China-Nexus Actor Spy on US Researchers Undetected for a Year

A surge of high-impact activity across nation‑state espionage, software supply‑chain compromise, and active zero‑day exploitation is featured. Google disrupted a China‑linked campaign that stole RedCAP credentials to spy on U.S. researchers, while multiple groups (China‑linked, North Korean, Russian) and cybercrime affiliates have been exploiting zero‑days and supply‑chain implants (Oracle, Ivanti, Check Point VPN, WinRAR/CVE-2025-8088, Miasma, IronWorm, Hades). Attack techniques are evolving with AI-assisted phishing, automated EDR‑evasion testing, prompt‑injection risks in large models, and警