaaS platforms and steal company data for extortion. [...]
South Carolina federal prosecutors announced that two Venezuelan nationals convicted of stealing hundreds of thousands of dollars from U.S. banks in an ATM jackpotting scheme will be deported after serving their sentences. [...]
Broadcom VMware vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol. This could allow a malicious actor with network access to vCenter Server to send specially crafted network packets, potentially leading to remote code execution.
Police arrest Black Basta RaaS affiliates, DPRK actors leverage VS Code to deploy backdoors, and attackers exploit misconfigured cloud apps.
TikTok on Friday officially announced that it formed a joint venture that will allow the hugely popular video-sharing application to continue operating in the U.S. The new venture, named TikTok USDS Joint Venture LLC, has been established in compliance with the Executive Order signed by U.S. Pres...
Welcome to The Adversarial. Every other week, we ll provide you with expert analysis on America s greatest challengers: China, Russia, Iran, North Korea, and jihadists. Read more below.***IranOnly days ago, the United States appeared poised to make good on President Donald Trump s threat to inter...
booze and corruption on a journey through Shanxi, the land of coal
Okta is warning about custom phishing kits built specifically for voice-based social engineering (vishing) attacks. BleepingComputer has learned that these kits are being used in active attacks to steal Okta SSO credentials for data theft. [...]
Most of this week's threats didn't rely on new tricks. They relied on familiar systems behaving exactly as designed, just in the wrong hands. Ordinary files, routine services, and trusted workflows were enough to open doors without forcing them. What stands out is how little friction attackers no...
Executive Summary: Ankara broke ground for the construction of a new 224-kilometer (140-mile) rail link from Kars to the border of the Azerbaijani exclave of Nakhchivan following the August 2025 U.S.-brokered agreement between Armenia and Azerbaijan that calls for the reopening of traffic between...
Executive Summary: On January 15, Russian Foreign Ministry spokesperson Maria Zakharova stated that Moscow is concerned about the escalation of the situation around Cuba and considers the “language of U.S. blackmail” unacceptable (Interfax, January 15). These comments were a response to U.S. Pres...
‘The ability to spray at night is probably the single largest value proposition,’ says Pyka CEO Michael Norcia. The post Brazilian ag giant SLC Agricola scales use of unmanned crop sprayers with Pyka appeared first on AgFunderNews .
Plus: Gates Foundation funds AI pilot for coffee farmers. The post AgriFood Signals: Yield Energy launches farm-based grid platform, new $500m farmland fund appeared first on AgFunderNews .
Key Findings: Introduction Check Point Research (CPR) identified an ongoing phishing campaign that we associate with KONNI, a North Korean–linked threat actor active since at least 2014. KONNI is best known for targeting organizations and individuals in South Korea, with a focus on diplomatic cha...
Ianis Antropenko, a Russian national living in California, admitted to committing ransomware attacks against at least 50 victims. He faces up to 25 years in jail. The post Leader of ransomware crew pleads guilty to four-year crime spree appeared first on CyberScoop .
As many as 3,136 individual IP addresses linked to likely targets of the Contagious Interview activity have been identified, with the campaign claiming 20 potential victim organizations spanning artificial intelligence (AI), cryptocurrency, financial services, IT services, marketing, and software...
Security vulnerabilities were uncovered in the popular open-source artificial intelligence (AI) framework Chainlit that could allow attackers to steal sensitive data, which may allow for lateral movement within a susceptible organization. Zafran Security said the high-severity flaws, collectively...
Discover how PurpleBravo, a North Korean threat group, exploits fake job offers to target software supply chains, using RATs and infostealers like BeaverTail.
In this week's show, Patrick Gray and Adam Boileau discuss the week's cybersecurity news, joined by a special guest. BBC World Cyber Correspondent Joe Tidy is a long time listener and he pops in for a ride-along in the news segment plus a chat about his new book. This week news includes: Did the ...
