apt

Rapid7 links a Chaos ransomware intrusion in early 2026 to Iranian state-linked MuddyWater, finding no encryption deployed — only credential theft and data exfiltration under ransomware cover.

The window Julian Andres Klode set for APT's hard Rust dependency has arrived, but no Rust code has landed in APT yet and alpha, hppa, m68k, and sh4 still lack toolchains.

Lotus Blossom APT group compromised Notepad++ update infrastructure from June to December 2025, delivering Cobalt Strike and custom backdoors to select government and telecom targets