As part of its latest attacks discovered in June, Tropic Tropper exploited several known Microsoft Exchange Server and Adobe ColdFusion vulnerabilities to distribute an updated China Chopper web shell on a server hosting the Umbraco open-source content management system.

Attacks of the hacking group, which have been redirected to targeting pro-Ukraine efforts since 2022, also involved domain scanning across several European Union nations and more than two dozen NATO members, as well as the exposure of stolen data through public domains.

With a contentious election in the U.S. and tensions escalating in the Middle East and Europe, watch for China to increase its cyberattacks on our critical infrastructure.

Attacks enable PyPI software takeovers by re-registering packages upon their removal from the index, an analysis from JFrog showed.

U.S. critical infrastructure entities were most targeted by the intrusions, with the UK, Germany, India, and Japan completing the five most hit countries, while a majority of the attacks were launched from China, Russia, and Iran, an analysis from KnowBe4 revealed.

Such a separation — which would restore intelligence, surveillance, and reconnaissance responsibilities to A2 alone while bringing in a three-star general to lead the new A6 command by next spring — aims to bolster Air Forces Cyber as sought by Air Force Secretary Frank Kendall.

The incident was reported by the BBC to have involved the targeting of the TfL corporate headquarters' backroom systems, which Propel Tech co-owner and Managing Director Andrew Brown said indicated the potential severity of system vulnerabilities.

Investigation into the data possibly compromised in the intrusion is still underway but operations of the agency were not impacted, according to an agency spokesperson, who reassured the safety of flights across the country while adding that notifications have already been provided to the country's security authorities.