diff --git a/summary/2026/readme.md b/summary/2026/readme.md index 669af03..f07de47 100644 --- a/summary/2026/readme.md +++ b/summary/2026/readme.md @@ -9,3 +9,92 @@ https://blog.cloudflare.com/radar-2025-year-in-review/ ChatGPT's rivals, Kwai's quiet rise: the top Internet services of 2025 https://blog.cloudflare.com/radar-2025-year-in-review-internet-services/ + + +2025： + +- https://www.bleepingcomputer.com/news/security/sandworm-hackers-use-data-wipers-to-disrupt-ukraines-grain-sector/ +- https://www.welivesecurity.com/en/eset-research/operation-roundpress/#h2-6 +- https://www.cisa.gov/news-events/cybersecurity-advisories/aa25-141a +- https://research.checkpoint.com/2025/apt29-phishing-campaign/ +- https://www.volexity.com/blog/2025/02/13/multiple-russian-threat-actors-targeting-microsoft-device-code-authentication/ +- https://mp.weixin.qq.com/s/zerWPti8aO8ymhOT1lj-ig +- https://www.microsoft.com/en-us/security/blog/2025/07/31/frozen-in-transit-secret-blizzards-aitm-campaign-against-diplomats/ +- https://harfanglab.io/insidethelab/uac-0057-pressure-ukraine-poland/ +- https://mp.weixin.qq.com/s/N-ut-NCAPdbdidb4Ng8hdw +- https://mp.weixin.qq.com/s/CI1g4iaYxHhO925V15LvIQ +- https://mp.weixin.qq.com/s/wxRSVugKHy7x1SmANQOrAA +- https://mp.weixin.qq.com/s/ItcbKuoH0KjJjzSTG7YSrA +- https://www.fortinet.com/blog/threat-research/confucius-espionage-from-stealer-to-backdoor +- https://labs.k7computing.com/index.php/breakingdown-of-patchwork-apt/ +- https://www.trellix.com/blogs/research/from-click-to-compromise-unveiling-the-sophisticated-attack-of-donot-apt-group-on-southern-european-government-entities/ +- https://www.huntress.com/blog/inside-bluenoroff-web3-intrusion-analysis +- https://fieldeffect.com/blog/zoom-doom-bluenoroff-call-opens-the-door +- https://6068438.fs1.hubspotusercontent-na1.net/hubfs/6068438/saja-dprk-employment-scam-network.pdf +- https://www.microsoft.com/en-us/security/blog/2025/06/30/jasper-sleet-north-korean-remote-it-workers-evolving-tactics-to-infiltrate-organizations/ +- https://www.genians.co.kr/en/blog/threat_intelligence/android?hsCtaAttrib=255186951894 +- https://research.checkpoint.com/2025/iranian-educated-manticore-targets-leading-tech-academics/ +- https://www.welivesecurity.com/en/eset-research/bladedfeline-whispering-dark/ +- https://unit42.paloaltonetworks.com/iranian-attackers-impersonate-model-agency/ +- https://mp.weixin.qq.com/s/nY2Hyg6ZsM7ViXW1lhO2Ag +- https://hunt.io/blog/track-apt34-like-infrastructure-before-it-strikes +- https://www.proofpoint.com/us/blog/threat-insight/call-it-what-you-want-threat-actor-delivers-highly-targeted-multistage-polyglot +- https://securelist.com/bellacpp-cpp-version-of-bellaciao/115087/ +- https://research.checkpoint.com/2024/new-bugsleep-backdoor-deployed-in-recent-muddywater-campaigns/ +- https://www.group-ib.com/blog/muddywater-infrastructure-malware/#introduction +- https://mp.weixin.qq.com/s/BHyqfnMMMAvDDX_LZVubyA +- https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/tracing-blind-eagle-to-proton66/ +- https://x.com/Merlax/status/1919786735648833727 +- https://research.checkpoint.com/2025/blind-eagle-and-justice-for-all/#singlepost +- https://mp.weixin.qq.com/s/leEKONeK1JsAvPRF837Pow +- https://www.recordedfuture.com/research/drat-v2-updated-drat-emerges-tag140s-arsenal +- https://hunt.io/blog/apt36-clickfix-campaign-indian-ministry-of-defence +- https://www.seqrite.com/blog/goodbye-hta-hello-msi-new-ttps-and-clusters-of-an-apt-driven-by-multi-platform-attacks/ +- https://blog.xlab.qianxin.com/p/9a61b251-aa91-46df-b36a-dea00c3b8add/ +- https://mp.weixin.qq.com/s/88VDPssTV3LG9MHgAG5VsQ +- https://mp.weixin.qq.com/s/nyxZFXgrtm2-tBiV3-wiMg +- https://mp.weixin.qq.com/s/Cx-v95Ua8U7I77-yQFckpA +- https://mp.weixin.qq.com/s/m2G9oLHv04HJDW8mB5rDA +- https://3w.huanqiu.com/a/de583b/4MIDCq1bC5d +- https://www.cert.org.cn/publish/main/49/2025/20250117141306569102021/20250117141306569102021_.html +- https://www.cert.org.cn/publish/main/49/2025/20250117141608670773438/20250117141608670773438_.html +- https://www.cverc.org.cn/head/zhaiyao/news20250403-haerbinyadonghui.htm +- https://www.cert.org.cn/publish/main/49/2025/20251019142622914870997/20251019142622914870997_.html +- http://society.people.com.cn/n1/2025/0528/c1008-40489086.html +- http://www.china.com.cn/opinion2020/2025-06/09/content_117916848.shtml +- https://www.impriindia.com/insights/policy-update/space-security-cyber/ +- https://www.mea.gov.in/press-releases.htm?dtl%2F38924%2F +- https://news.cnr.cn/native/gd/kx/20251019/t20251019_527401113.shtml +- https://www.mps.gov.cn:8080/n2254098/n4904352/c10047273/content.html +- https://mp.weixin.qq.com/s/ZtKjlaIoMVCSY-rXt2RP1Q +- https://mp.weixin.qq.com/s/nFdDdsTVGR9LD4t5NW8VHw +- https://www.china-cia.org.cn/WorkDetail/MCA-by-USIA.html +- https://mp.weixin.qq.com/s/kzdSrLdejED3MxSKtszUnA +- https://mp.weixin.qq.com/s/fm4Z9L0_b3w3A-QdqkB_7A +- https://mp.weixin.qq.com/s/1uVaMzBvt1PlmMMXEZvuzg +- https://mp.weixin.qq.com/s/AS3kRKDW63IzZCbxIb_MoA +- https://cloud.tencent.com.cn/developer/article/2564920 +- https://www.toutiao.com/article/7590002044509930036/ +- https://www.51cto.com/article/819037.html +- https://www.toutiao.com/article/7587234030123352617/ +- https://www.c114.com.cn/satellite/2514/a1286133.html +- https://cloud.tencent.com.cn/developer/article/2577187 +- https://www.br-cn.com/static/content/news/br_news/2025-1022/1430659388729757547.html +- https://thehackernews.com/2025/08/blind-eagles-five-clusters-target.html +- https://www.toutiao.com/article/7592393443097035279/ +- https://resecurity.com/blog/article/paraguay-is-being-targeted-by-cybercriminals-74million-citizen-records-for-sale +- https://blog.lacnic.net/en/the-perfect-storm-the-largest-cyberattack-on-brazils-financial-system/ +- https://www.crowdstrike.com/en-us/blog/2025-latam-threat-landscape-report-deep-dive/ +- https://mp.weixin.qq.com/s/43unkZrYzJ4Roo-2NuREZg +- https://armedservices.house.gov/uploadedfiles/deterring_china.pdf +- https://docs.house.gov/billsthisweek/20241209/RCP_HR5009_xml%5b89%5d.pdf +- https://www.congress.gov/bill/119th-congress/senate-bill/2296/text +- https://www.congress.gov/bill/119th-congress/senate-bill/1071/text +- https://docs.google.com/spreadsheets/d/1lkNJ0uQwbeC1ZTRrxdtuPLCIl7mlUreoKfSIgajnSyY/view?gid=897725844#gid=897725844 +- https://nvd.nist.gov/vuln/detail/CVE-2025-31201 +- https://github.com/JGoyd/iOS-Attack-Chain-CVE-2025-31200-CVE-2025-31201 +- https://www.securitylab.ru/news/557556.php +- https://www.elliptic.co/blog/iranian-crypto-exchange-nobitex-hacked-pro-israel-group +- https://www.jpost.com/israel-news/article-857969 +- https://www.presstv.ir/Detail/2026/01/01/761673/Iran-cyberattacks-Sattar-Hashemi-communications-infrastructure-Behzad-Akbari-DDoS +- https://www.stepsecurity.io/blog/ctrl-tinycolor-and-40-npm-packages-compromised