Oleg Evgenievich Nefedov, a 35-year-old Russian national, is accused of forming and running the ransomware outfit since 2022. He's now on Europol and Interpol's most-wanted lists. The post Black Basta's alleged ringleader identified as authorities raid homes of other members appeared first on Cyb...
Chief strategy officer Tim Weaver explains the critical role soil plays not just in crop production but across boardrooms and balance sheets. The post If planetary boundaries are the guardrails, soil is the road itself : in conversation with Holganix appeared first on AgFunderNews .
A central location, diverse commodities, and a business-friendly environment draw more corporates to the Show-Me State. The post Why more food and beverage giants are flocking to Missouri appeared first on AgFunderNews .
China is the largest importer of Iranian oil, and it always has a tried-and-tested toolkit for evading sanctions enforcement.
A new EPIC report says data brokers, ad-tech surveillance, and ICE enforcement are among the factors leading to a “health privacy crisis” that is eroding trust and deterring people from seeking care.
The Cybersecurity and Infrastructure Security Agency has published comprehensive new guidelines specifically addressing cybersecurity risks in precision agriculture and farm management systems.
A new Internet-of-Things botnet called Kimwolf has spread to more than 2 million devices, forcing infected systems to participate in massive distributed denial-of-service (DDoS) attacks and to relay other malicious and abusive Internet traffic. Kimwolf's ability to scan the local networks of comp...
The North Korean threat actors associated with the long-running Contagious Interview campaign have been observed using malicious Microsoft Visual Studio Code (VS Code) projects as lures to deliver a backdoor on compromised endpoints. The latest finding demonstrates continued evolution of the new ...
What happens when a market built on foreign tech is told it must go domestic—almost overnight? The post Made in America: FCC decision sparks scramble to localize ag spray drone production appeared first on AgFunderNews.
Climate-driven health risks could cost the global economy $1.5 trillion in lost productivity by 2050, according to WEF. The post Planetary health 101: what it is, why it matters for the future of the global economy appeared first on AgFunderNews .
The alert comes just over a month after a joint advisory from CISA, the FBI and Western allies citing hacktivist activity against OT providers.
Discover four key identity and access priorities for the new year to strengthen your organization's identity security baseline. The post Four priorities for AI-powered identity and network access security in 2026 appeared first on Microsoft Security Blog .
Phospholutions CEO and founder Hunter Swisher talks to AFN ahead of his soil health session this week at Davos. The post The most impactful AI in farming will not feel revolutionary, says Phospholutions boss. It will feel dependable appeared first on AgFunderNews .
It all sounds pretty dystopian : Inside a white stucco building in Southern California, video cameras compare faces of passersby against a facial recognition database. Behavioral analysis AI reviews the footage for signs of violent behavior. Behind a bathroom door, a smoke detector-shaped device ...
Federal Bureau of Investigation issues alert about advanced persistent threat groups linked to China targeting university agricultural research programs and seed companies.
Ukrainian and German law enforcement authorities have identified two Ukrainians suspected of working for the Russia-linked ransomware-as-a-service (RaaS) group Black Basta. In addition, the group's alleged leader, a 35-year-old Russian national named Oleg Evgenievich Nefedov (Нефедов Олег Евгенье...
A threat actor likely aligned with China has been observed targeting critical infrastructure sectors in North America since at least last year. Cisco Talos, which is tracking the activity under the name UAT-8837, assessed it to be a China-nexus advanced persistent threat (APT) actor with medium c...
Cisco on Thursday released security updates for a maximum-severity security flaw impacting Cisco AsyncOS Software for Cisco Secure Email Gateway and Cisco Secure Email and Web Manager, nearly a month after the company disclosed that it had been exploited as a zero-day by a China-nexus advanced pe...
Security experts have disclosed details of a new campaign that has targeted U.S. government and policy entities using politically themed lures to deliver a backdoor known as LOTUSLITE. The targeted malware campaign leverages decoys related to the recent geopolitical developments between the U.S. ...
