Next week, on May 30th the NATO Cooperative Cyber Defence Centre of Excellence (CCDCOE) opens the 10th International Conference on Cyber Conflict, CyCon 2018. The anniversary event focuses on the theme of maximising effects in the cyber domain.
↧
The 10th CyCon Starts Next Week
↧
The 10th CyCon Starts Next Week
↧
↧
The 10th CyCon Hosts 700 Cyber Experts in Tallinn
↧
CyCon 2019 Theme is Silent Battle in Cyber Space
↧
Romania to Join the NATO Cooperative Cyber Defence Centre of Excellence in Tallinn
The Prime Minister of Romania, Mrs. Viorica Dăncilă, announced today during her visit to Estonia that Romania looks forward to joining NATO Cooperative Cyber Defence Centre of Excellence (CCDCOE) in 2019. NATO-accredited cyber defence hub in Tallinn welcomes the decision of Romania to become another NATO Ally to join the Centre.
↧
↧
Colonel Jaak Tarien to Become Director of the NATO Cooperative Cyber Defence Centre of Excellence
As of 1 September 2018 Colonel Jaak Tarien, former Commander of Estonian Air Force for the past six years, will assume the role of Director of the NATO Cooperative Cyber Defence Centre of Excellence based in Estonia.
Merle Maigre, current Director of CCDCOE, will take on a new challenge in September by joining CybExer Technologies, an Estonian cyber security company which is rapidly expanding its operations both in Estonia and abroad.
↧
Colonel Jaak Tarien assumes command of NATO CCDCOE
Colonel Jaak Tarien, until recently the long-term Commander of Estonian Air Force, assumed today from Merle Maigre the role of Director of the NATO Cooperative Cyber Defence Centre of Excellence based in Tallinn.
↧
CyCon 2019 Papers are Expected by 1 October
The Call for CyCon 2019 Papers is open until 1 October 2018. The theme for the eleventh International Conference on Cyber Conflict, hosted by the NATO Cooperative Cyber Defence Centre of Excellence, is ‘Silent Battle’. CyCon 2019 will take place in Tallinn, Estonia, from 28 to 31 May 2019.
The International Conference on Cyber Conflict, CyCon, is entering its second decade. Throughout the years, CyCon has established itself as a prominent multidisciplinary conference, introducing keynotes and panels focusing on the technical, legal, policy, strategy and military perspectives of cyber defence and security. This is undoubtedly thanks to the amount of high-quality original academic research presented at the conference. In 2018, the Academic Review Committee selected 22 articles that were presented at the conference and published in the proceedings.
↧
NATO CCDCOE brings improvement through practice
The NATO Cooperative Cyber Defence Centre of Excellence contributes this week to the setup and organisation of NATO’s largest cyber exercise Cyber Coalition 2018 taking place in Tartu, Estonia. This year, the experts of the Centre contributed to the operational and legal part of the exercise scenario, adding respective challenges to the participating cyber experts across the Alliance.
↧
↧
New Study by the CCDCOE: Cyber Security Organisation in Turkey
New Study by the CCDCOE: Cyber Security Organisation in Turkey
A recent report by NATO CCDCOE “National Cyber Security Organisation: Turkey” outlines the current cyber security landscape in Turkey. Being the most recent issue of the NATO CCD COE’s National Cybersecurity Governance series, the report provides a comprehensive overview of the digital ecosystem in Turkey and describes the responsibilities of different national agencies designated to ensure the security in the cyberspace.
↧
Coast Guard Opens Market Research for Futures, Strategy and Technical Support BPA
... cybersecurity posture analysis and rapid prototyping support. The scope also includes operational support involving mission planning, after-action ...
↧
Coast Guard Opens Market Research for Futures, Strategy and Technical Support BPA
... cybersecurity posture analysis and rapid prototyping support. The scope also includes operational support involving mission planning, after-action ...
