Iranian cyber targeting of dissidents, activists and journalists
2026-09-16T08:52:09Z•da3dc96ece21b3bf3d46949c0b745a93b7bc46f5dd85a11f3c4d9c29e4382e6d
AI securityBitLockerCHOSEN BRICKIranLAUNDRY BEARRussian cyber actorsUK NCSCactivistsagentic AIcritical infrastructurecyber resiliencedissidentsedge devicesincident responseinternet-exposed systemsjournalistsoperational technologypost-quantum cryptographyprivate 5Groutersshadow AIspywarestate-sponsored cyber activityzero-click phishing
What happened
UK NCSC RSS intelligence covering Iranian state-linked CHOSEN BRICK spyware targeting dissidents, activists, and journalists; Russian state-supported LAUNDRY BEAR zero-click phishing; exploitation of poorly configured internet-facing routers and edge devices; and broader guidance on AI security, shadow AI, agentic AI, operational technology, recovery, and post-quantum cryptography migration. The most immediate threats are state-sponsored surveillance and targeted phishing campaigns, alongside risks to critical infrastructure from exposed or poorly secured systems.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- uk_ncsc_all_rss
- Record identifier
- da3dc96ece21b3bf3d46949c0b745a93b7bc46f5dd85a11f3c4d9c29e4382e6d
- Enrichment time
- 2026-09-16T08:52:09Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.