EU Sanctions Companies in China, Iran for Cyberattacks

This DarkReading roundup highlights a surge in diverse, high-impact cyber activity: nation-state and criminal espionage (SideWinder, China-nexus, Iran-linked actors), targeted zero‑day exploitation (DarkSword iPhone exploit chain), and financially motivated tooling (SnappyClient C2 targeting crypto wallets, real‑time banking Trojan in Brazil, multiple ransomware groups). Supply‑chain and dependency attacks (Xygeni GitHub Action tag‑poison, GlassWorm extensions) and sophisticated EDR‑evasion (BlackSanta, Warlock) are notable, alongside large-scale credential theft driven by infostealers and AI‑