APT41 Uses Google Calendar Events for C2

APT41, a Chinese state-sponsored threat actor also known as "Double Dragon," used Google Calendar as command-and-control infrastructure during a campaign last fall.

May 30, 2025 Signup

Daily Edition

Today’s news and insights for cybersecurity professionals

- Today's News and Features -

TOP STORY

APT41 Uses Google Calendar Events for C2‎‎‎ APT41, a Chinese state-sponsored threat actor also known as "Double Dragon," used Google Calendar as command-and-control infrastructure during a campaign last fall.‎‎‎ Keep Reading →

New Botnet Plants Persistent Backdoors in ASUS Routers‎‎‎ Thousands of ASUS routers have been infected and are believed to be part of a wide-ranging ORB network affecting devices from Linksys, D-Link, QNAP, and Araknis Network.‎‎‎

SentinelOne Reports Services Are Back Online After Global Outage‎‎‎ The outage reportedly hit 10 commercial customer consoles for SentinelOne's Singularity platform, including Singularity Endpoint, XDR, Cloud Security, Identity, Data Lake, RemoteOps, and more.‎‎‎

Victoria's Secret Goes Offline After 'Incident' Claims‎‎‎ The lingerie retailer isn't revealing much about the security incident it's dealing with but has brought in third-party experts to address the issue.‎‎‎

PumaBot Targets Linux Devices in Latest Botnet Campaign‎‎‎ While the botnet may not be completely automated, it uses certain tactics when targeting devices that indicate that it may, at the very least, be semiautomated.‎‎‎

LexisNexis Informs 360K+ Customers of Third-Party Data Leak‎‎‎ While the leak affected customer data, LexisNexis said in a notification letter that its products and systems were not compromised.‎‎‎

Zscaler's Buyout of Red Canary Shows Telemetry's Value‎‎‎ Red Canary's MDR portfolio complements Zscaler's purchase last year of Israeli startup Avalor, which automates collection, curation, and enrichment of security data.‎‎‎

DR GLOBAL

'Everest Group' Extorts Global Orgs via SAP's HR Tool‎‎ In addition to Coca-Cola, entities in Abu Dhabi, Jordan, Namibia, South Africa, and Switzerland are experiencing extortion attacks, all involving stolen SAP SuccessFactor data.‎‎

THE EDGE

NSA, CISA Urge Organizations to Secure Data Used in AI Models‎‎ New guidance includes a list of 10 best practices to protect sensitive data throughout the AI lifecycle as well as addressing supply chain and data poisoning risks.‎‎

DR TECHNOLOGY

From Code Red to Rust: Microsoft's Security Journey‎‎ At this year's Build developer conference, Microsoft reflects on what the company learned about securing features and writing secure code in the early 2000s.‎‎

Dark Reading Confidential: The Day I Found an APT Group in the Most Unlikely PlaceEpisode 6: In our latest podcast, threat hunters Ismael Valenzuela and Vitor Ventura share stories about the tricks they used to track down advanced persistent threat groups, and the surprises they discovered along the way. Listen now!

SPONSORED ARTICLE

Cyber Resilience: The Best Defense Against AI-Powered Threats‎‎‎ While AI fuels a new wave of more complex cyberattacks, LevelBlue research reveals the key to staying ahead requires embracing cyber resilience.‎‎‎

Read More →

- Commentary -

Opinions from thought leaders around the cybersecurity industry

A Defense-in-Depth Approach for the Modern Era‎‎‎ By integrating intelligent network policies, zero-trust principles, and AI-driven insights, enterprises can create a robust defense against the next generation of cyber threats.‎‎‎

Implementing Secure by Design Principles for AI‎‎‎ Harnessing AI's full transformative potential safely and securely requires more than an incremental enhancement of existing cybersecurity practices. A Secure by Design approach represents the best path forward.‎‎‎

More Commentary →

- Upcoming Events -

Jun 19, 2025 DevSecOps Achievement Unlocked

Jun 26, 2025 Strategic Security for the Modern Enterprise

More Events →

- More Resources -

WHITE PAPER The State of Workforce Security: Key Insights for IT and Security Leaders

WHITE PAPER Cortex XSIAM: The Machine-Led, Human-Empowered Security Platform

WHITE PAPER XSIAM Infographic: Talking About a Revolution

REPORT How Enterprises Assess Their Cyber-Risk

More Resources →

- Elsewhere in Cyber Today -

VENTURE IN SECURITY

IKEA effect in cybersecurity or why we love the things we build

TECH TARGET SEARCH SECURITY

What is double extortion ransomware? How to defend your organization

AWS SECURITY DIGEST

Setting Up a Cloud Security Roadmap for Your Startup

- Do You Find Today’s Newsletter Helpful? -

Yes Not sure No

You received this message because you are subscribed to Dark Reading's Daily newsletter. If a friend forwarded you this message, sign up here to get it in your inbox. Thoughts about this newsletter? Give us feedback.

Advertise With Us | Privacy Policy | Unsubscribe Copyright © 2025 TechTarget, Inc. or its subsidiaries. All rights reserved. Operated by TechTarget, Inc. and its subsidiaries, 275 Grove Street, Newton, Massachusetts, 02466 US