CyberDelegateOfficial magazine of The CyberDiplomat
A leading platform for cyber diplomacy, cybersecurity, AI governance, critical infrastructure protection, and international digital policy cooperation.
A Saidapet firm posing as a bank and NBFC collection agent was allegedly running illegal telecom gear that disguised scam calls as local Indian numbers. The Tamil Nadu Cyber Crime Wing has broken up an illegal SIM box operation in
Countries named in our reporting. Pick one to see the stories.
Loading the map
What security guidance says, set against what organisations actually do.
The Eternal Challenge: Law Chasing Technology There's a peculiar problem that haunts international law: by the time we codify the rules, the battlefield has already transformed. This tension lies at
A recent infographic on Starlink-enabled drones lays out the physical-layer case clearly: swapping a drone's 2.4/5.8 GHz radio link for a Starlink terminal turns a
A publicly released SignDrop exploit lets standard users gain SYSTEM rights on Windows 11 25H2/26H1 and Server 2025 systems with CLFS authentication enabled.
A Saidapet firm posing as a bank and NBFC collection agent was allegedly running illegal telecom gear that disguised scam calls as local Indian numbers. The Tamil Nadu Cyber Crime Wing has
A suspect was arrested in Ciudad Real for allegedly using AI tools to hack municipal and private platforms, raising concerns over emerging cyber‑threats.
Govt Advisories & Cyber Policy
Thailand’s prime minister orders a national push to protect digital and control systems following recent attacks on European infrastructure.
Silent Lynx used a self‑hosted AI agent and custom malware to infiltrate Tajik, Uzbek and Turkmen government systems, stealing thousands of documents and persisting in critical infrastructure.
Romanian intelligence halted a Russian Turla campaign that targeted government email servers, preventing data loss and restoring services.
Europol and partners seized hundreds of servers used by three major malware families, uncovering over 6 million stolen credentials and prompting security advice for WordPress users.
KB Capital confirmed a hack that leaked names, birth dates, contact details and vehicle numbers of 1,811 individuals, prompting warnings of identity theft and voice‑phishing attacks.
External attackers breached KakaoWork on Nov 9, leaking names, contact details and email content of current and former staff and external users in South Korea.
A high‑severity remote code execution bug in Apache’s HTTP/2 support affects versions 2.4.55‑2.4.70; administrators should upgrade to 2.4.71 immediately.
A coordinated attack using stolen GitHub tokens compromised 4,837 accounts, injected malicious workflows into over 61,000 repositories and exfiltrated cloud secrets.
A fake recruitment scam let state‑backed hackers install malware on a Binance engineer’s Mac, leading to a multi‑billion dollar crypto theft and prompting a massive asset‑freeze effort.
Luna Moth extortionists are stealing Microsoft Graph tokens from lawyers on video calls, enabling bulk data theft from Office 365 without MFA.
Check Point security gateways were scanned and exploited using PHP2Shell and CVE‑2026‑123039, affecting multiple versions and prompting urgent mitigation for admins worldwide.
NEC warns of two critical remote code execution bugs in WebSAM WinShare that let attackers gain SYSTEM rights; admins must patch or mitigate immediately.
A ransomware strike crippled Koka City’s voice broadcast network and may have exposed up to 25,000 installer or business names, prompting residents to seek alerts via alternative channels.
Synology warns that outdated DSM versions leave NAS devices vulnerable to C3RB3R ransomware, urging immediate updates and network hardening.
