Iran MOIS Colludes With Criminals to Boost Cyberattacks
2026-03-13T02:51:43Z•595aa34154d8e3a55c588cedb0a149aa6b9909e924a9fa7bf159046859d3dc0f
chinaciscocloud-resiliencecybercrimeexploited-vulnerabilitygithub-actionshealthcare-impactirannation-statenorth-koreapatch-managementqualcommransomwaresupply-chainvmwarevulnerabilitieszero-day
What happened
A batch of DarkReading reports highlights rising nation-state activity, prolific cybercrime and multiple actively exploited or recently patched vulnerabilities. Key incidents include Iran MOIS coordinating with criminal groups and an Iranian attack that disrupted Stryker; Chinese and India‑nexus actors shifting targets regionally; ransomware (INC) hitting healthcare in Oceania; and a supply‑chain compromise of Xygeni's GitHub Action via tag poisoning. Several high‑impact vulnerabilities are discussed — notably an exploited Qualcomm zero‑day (CVE-2026-21385), a command‑injection flaw in VMware
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- darkreading
- Record identifier
- 595aa34154d8e3a55c588cedb0a149aa6b9909e924a9fa7bf159046859d3dc0f
- Enrichment time
- 2026-03-13T02:51:43Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.