T-SupplyChain

04
Sep
One Regime, Four Fronts: Inside North Korea's Parallel Cyber Enterprise- 302

One Regime, Four Fronts: Inside North Korea's Parallel Cyber Enterprise- 302

August 8, 2026 It would be easier to track North Korea's state-linked cyber activity if it all
7 min read
27
Aug
The Long Wire: How Beijing Builds Access That Outlasts Its Cover Stories- 297

The Long Wire: How Beijing Builds Access That Outlasts Its Cover Stories- 297

August 12, 2026 Four episodes surfaced within days of each other in August 2026, and none of them, on its
5 min read
27
Aug
Borrowed Trust: How Moscow Turns Everyday Software Into an Access Network- 296

Borrowed Trust: How Moscow Turns Everyday Software Into an Access Network- 296

August 5, 2026 A fake job offer, a hijacked hotel Wi-Fi login, a criminal marketplace listing, and an advertising
6 min read
27
Aug
The Maintenance Excuse: Zbtlink, the National Intelligence Law, and the Case Against Trusting Chinese Router Firmware- 295

The Maintenance Excuse: Zbtlink, the National Intelligence Law, and the Case Against Trusting Chinese Router Firmware- 295

August 8, 2026 On August 6, Chinese router maker Zbtlink told a reporter that a hidden remote-command implant researchers
2 min read
03
Aug
When cybercrime borrows a spy's toolkit: the UAT-11795 campaign hiding inside everyday software- 292

When cybercrime borrows a spy's toolkit: the UAT-11795 campaign hiding inside everyday software- 292

July 18, 2026 A financially motivated, Russian-speaking hacking crew has spent over a year quietly trojanizing the installers of
5 min read
03
Aug
Tax season as an attack surface: how a suspected Chinese hacking cluster is running parallel RAT campaigns across India, Japan, and China- 283

Tax season as an attack surface: how a suspected Chinese hacking cluster is running parallel RAT campaigns across India, Japan, and China- 283

July 7, 2026 A suspected China-nexus threat cluster has spent the current Indian tax filing season running a precisely-
3 min read
03
Aug
Iran's quiet war inside Israel's networks- 281

Iran's quiet war inside Israel's networks- 281

July 10, 2026 While Israeli and American forces struck Iranian targets from the air, a quieter campaign was already running
3 min read
19
Jul
North Korea just made its malware payload host itself on the blockchain- 252

North Korea just made its malware payload host itself on the blockchain- 252

July 5, 2026 North Korean threat actors behind the long-running Contagious Interview campaign have distributed more than 100 malicious
3 min read
19
Jul
The worm that infects the tools developers trust to catch it- 246

The worm that infects the tools developers trust to catch it- 246

April 30, 2026 TeamPCP's Mini Shai-Hulud campaign has spent the past 48 hours poisoning official npm and
2 min read
19
Jul
ClawSwarm proves you can hijack an AI agent without writing a single line of malware- 244

ClawSwarm proves you can hijack an AI agent without writing a single line of malware- 244

April 29, 2026 Thirty seemingly ordinary AI agent skills, published by a single anonymous author and downloaded nearly 10,000
3 min read