↧
No evidence customer data published on dark web: Origin | The Canberra Times
Subscribe now for unlimited access. Login or signup to continue reading.
↧
↧
Two children found safe after alleged abduction, woman in custody - FOX 2
FAO Schwarz has a new Amazon storefront just in time … Holiday / 1 day ago. FAO Schwarz/BestReviews illustration / FAO Schwarz has a new Amazon ...
↧
Taiwan warns Europe of dangers of dependence on China | Reuters
Taiwan's foreign minister warned the European Union that dependence on Chinese suppliers poses a risk to the bloc's freedom during a speech in ...
↧
USFK Commander: MDTF Enhances Detection Beyond Korean Peninsula
... cyber, and electronic warfare, and the core competencies required in ... North Korea but also China and Russia. Brunson, who in May compared ...
↧
USFK Commander: MDTF Enhances Detection Beyond Korean Peninsula
... cyber, and electronic warfare, and the core competencies required in ... North Korea but also China and Russia. Brunson, who in May compared ...
↧
↧
Supermarket chains in France hit by cyberattack - Chinadaily.com.cn
Supermarket chains in France hit by cyberattack. By EARLE GALE in London | China Daily | Updated: 2026-10-14 09:18. Boxes of frozen goods are seen ...
↧
Tropics quiet after record-breaking Hurricane Isaias batters Florida - WGN
Tropics quiet after record-breaking Hurricane Isaias batters Florida | Tracking the Tropics ... FAO Schwarz has a new Amazon storefront just in time …
↧
Russian internet provider SkyNet reports outages after cyberattack claimed by Ukrainian hackers
A major internet provider in Russia's second-largest city, St. Petersburg, has reported days of service disruptions following a cyberattack ...
↧
N. Korea vows no bargaining over nukes marking centennial of anti-imperialist union
... North Korean founder Kim Il-sung on Oct. 17, 1926. It ... Banks mull higher cybersecurity spending after AI-linked hacking incidents: sources ...
↧
↧
Edward Goldring on the logic behind North Korea's elite purges - NK News
Have follow-up questions? Ask NK PRO's Intelligence Suite to learn more. What patterns and consequences have North Korean elite purges shown since the ...
↧
Justice Department says North Koreans have infiltrated dozens of U.S. companies
... Korean regime are increasingly relying on Americans to facilitate the hacking of U.S. companies. ... CrowdStrike, cybersecurity, data breach, North ...
↧
China-Pakistan Military-Strategic Collusion: Capabilities, Functions, and Implications for India
The report is divided into two sections: the first deals with China-Pakistan military-to-military cooperation across land, air, sea, cyber, space ...
↧
Justice Department says North Koreans have infiltrated dozens of U.S. companies - Yahoo
... Korean regime are increasingly relying on Americans to facilitate the hacking of U.S. companies. In an announcement on Tuesday, prosecutors said ...
↧
↧
'An ISIS fighter LIVING in BRITAIN': Patrick Christys rages at Britain's borders. - YouTube
Patrick Christys reacts after it emerges that a suspected ISIS ... Houthis warn of “painful response” if U.S. joins Saudi strikes in Yemen.
↧
Iran Shipping Update – October 13, 2026 | UANI
Al Qaeda and Iran: Alliance Against the US· American and Western Hostages · Hezbollah: International Terrorist and Paramilitary Organization · Iran ...
↧
Texas Congressmen Ask RFK Jr. To Investigate Islamic Groups for Grant Abuse and Terrorism Ties
They noted that Dar Al-Hijrah Islamic Center, a “Northern Virginia mosque where Al Qaeda ... ISIS cells were recently discovered at the school.
↧
Texas Congressmen Ask RFK Jr. To Investigate Islamic Groups for Grant Abuse and Terrorism Ties
They noted that Dar Al-Hijrah Islamic Center, a “Northern Virginia mosque where Al Qaeda ... ISIS cells were recently discovered at the school.
