<?xml version="1.0" encoding="utf-8"?>
<rss version="2.0"
  xmlns:dc="http://purl.org/dc/elements/1.1/"
  xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
  xmlns:admin="http://webns.net/mvcb/"
  xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"
  xmlns:content="http://purl.org/rss/1.0/modules/content/">

Third segment: cyberattack
  
  <channel>

  <title><![CDATA[CircleID]]></title>
  <link>https://circleid.com/topics/cyberattack</link>
  <description>CircleID - Cyberattack</description>
  <dc:language>en</dc:language>
  <dc:rights>Copyright 2026, unless where otherwise noted.</dc:rights>
  <dc:date>2026-07-29T16:28:00+00:00</dc:date>

  
    <item>
      <title><![CDATA[Inside a TDS-Powered ClickFix Malware Ecosystem: A DNS Deep Dive]]></title>
      <link>https://circleid.com/posts/inside&#45;a&#45;tds&#45;powered&#45;clickfix&#45;malware&#45;ecosystem&#45;a&#45;dns&#45;deep&#45;dive</link>
      <guid isPermaLink="true">https://circleid.com/posts/inside&#45;a&#45;tds&#45;powered&#45;clickfix&#45;malware&#45;ecosystem&#45;a&#45;dns&#45;deep&#45;dive</guid>

      <description><![CDATA[DNS analysis of a malware distribution ecosystem uncovered thousands of linked artifacts, exposing typosquatting, malicious infrastructure and victim connections that broaden detection opportunities beyond Check Point Research's original indicators through expanded DNS intelligence correlation efforts.]]></description>
      <dc:date>2026-07-27T12:51:00-07:00</dc:date>
    </item>
  
    <item>
      <title><![CDATA[DNS Investigation: Threat Actor TA4922 Goes Global]]></title>
      <link>https://circleid.com/posts/dns&#45;investigation&#45;threat&#45;actor&#45;ta4922&#45;goes&#45;global</link>
      <guid isPermaLink="true">https://circleid.com/posts/dns&#45;investigation&#45;threat&#45;actor&#45;ta4922&#45;goes&#45;global</guid>

      <description><![CDATA[TA4922 is expanding beyond nearby targets, deploying a fast-changing malware arsenal across Europe and Africa. A DNS investigation uncovered thousands of connected domains, dozens of malicious assets and signs of compromised victim infrastructure worldwide today.]]></description>
      <dc:date>2026-07-17T08:56:00-07:00</dc:date>
    </item>
  
    <item>
      <title><![CDATA[ZEGO&#8217;s Cyberattack Pushes Bavarian Textile Firm Into Insolvency]]></title>
      <link>https://circleid.com/posts/zegos&#45;cyberattack&#45;pushes&#45;bavarian&#45;textile&#45;firm&#45;into&#45;insolvency</link>
      <guid isPermaLink="true">https://circleid.com/posts/zegos&#45;cyberattack&#45;pushes&#45;bavarian&#45;textile&#45;firm&#45;into&#45;insolvency</guid>

      <description><![CDATA[A cyberattack forced Bavarian textile specialist ZEGO into insolvency after a six-week production shutdown. The company is pursuing restructuring efforts to preserve jobs, customer relationships and its future amid growing cyber risks.]]></description>
      <dc:date>2026-07-14T12:29:00-07:00</dc:date>
    </item>
  
    <item>
      <title><![CDATA[FBI Warns of Russian Cyber Campaign Targeting Vulnerable Routers]]></title>
      <link>https://circleid.com/posts/fbi&#45;warns&#45;of&#45;russian&#45;cyber&#45;campaign&#45;targeting&#45;vulnerable&#45;routers</link>
      <guid isPermaLink="true">https://circleid.com/posts/fbi&#45;warns&#45;of&#45;russian&#45;cyber&#45;campaign&#45;targeting&#45;vulnerable&#45;routers</guid>

      <description><![CDATA[The FBI and international partners warn that Russia's FSB Center 16 is exploiting vulnerable routers worldwide, highlighting persistent weaknesses in network security and urging organizations to adopt stronger protections to safeguard critical infrastructure against intrusion.]]></description>
      <dc:date>2026-07-14T12:12:00-07:00</dc:date>
    </item>
  
    <item>
      <title><![CDATA[Under the DNS Hood of an Ongoing Legacy MSHTA Tool Attack]]></title>
      <link>https://circleid.com/posts/under&#45;the&#45;dns&#45;hood&#45;of&#45;an&#45;ongoing&#45;legacy&#45;mshta&#45;tool&#45;attack</link>
      <guid isPermaLink="true">https://circleid.com/posts/under&#45;the&#45;dns&#45;hood&#45;of&#45;an&#45;ongoing&#45;legacy&#45;mshta&#45;tool&#45;attack</guid>

