[Stanley]

Nation-State Hackers Deploy New Airstalk Malware in Suspected Supply Chain Attack

A suspected nation-state threat actor has been linked to the distribution of a new malware called Airstalk as part of a likely supply chain attack.
Palo Alto Networks Unit 42 said it's tracking the cluster under the moniker CL-STA-1009, where "CL" stands for cluster and "STA" refers to state-backed motivation.
"Airstalk misuses the AirWatch API for mobile device management (MDM), which is now

https://thehackernews.com/2025/10/nation...y-new.html

[Vectura]

Nation-state actors dropping new backdoors isn’t surprising anymore, what’s alarming is the pace and variety. Whoever’s behind this is treating every compromise like an asset for future ops instead of just a quick win. If your org hasn’t reviewed its fallback authentication and telemetry lately, you’re already on the back foot.