↧
↧
US FBI Busted North Korea's IT Foreign Currency-Earning Ring and Indicted Over 10 People
U.S. cybersecurity firm CrowdStrike has dubbed the group of North Korean IT operatives engaging in such crimes and the networks aiding them "Famous ...
↧
CMES in AI agreement with RINA - Smart Maritime Network
Blockchain and Cyber Security · Connectivity and IoT · Navigation and ... US Coast Guard partners with Scottish startup Zelim on AI SAR development.
↧
American woman alleged to have joined Daesh goes on trial - Facebook
” •{https://extremism.gwu.edu/isis-america} •{https://www.icsve.org/the ... Daesh is officially designated by the U.S. government as a foreign terrorist ...
↧
American woman alleged to have joined Daesh goes on trial - Facebook
... Daesh battalion terror team that planned attacks against US universities. ... isis-operatives-from-assassins-and- morality-police-to-spies-and ...
↧
↧
Deloitte China Monthly Report Issue 104
China's K-shaped divergence: the view beyond 2026. China's economy is increasingly two-tiered: strong exports and rapid growth in high-tech ...
↧
Tesla pauses Canadian sales of China-built Model 3 after 'exhausting' import quota
Tesla has likely imported thousands of China-made Model 3s to Canada since May, but exact figures are unknown because Tesla does not disclose Canadian ...
↧
Proposed livestreamed execution raises concerns - Local News Live
WASHINGTON (Gray DC) - The first livestreamed execution in American history has forced the country to ask itself an uncomfortable question: is ...
↧
Proposed livestreamed execution raises concerns - Local News Live
Recent examples include Iran, Somalia and videos of beheadings from the Taliban and ISIS. Shortly after Hegseth posted on X confirming his ...
↧
↧
The Houthis Are Building an Advanced Missile With Chinese Parts - WSJ
Houthi militants are attempting to produce their own advanced medium-range ballistic missiles using Chinese-delivered parts, a new report shows, ...
↧
China-linked hackers hit Fiji: US embassy - Taipei Times
US officials have previously urged cable host Fiji to boost cybersecurity to guard against data risks from China. Naivalurua said that police were ...
↧
Man pulled from Allegheny River in Pittsburgh dies at hospital - WPXI
Their status is unknown at this time. Channel 11 has reached out to Pittsburgh Public Information Officers for more information. We are waiting to ...
↧
Man accused of planning terrorist attack enters 'not guilty' plea in federal court - WPXI
A Butler County man is headed to trial accused of planning an ISIS-inspired terror attack.
↧
↧
U.S. clamps down on N. Korean IT worker schemes affecting over 70 American firms
... North Korean regime. The department ... North Korea's illicit financial activities, including cybercrime, money laundering and sanctions evasion.
↧
Dark Web Intelligence on X: " FTC SUES "SEXTORTION RELIEF" FIRM DIGITAL ...
Dark Web Intelligence · @DailyDarkWeb. FTC SUES "SEXTORTION RELIEF" FIRM DIGITAL FORENSICS CORP. On Oct 13, 2026, the U.S. Federal Trade ...
↧
China's exports and imports surge past expectations in September - CNBC
Global demand for AI-related goods has helped drive China's exports higher. The world's second-largest economy has struggled to ramp up domestic ...
↧
CTOS estimates RM12mil profit hit from cyber incident - The Star
PETALING JAYA: CTOS Digital Bhd estimates that the financial impact to the company from the Sept 23 cybersecurity incident will likely amount to ...
↧
↧
US targets network funneling IT earnings to North Korea - The Standard (HK)
Federal prosecutors said Tuesday they had made two arrests and seized more than 180 computers to dismantle an alleged North Korean scheme to ...