Yes, China's response to the violence in Iran has been muted. But don't overlook the support that China has already provided in the form of surveillance and drone technology.
The next cycle belongs to leaders who can deliver through near-term volatility while still investing through long-cycle uncertainty. The post Guest article: Agriculture’s great repricing goes beyond the downcycle appeared first on AgFunderNews .
Prime Minister Carney met Thursday with Premier Li and the head of the NPC Zhao Leji. He is scheduled to meet Xi Friday morning. While no major breakthrough deals were announced, Carney s comments to Li that I believe the progress that we have made and the partnership sets us up well for the new ...
Understand the future of threat and vulnerability management (TVM). Learn what TVM is, why traditional tools fail, and how intelligence is essential in today’s landscape.
The National Defense Authorization Act for 2026 adds additional Chinese manufacturers to the banned equipment list, affecting rural telecommunications providers.
A critical misconfiguration in Amazon Web Services (AWS) CodeBuild could have allowed complete takeover of the cloud service provider's own GitHub repositories, including its AWS JavaScript SDK, putting every AWS environment at risk. The vulnerability has been codenamed CodeBreach by cloud securi...
In January 2025, when the Trump administration froze nearly all foreign aid, more than 1,000 emergency communal kitchens in Sudan shut down within weeks. Half a million displaced people lost access to clean water. Famine conditions that had been held at bay collapsed into crisis. Within months, R...
As 2025 draws to a close, CDT editors are compiling a series of the most notable content from across the Chinese internet over the past year including outstanding quotes, reports, podcasts, videos, and censored articles...
Large buyers look for CDR project developers with a track record in large deals and capital raising, and the ability to scale, says Varaha. The post Varaha signs major offtake agreement with Microsoft for biochar carbon removal in India appeared first on AgFunderNews .
Plus: Rockefeller Foundation launches Food Is Medicine fund. The post AgriFood Signals: SAP Syngenta partner, BASF buys biocontrol startup, Microsoft s record deal with Indigo appeared first on AgFunderNews .
Listen now | Show Notes: On today's show Andrew and Bill begin with the instability in Iran, including thoughts on Trump's Truth Social post threatening 25% tariffs on Iran trade partners, why that threat is unlikely to materialize as additional US tariffs on Chinese goods, and the PRC's concerns...
The longtime cybersecurity professional says she’s taking the helm of the legacy security organization at “an inflection point” for tech and the world beyond.
Risky Business returns for 2026! Patrick Gray and Adam Boileau talk through the week's cybersecurity news, including: Santa brings hackers MongoDB memory leaks for Christmas Vercel pays out a million bucks to improve its React2Shell WAF defences 39C3 delivers; the pink Power Ranger deletes nazis,...
December 2025 saw a 120% surge in critical CVEs, with 22 exploited flaws and React2Shell (CVE-2025-55182) dominating threat activity across Meta's React framework.
As 2025 draws to a close, CDT editors are compiling a series of the most notable content from across the Chinese internet over the past year including outstanding quotes, reports, podcasts, videos, and censored articles...
Key takeaways VoidLink a Cloud-First Malware Framework In December 2025, Check Point Research identified a small cluster of previously unseen Linux malware samples that appear to originate from a Chinese-affiliated development environment. Many of the binaries included debug symbols and other dev...
Stop ransomware before encryption begins. Learn how intelligence-driven detection tools can help identify precursor behaviors and reduce false positives for faster response.
For the latest discoveries in cyber research for the week of 12th January, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Manage My Health, New Zealand’s largest patient portal, has acknowledged a cyberattack occurred on December 2025, that potentially exposed data of ...
Insikt Group reveals how GRU-linked BlueDelta evolved credential-harvesting campaigns targeting government, energy, and research organizations across Europe and Eurasia.
Subscribe to receive critical threat alerts, weekly security digests, and actionable guidance for protecting your farm or rural business.
We respect your privacy. Unsubscribe at any time.