Government — threat intelligence
Recent advisories whose title or summary heuristically matches theGovernment sector. Derived in-browser/at-edge from a keyword catalog — treat tags as a hint and open each source for ground truth. Ingestion is scheduled every 30 minutes and may be partial; this page is a snapshot from its last build (timestamped below).
9 recent Government advisories
This snapshot covers the latest 2,000 retrieved records. The retrieval limit was reached, so older matching advisories may be omitted.
Snapshot built . The live filter and the RSS feed reflect new items as they arrive.
Hackers target government Windows systems in Asia with new malware
The previously unknown malware, dubbed NetamLoader, uses legitimate Microsoft software components to execute malicious code, evade security tools and download additional programs onto infected computers.
Limited reports of PHP bug exploitation emerge
One cyber firm listed a half-dozen exploitations of the PHP2Shell bugs, and another identified a well targeted, suspected Chinese campaign that breached U.S. "government affiliated" servers.
IR trends Q3 2026: Actors impersonate IT help desks in vishing attacks as ransomware activity increases
Phishing remained the leading initial access technique, while percentage of ransomware and pre-ransomware cases increased. Finance and public administration tied as the top-targeted industries.
Unknown APT uses NetamLoader to attack a Win10 OS customized for governments in Asia
Kaspersky researchers analyze a complex targeted attack employing NetamLoader, a sophisticated malicious framework and targeting a customized government OS.
Moldova investigates possible foreign involvement in major government cyberattack
Prime Minister Vasile Tofan said the incident may be part of a broader campaign targeting both citizens' personal data and government digital infrastructure, according to local media reports.
PHP2Shell Attack Roots 25 Servers, Breaches U.S. Government-Affiliated Network
Cybersecurity researchers have disclosed details of what appears to be an artificial intelligence (AI)-assisted attack orchestrated by a suspected China-nexus threat actor that has leveraged the PHP2Shell vulnerabilities to breach exposed s…
UK to look at making software companies liable for cyber breaches
The new U.K. budget says the government will "consider where liability for cyber breaches should sit," potentially a landmark shift for a country that has relied on voluntary codes to encourage software vendors to improve security.
How Rapid7 InsightGovCloud Supports BOD 22-01 Compliance
An introduction to CISA’s BOD 22-01Issued nearly four years ago, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) Binding Operational Directive 22-01 (BOD 22-01) has been adopted across both public and private sector organiz…
China-Linked Hackers Exploit PHP2Shell to Root Firewalls
The attackers chained PHP2Shell and Fragnesia exploits and hacked two servers of a US government-affiliated organization. The post China-Linked Hackers Exploit PHP2Shell to Root Firewalls appeared first on SecurityWeek.
Other sectors:Healthcare·Finance·Energy·Critical Infra·Education·Technology·Telecom·Defense·Retail·Transportation·Legal Services
Threat groups reported to target Government
MITRE ATT&CK records 64 tracked groups with reported targeting of this sector. Each links to its ATT&CK profile: techniques by tactic, aliases, tooling and the groups closest to it by technique overlap. Reported targeting is not attribution of any specific advisory above.
admin@338·Ajax Security Team·Andariel·Aoqin Dragon·AppleJeus·APT-C-23·APT-C-36·APT1·APT12·APT17·APT18·APT28·APT29·APT30·APT32·APT37·APT38·APT42·Aquatic Panda·Axiom·BackdoorDiplomacy·Cleaver·CopyKittens·CURIUM·Daggerfly·Dragonfly·Earth Lusca·Gamaredon Group·HEXANE·Higaisa·Inception·Ke3chang·Kimsuky·Lazarus Group·Leviathan·Lotus Blossom·Machete·Magic Hound·menuPass·Mofang·Molerats·Moonstone Sleet·MoustachedBouncer·MuddyWater·Naikon·OilRig·Patchwork·PLATINUM·POLONIUM·Putter Panda·Rancor·Sandworm Team·Sidewinder·Sowbug·Star Blizzard·Strider·Threat Group-3390·ToddyCat·Tonto Team·Transparent Tribe·Tropic Trooper·Turla·VOID MANTICORE·Wizard Spider
Also on ThreatFilter:cross-source corroborated CVEs·threat group directory·every source we track