Google report: Foreign cyber groups target U.S. defense industrial base
A Feb. 10 report by Google Threat Intelligence warns that the U.S. defense industrial base is facing sustained cyberattacks from China, Russia and North Korea, with China-linked actors posing the most active threat.
Chinese cyber-espionage groups have targeted more defense and aerospace organizations over the past two years than any other state-backed actors, often exploiting network edge devices and using ORB networks to evade detection.
A China-linked group known as UNC2970 has impersonated corporate recruiters and used Gemini to gather open-source intelligence and profile high-value defense targets.
Russian-linked hackers have focused on defense contractors supporting drone and unmanned aircraft systems tied to the war in Ukraine, while North Korean operatives have infiltrated firms by posing as IT workers, in some cases stealing sensitive AI-related data.
Experts warn the defense sector is under “constant siege,” urging organizations to shift from reactive cybersecurity to proactive threat hunting and resilient network architecture to safeguard emerging military technologies.
Read Full Article: https://www.naturalnews.com/2026-02-19-foreign-cyber-groups-target-us-defense-base.html