      <description><![CDATA[A DNS analysis of infrastructure behind ongoing MSHTA abuse uncovered malicious registrations, typosquatting clusters, victim activity, and hundreds of linked indicators, revealing how legacy Windows tooling continues enabling modern malware campaigns through interconnected DNS intelligence.]]></description>
      <dc:date>2026-07-10T09:16:00-07:00</dc:date>
    </item>
  
    <item>
      <title><![CDATA[macOS ClickFix Campaign Delivers AMOS and Other Infostealers: A DNS Deep Dive]]></title>
      <link>https://circleid.com/posts/macos&#45;clickfix&#45;campaign&#45;delivers&#45;amos&#45;and&#45;other&#45;infostealers&#45;a&#45;dns&#45;deep&#45;dive</link>
      <guid isPermaLink="true">https://circleid.com/posts/macos&#45;clickfix&#45;campaign&#45;delivers&#45;amos&#45;and&#45;other&#45;infostealers&#45;a&#45;dns&#45;deep&#45;dive</guid>

      <description><![CDATA[A DNS deep dive into Microsoft's macOS ClickFix campaign uncovered victim infrastructure, typosquatting clusters, malicious registrations, and hundreds of linked indicators, exposing a broader infostealer ecosystem beyond the original 140 network IoCs identified by Microsoft.]]></description>
      <dc:date>2026-07-06T08:58:00-07:00</dc:date>
    </item>
  
    <item>
      <title><![CDATA[DNS Deep Dive: TA416 European Government Espionage Campaigns]]></title>
      <link>https://circleid.com/posts/dns&#45;deep&#45;dive&#45;ta416&#45;european&#45;government&#45;espionage&#45;campaigns</link>
      <guid isPermaLink="true">https://circleid.com/posts/dns&#45;deep&#45;dive&#45;ta416&#45;european&#45;government&#45;espionage&#45;campaigns</guid>

      <description><![CDATA[An extensive DNS analysis of TA416's renewed European espionage campaign uncovered malicious infrastructure, typosquatting clusters, historical network activity, and thousands of connected artifacts that expand defenders' visibility beyond Proofpoint's original indicators for proactive threat hunting.]]></description>
      <dc:date>2026-06-29T13:10:00-07:00</dc:date>
    </item>
  
    <item>
      <title><![CDATA[DNS Deep Dive: GHOST STADIUM Takes Advantage of FIFA 2026]]></title>
      <link>https://circleid.com/posts/dns&#45;deep&#45;dive&#45;ghost&#45;stadium&#45;takes&#45;advantage&#45;of&#45;fifa&#45;2026</link>
      <guid isPermaLink="true">https://circleid.com/posts/dns&#45;deep&#45;dive&#45;ghost&#45;stadium&#45;takes&#45;advantage&#45;of&#45;fifa&#45;2026</guid>

      <description><![CDATA[A DNS investigation of the GHOST STADIUM phishing operation uncovered typosquatting clusters, malicious infrastructure, victim-linked IP activity, and thousands of connected domains, revealing the scale of a FIFA 2026 ticket fraud ecosystem.]]></description>
      <dc:date>2026-06-24T09:09:00-07:00</dc:date>
    </item>
  
    <item>
      <title><![CDATA[.PK ccTLD Governance Issues and Pakistan&#8217;s Digital Future]]></title>
      <link>https://circleid.com/posts/dot&#45;pk&#45;cctld&#45;governance&#45;issues&#45;and&#45;pakistan&#45;digital&#45;future</link>
      <guid isPermaLink="true">https://circleid.com/posts/dot&#45;pk&#45;cctld&#45;governance&#45;issues&#45;and&#45;pakistan&#45;digital&#45;future</guid>

      <description><![CDATA[Pakistan's .pk domain has long been controlled by a private company abroad, raising concerns over digital sovereignty, cybersecurity and accountability. Repeated breaches, offshore infrastructure and weak governance have left a critical national asset exposed and contested.]]></description>
      <dc:date>2026-06-23T09:51:00-07:00</dc:date>
    </item>
  
    <item>
      <title><![CDATA[A DNS Investigation of Shadow-Earth-053]]></title>
      <link>https://circleid.com/posts/a&#45;dns&#45;investigation&#45;of&#45;shadow&#45;earth&#45;053</link>
      <guid isPermaLink="true">https://circleid.com/posts/a&#45;dns&#45;investigation&#45;of&#45;shadow&#45;earth&#45;053</guid>