↧
"Multi-Domain Task Force for Multi-Layered Detection on Peninsula"... Signals Tar... - YouTube
... cyber, and electronic warfare are permanently stationed on the Korean Peninsula. ... [Breaking] North Korea gained combat experience in Ukraine war…
↧
Justice Department says North Koreans have infiltrated dozens of U.S. companies | Межа
... North Korean hacking. CrowdStrike, which helped the FBI investigate and disrupt the latest North Korean operations, said laptop farms are “vital ...
↧
The Iraq War's Complicated Legacy - Kevin Carroll - The Dispatch
... al-Qaeda between September 11, 2001, and March 20, 2003. In the 18 ... us Americans there would otherwise have attacked the U.S. at home. I ...
↧
↧
US NEWS LIVE: 2 MINUTES AGO! Trump Drops Massive Iran Decision, "Total Control" Declared
... Breaking news, the Latest news, Politics news, of the day. Times ... Go to channel Animals Unknown· 10 Animals in Texas So Dangerous Even ...
↧
US Trial Begins For Rwandan-American Accused Of Genocide
ISIS/Daesh· Islamophobia · Racism & Hate Crimes · Rape as an Act of Genocide ... US Trial Begins For Rwandan-American Accused Of Genocide. Writer ...
↧
FBI dismantles North Korea's US laptop farms funding weapons programs - CHOSUNBIZ
CrowdStrike, a U.S. cybersecurity corporation that worked with the FBI on the operation, disclosed in a report on the 13th various tactics North ...
↧
Kamala Harris warns window closing for AI safeguards, urges US-China cooperation
... cybersecurity threats, AI-enabled weapons and systems escaping human control. She also urged the United States to engage China on international ...
↧
↧
UN Says 'Window Of Opportunity' For Peace In DRC - Genocide Watch
ISIS/Daesh· Islamophobia · Racism & Hate Crimes · Rape as an Act of Genocide ... US Trial ...
↧
How a leaked builder of XWorm turned a remote access trojan into a surveillance kit
Netskope tracks four XWorm versions in the wild, 46 plugins, and new tools for location, audio and live browser control, with detections up fourfold.
Netskope Threat Labs has been following XWorm since September 2024, and its latest report shows the malware has changed a lot. Over the past year the team identified four distinct versions running at the same time in the wild. Detection volume is still high, with 1,236 events across more than 100 customer organizations in the third quarter of 2026, four times the number from the same quarter in 2025.
The leak fueled the surge. In June 2025, a cracked version of the XWorm builder was released publicly. In August, the source code for a modified version, 6.4, also leaked. These leaks gave XWorm more exposure and helped drive its growth.
Netskope’s data shows how long the impact lasted. Detections more than quadrupled between the third and fourth quarters of 2025. In the first quarter of 2026, they reached seven times the original level and stayed there through the second quarter. Detections fell to 1,236 in the third quarter of 2026, but September alone accounted for 601, matching the monthly average during the peak in the first half of the year.
The victims skew toward money. Financial services make up about 35% of affected customers, and activity is concentrated in India, Brazil, Italy, Panama and the United States.
“The public leak of the V6.4 builder in mid-2025 drove this initial surge, keeping activity consistently above pre-leak baselines ever since.” reads Netskope’s analysis. “The financial services sector accounts for approximately 35% of affected customers, with activity concentrated in India, Brazil, Italy, Panama, and the United States.”
Since Netskope published its report on version 6.0 in July 2025, four new versions of the malware have been discovered: V6.4, V6.5 (“XWorm Reborn”), V7.2, and V7.4. Three of these versions were released after the malware generator tool became publicly available. The number of known plugin features has also increased from 35 to 46. This includes new modules, such as SteamTokenRecovery, Rootkit, ResetSurvival, and Cmstp-Bypass, as well as several plugins that were previously removed in V6.0 but have now been brought back.
Each new version includes small but significant updates:
- V6.4 includes file details that link it to celestialproject.org.
- V6.5 updates its branding link to c3lestial.fun, adds five new plugins, and introduces a built-in license check for the tool itself.
