#Iran
All CosmicBytez Labs articles tagged #Iran, across news, security advisories, how-to guides, and projects.
- News
Iranian Accused of Hacking American Universities Extradited From Montenegro
Amir Barati, accused in a $3.4B IRGC-linked hacking campaign against 144 U.S. universities, was extradited from Montenegro to face charges in New York.
- News
3 Cyber Threats That Defined the Summer of 2026
DarkReading recaps summer 2026: OpenAI agents breaching Hugging Face, Fairlife's ransomware halt, and Iranian hits on US water utilities.
- News
No Evidence of Successful Foreign Meddling in 2024 Election, Spy Agencies Found
A classified U.S. intelligence assessment found no evidence Russia, China, or Iran altered the 2024 election's outcome, despite active influence campaigns.
- News
In Other News: InjectEave Attack, SIM Swapper Sentenced, Glasswing Findings Review
Roundup: novel InjectEave EM eavesdropping, an AT&T insider's SIM-swap sentencing, a Glasswing audit, and a $10M bounty on an Iranian cyber chief.
- News
In Other News: Log4j RCE Scare, Minimus Shutdown, Iranian Hacker Sanctions
This week's roundup: a Log4j RCE scare gets debunked, container-security startup Minimus shuts down, and the US sanctions Iranian MOIS hackers.
- News
U.S. Sanctions Iran-Linked Hackers Behind Critical Infrastructure Breaches
Operation Economic Outcast sanctions ~60 Iran-linked entities including MOIS-affiliated hackers who hit energy, defense, healthcare, and US government.
- News
ThreatsDay: Gogs 10.0 RCE, n8n Workflow-to-RCE, $10M Reward, GLM-5.3 AI Exploit
This week: Gogs CVSS 10.0 RCE via path traversal, n8n prototype pollution, Iran IRGC $10M bounty, and GLM-5.3 AI discovering 2,436 vulnerabilities.
- News
Cavern C2 Uses DNS and Google Apps Script to Blend Into Legitimate Traffic
Iranian nation-state hackers evolved the Cavern C2 framework to tunnel commands through DNS and Google Apps Script, evading detection against Israeli targets.
- News
Senate Democrats Introduce Water Cyber Shield Act to Fund $300M Annual Water System Cybersecurity
Senators Schiff and Klobuchar introduce legislation directing $300 million per year to secure U.S. water and wastewater infrastructure following...
- News
In Other News: Iran Tracks US Military Phones, CrashStealer macOS Malware, CVD Blueprint
This week's security roundup covers Iranian threat actors tracking US military personnel's phones, the newly discovered CrashStealer macOS infostealer, a...
- News
Iran, Russia, and China Target Water Systems for Sabotage
Nation-state attackers from Iran, Russia, and China are breaching water utility systems through weak passwords, exposed PLCs, and poor network...
- News
Cal Water Says No OT Systems Breached in Iranian Handala Cyberattack
California Water Service has confirmed that Iranian hacker group Handala's cyberattack was limited to IT systems, with Mandiant's investigation finding no...
- News
The U.S. Sanctions Nobitex Crypto Exchange Used by Ransomware
The U.S. Treasury's OFAC has sanctioned Nobitex, Iran's largest cryptocurrency exchange, for facilitating payments linked to terrorist activities and…
- News
Hackers Used Meta's AI Support Bot to Seize Instagram Accounts
Iran-linked hackers exploited Meta's AI support assistant to reset account credentials, briefly defacing the Instagram accounts of the Obama White House and…
- News
Iranian APT Targets Aviation, Software Companies With
Nimbus Manticore, an Iranian advanced persistent threat group, has continued operations targeting aviation and software companies during and after the US.
- News
In Other News: Scattered Spider Member Arrested, SOC
A Scattered Spider threat actor has been arrested, a vulnerability in an NSA tool is disclosed, SOC effectiveness metrics get a rethink, and OFAC...
- News
In Other News: Cyberattack Stings Stryker, Windows
A weekly roundup of notable cybersecurity stories: Iran-linked hackers wipe 200,000 Stryker devices, the BlueHammer Windows zero-day PoC goes public,...
- News
Iran Deploys 'Pseudo-Ransomware,' Revives Pay2Key Operations
Iranian APT groups are increasingly blurring the lines between state-sponsored cyber espionage and financially motivated cybercrime, deploying destructive...
- News
State Department Reissues $10 Million Reward for Info on Iranian Hackers
Hours after the FBI confirmed that Iranian hackers gained access to Director Kash Patel's personal email account, the U.S. State Department reissued a $10...
- Newsletter
Mar 31 Digest: Axios npm RAT, Claude Code Source Leaked
The Axios npm library was weaponized to deliver a cross-platform RAT; Anthropic accidentally leaked Claude Code's CLI source in an npm package; Google...
- News
FBI Confirms Hack of Director Patel's Personal Email Inbox
Iran-linked Handala hackers have breached the personal email account of FBI Director Kash Patel, publishing stolen photos and documents in a high-profile...
- News
Iran-Linked Hackers Breach FBI Director's Personal Email
Iran's Handala Hack Team breached the personal email of FBI Director Kash Patel, leaking photos and documents online, while simultaneously launching a...
- News
Operation Epic Fury Triggers Unprecedented Cyber Escalation
Following the joint U.S.-Israeli military operation against Iran, Palo Alto Networks Unit 42 reports an unprecedented surge in cyber retaliation with...
- News
Iran Plunged Into Digital Darkness: Internet Drops to 4% in Cyberattack
During Operation 'Roar of the Lion,' a coordinated cyber offensive knocked Iran's internet connectivity down to just 4% of normal traffic, blacking out...
- News
All Four Major Nation-State Adversaries Now Weaponizing
Google reports that APT groups from China, Russia, Iran, and North Korea are all actively using Gemini AI for cyber operations including target...