SOC status:Duty analyst on shift
Topic
14 articles tagged Defence.
State-linked reconnaissance leads the defence and R&D picture — Volt Typhoon probing contractor login portals and APT41 active across 15+ industries — alongside KEV additions for JFrog Artifactory and BerriAI LiteLLM that bear directly on build chains and AI workflows.
The R&D and defence-contractor vertical continues to be shaped by the sustained China-nexus dominance of intrusions against the defence industrial base identified by Google Cloud / Mandiant in the 2026 update, and by continued Russian and North Korean activity in the same space.
The R&D and DIB vertical continues to sit at the highest strategic threat level of any of the covered verticals, with the dominant threat being long-dwell espionage from China-nexus and DPRK-nexus actors.
Coverage this period is dominated by the CISA KEV addition of CVE-2026-45659 - a significant risk given the prevalence of SharePoint in classified-adjacent document management - and by continuing PRC state-sponsored activity attributable to Salt Typhoon and Volt Typhoon.
The collection picture this period is dominated by sustained state-aligned espionage activity (Salt Typhoon, Mustang Panda, APT28 and Screening Serpens all remain active), continued infostealer activity affecting contractor supply chains…
During the reporting period the principal observations were the continued sustained cyber pressure on the Western defence industrial base from Russia- and China-linked actors as documented by Mandiant / Google Threat Intelligence (April 2026 report describing China-nexus groups as the most active…
The R&D and defence-contractor collection picture this week continues to be defined by sustained China-, Russia-, DPRK- and Iran-linked cyber pressure against the Western defence industrial base…
The R&D / defence-industrial-base collection picture this week has been shaped by continuing state-sponsored espionage activity against UK and EU contractors, with ESET's October-2025-to-March-2026 APT activity report (released 28 May) flagging sustained Chinese (Mustang Panda…
The week's collection picture is shaped by GCHQ Director Sir Anne Keast-Butler's 27 May warning that 'time is running out for the West' to confront the threats from Russia and China; by ESET's 28 May APT Activity Report covering October 2025 to March 2026 with sustained China, Russia…
The reporting cycle has been shaped by sustained state-sponsored espionage interest in UK and EU defence supply-chain entities, continued Chinese APT operational tempo across the supply-chain pivot model that produced the 2024 MOD payroll-provider breach…
During the reporting period 11 May 2026 – 17 May 2026 the R&D, military and government-contractor threat picture remained dominated by state-sponsored cyber-espionage against the defence industrial base.
The R&D and military / government-contractor threat picture for the reporting period continues to be dominated by sustained state-sponsored activity.