- V7.2 adds stronger code protection to hide its activity, uses six different tricks to avoid running in virtual analysis environments, and disguises its file details as the software Voicemod.
- V7.4 introduces a new file delivery system (dropper), uses a technique to bypass Windows security monitoring, switches to a new communication channel for commands, and reinstates license checks.
The surveillance side is where it gets uncomfortable. Netskope says XWorm has moved from an infostealer to a full surveillance platform. Three plugins matter most: Maps, Microphone and HBrowser, and webcam capture is also available on demand.
HBrowser changes how account theft works. Starting with version 6, it gives the operator a live view of the victim’s running browser, relays the operator’s mouse, keyboard and paste actions into it, and streams the screen back. The commands travel over XWorm’s usual encrypted channel and run on the victim’s machine.
This creates a full remote browser session for the attacker. Because every logged-in tab remains open, the attacker can access accounts directly without needing to steal passwords or bypass multi-factor authentication (MFA). Netskope notes that this plugin grants full account access without ever extracting login credentials.
The location-tracking feature bypasses the standard Windows permission prompt. It first modifies a Windows system setting to suppress consent requests, then attempts to fetch precise GPS coordinates within 15 seconds to send to the attacker. If GPS is unavailable, it falls back to IP-based location tracking. Because the modified setting remains in place, future location requests continue to bypass user permission.
“XWorm continues to evolve and has now added surveillance capabilities. It can track geolocation and record the victim’s audio without requesting the victim’s permission.” continues the report. “The HBrowser plugin gives operators direct control of the victim’s live browser session, granting access to accounts without needing to exfiltrate credentials and making MFA irrelevant.”
Microphone does what the name says. It captures audio from any device on the machine, with the operator choosing which one, and streams it back in half-second chunks that are compressed, encoded and encrypted, so audio reaches the operator with about half a second of delay. The microphone stays active for as long as the operator keeps the session open, and both Maps and Microphone run without privilege escalation or a visible prompt.
Netskope expects more of the same. Since the builder and source code were leaked, it expects continued upgrades and use of the toolkit. Its indicators of compromise are on the team’s GitHub, and its protection flags the samples as Gen:Variant.Application.Lazy and Trojan.Generic.
The key lesson for security teams is that multi-factor authentication (MFA) cannot protect accounts once an attacker has already gained access to an active browser session. This vulnerability applies to any account currently logged in on an infected computer.
The HBrowser plugin clearly demonstrates this risk: from the attacker’s perspective, it provides a complete, live remote browser session with full access to open accounts.
“Since its builder and source code were leaked, we expect continued upgrades and use of this toolkit. Netskope Threat Labs will continue to monitor XWorm.” NetSkope concludes.
Follow me on Twitter: @securityaffairs and Facebook and Mastodon
(SecurityAffairs – hacking, CISA)
↧
Somalia Sanctions Laftagareen and 9 Over Al-Shabaab Links - The Rio Times
—The US link The United States has listed al-Shabaab as a foreign ... Al-Shabaab is an al-Qaeda-linked insurgent group that has fought ...
↧
US sanctions Mexican cartel CDN's horse-racing, business network - AOL.com
CDN was founded by brothers Miguel Angel and Oscar Omar Trevino Morales, who were transferred to the US in 2025 to face drug trafficking, racketeering ...
↧
↧
Breaking News: Student injury occurs after hours at Carlmont - Scot Scoop News
An unknown species was found along the genetic timeline of tiger cats. The species,. News. Discovery of new feline species sparks debates over ...
↧
Does a Russian lab worker's death carry pandemic risk? - WLWT
... Breaking News:Tentative deal reached between First Student and ... unknown' illness. National Desk US. Playlist Back Play Pause Replay
↧
New DEA & opponent briefs in cannabis rescheduling hearing (Newsletter: October 14, 2026)
Tom Angell is the editor of Marijuana Moment. A 25-year veteran in the cannabis and drug law reform movement, he covers the policy, politics, science ...
↧