      <description><![CDATA[A DNS investigation of Shadow-Earth-053 uncovered hundreds of victim-linked connections and a sprawling infrastructure tied to China-aligned cyber-espionage. Analysis of known indicators exposed additional domains, IP addresses, and registration patterns that broaden the campaign's suspected footprint.]]></description>
      <dc:date>2026-06-19T12:17:00-07:00</dc:date>
    </item>
  
    <item>
      <title><![CDATA[DNS Deep Diving into FakeWallet Crypto Stealer]]></title>
      <link>https://circleid.com/posts/dns&#45;deep&#45;diving&#45;into&#45;fakewallet&#45;crypto&#45;stealer</link>
      <guid isPermaLink="true">https://circleid.com/posts/dns&#45;deep&#45;diving&#45;into&#45;fakewallet&#45;crypto&#45;stealer</guid>

      <description><![CDATA[A DNS-focused investigation of the FakeWallet crypto-stealer campaign uncovered links to malicious infrastructure, potential victims, and thousands of connected domains, revealing signs of pre-staged operations and suggesting the wallet-phishing scheme was broader and longer-running than first reported.]]></description>
      <dc:date>2026-06-15T11:22:00-07:00</dc:date>
    </item>
  
    <item>
      <title><![CDATA[DNS Deep Dive: Pushpaganda Network IoCs]]></title>
      <link>https://circleid.com/posts/dns&#45;deep&#45;dive&#45;pushpaganda&#45;network&#45;iocs</link>
      <guid isPermaLink="true">https://circleid.com/posts/dns&#45;deep&#45;dive&#45;pushpaganda&#45;network&#45;iocs</guid>

      <description><![CDATA[A DNS investigation into Pushpaganda, an AI-powered scam network that infiltrated Google Discovery feeds, uncovered more than 1,000 connected domains, 162 linked IP addresses, and evidence that several infrastructure assets were registered with malicious intent.]]></description>
      <dc:date>2026-06-10T11:43:00-07:00</dc:date>
    </item>
  
    <item>
      <title><![CDATA[From Uptime to Trust: The Domain Security Strategy Behind Business Continuity]]></title>
      <link>https://circleid.com/posts/from&#45;uptime&#45;to&#45;trust&#45;the&#45;domain&#45;security&#45;strategy&#45;behind&#45;business&#45;continuity</link>
      <guid isPermaLink="true">https://circleid.com/posts/from&#45;uptime&#45;to&#45;trust&#45;the&#45;domain&#45;security&#45;strategy&#45;behind&#45;business&#45;continuity</guid>

      <description><![CDATA[Domains and DNS underpin modern business operations, yet security gaps remain widespread. CSC's latest research shows why stronger domain protections are essential to resilience, helping companies reduce disruption, safeguard trust, and maintain continuity when attacks strike.]]></description>
      <dc:date>2026-06-03T04:12:00-07:00</dc:date>
    </item>
  
    <item>
      <title><![CDATA[The DNS Anatomy of the Axios Supply Chain Attack]]></title>
      <link>https://circleid.com/posts/the&#45;dns&#45;anatomy&#45;of&#45;the&#45;axios&#45;supply&#45;chain&#45;attack</link>
      <guid isPermaLink="true">https://circleid.com/posts/the&#45;dns&#45;anatomy&#45;of&#45;the&#45;axios&#45;supply&#45;chain&#45;attack</guid>

      <description><![CDATA[A DNS-focused investigation into the Axios NPM supply chain attack uncovered typosquatting networks, victim-linked infrastructure, and hundreds of connected domains, revealing how malicious actors built and sustained a sprawling cyber campaign around compromised software dependencies.]]></description>
      <dc:date>2026-05-28T08:49:00-07:00</dc:date>
    </item>
  
    <item>
      <title><![CDATA[dotBrand Domains as Trust Infrastructure in the Age of AI]]></title>
      <link>https://circleid.com/posts/dotbrand&#45;domains&#45;as&#45;trust&#45;infrastructure&#45;in&#45;the&#45;age&#45;of&#45;ai</link>
      <guid isPermaLink="true">https://circleid.com/posts/dotbrand&#45;domains&#45;as&#45;trust&#45;infrastructure&#45;in&#45;the&#45;age&#45;of&#45;ai</guid>

      <description><![CDATA[As AI agents automate phishing, impersonation and domain abuse at machine scale, the Brand Registry Group argues that dotBrand domains are evolving from marketing assets into trust infrastructure underpinning cybersecurity, identity and interactions across the internet.]]></description>
      <dc:date>2026-05-27T11:48:00-07:00</dc:date>
    </item>
  

  </channel>
  

</rss>