UK and allies expose spyware used by Iranian state actors to target dissidents, activists and journalists

2026-09-16T20:52:09Z•82d6c99604f50db24b8f133efec8dc5e24045f35afaf68a271f01953cffba1ae
AI securityCHOSEN BRICKFortinetIranLAUNDRY BEARRussiaUK NCSCVPNactivistsagentic AIcritical infrastructurecyber resiliencedissidentsedge devicesinternet-exposed systemsjournalistsoperational technologypost-quantum cryptographyroutersshadow AIspywarestate-sponsored activitythreat intelligencezero-click phishing

What happened

UK NCSC RSS feed containing recent cyber security advisories and guidance. Key items report Iranian state actors using CHOSEN BRICK spyware against dissidents, activists and journalists; Russian state-supported actors conducting a zero-click phishing campaign; exploitation of poorly configured routers and Fortinet firewalls/VPN gateways; and broader guidance on internet-exposed systems, operational technology, AI security, resilience and post-quantum cryptography.

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
uk_ncsc_all_rss
Record identifier
82d6c99604f50db24b8f133efec8dc5e24045f35afaf68a271f01953cffba1ae
Enrichment time
2026-09-16T20:52:09Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.