MEDIUMApt
Global

China-Linked Webworm APT Evolves Tactics, Expands to European Targets

·Source: Infosecurity Magazine

Updated:

Executive Summary

China-linked Webworm APT expands beyond Asia, targeting European government organizations and refining its cyber espionage tactics, according to ESET research

Analysis

China-linked Webworm APT expands beyond Asia, targeting European government organizations and refining its cyber espionage tactics, according to ESET research
Source Attribution

Originally published by Infosecurity Magazine on May 20, 2026.

Related Threats

CRITICALApt

Rapid7’s 2026 Global Cybersecurity Summit: Key Takeaways for Security Leaders

Security teams are working in an environment where speed, scale, and complexity are all increasing at the same time. Across the Rapid7 2026 Global Cybersecurity Summit , the focus was not just on how the threat landscape is evolving, but on how teams are adapting their approach to keep up. The sessions brought together perspectives from across detection and response, exposure management, AI, and s

Rapid7
HIGHApt

Internet Explorer may be dead, but its ghost still runs malware

Microsoft’s aging “mshta.exe” utility, a leftover component from Internet Explorer, is still being actively abused in modern malware campaigns years after the browser itself was retired. According to new research from Bitdefender, attackers continue to abuse Microsoft HTML Application Host (MSHTA), a built-in Windows utility capable of executing VBScript and JavaScript from local or remote files.

CSO Online
CRITICALApt

ZKTeco CCTV Cameras

<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-139-04.json"><strong>View CSAF</strong></a></p> <h2>Summary</h2> <p><strong>Successful exploitation of this vulnerability could result in information disclosure, including capture of camera account credentials.</strong></p> <p>The following versions of ZKTeco CCTV Cameras are affected:</p> <ul> <li>SSC335-GC2

CVE-2026-8598
CISA Advisories