Notable Threat Actor Activity

  • The Iranian threat group MuddyWater has been observed deploying a new backdoor named UDPGangster in targeted attacks against entities in Turkey, Israel, and Azerbaijan. The backdoor leverages the User Datagram Protocol (UDP) for command-and-control (C2) communications, indicating a shift in their operational tactics.

Regulatory or Policy Developments Affecting the Security Industry

  • Portugal has updated its cybercrime law to provide legal exemptions for security researchers conducting good-faith research. The amendments create a safe harbor and clarify that hacking is not punishable under strictly defined conditions, aiming to encourage responsible vulnerability disclosure and research.