Zero-Day Attack on Law Firm Linked to Nation-State

A prominent law firm announced it was breached by suspected nation-state hackers who exploited a previously unknown zero-day vulnerability. The attack specifically targeted the email accounts of a select group of attorneys to gather intelligence. The threat actor is believed to be part of a broader espionage campaign targeting the legal sector for information on national security and trade. While the firm has taken steps to block the threat, the incident is under investigation by federal authorities. The firm stated there is no evidence that confidential client data was taken from its central file databases.

Latest mentioned: 10-08

Earliest mentioned: 10-08

Sources

databreaches.net therecord.media cybersum.net

Also Read

PhantomRaven Supply-Chain Attack Infects npm Ecosystem

Koi Security has discovered a massive supply-chain attack called PhantomRaven, which has infected the npm ecosystem with 126 malicious packages downloaded over 86,000 times. The campaign, active since August 2025, steals npm authentication tokens, GitHub credentials, and CI/CD secrets by concealing malicious code in dependencies. The attackers used Remote Dynamic Dependencies (RDD) to bypass security scanners, making the packages appear harmless. The malware executed automatically during installation, performing aggressive reconnaissance and exfiltration. Koi Security noted the use of AI-driven slopsquatting to create plausible-sounding package names, tricking developers into trusting malicious packages.

10-31Read more →