Threat Intelligence , Critical Infrastructure Security Google warns of cyber siege on defense companies February 11, 2026 By SC Staff (Adobe Stock) Cybernews reports that Western defense companies and their employees are facing an escalating wave of state-backed cyber-espionage , according to a new Google report. Google's Threat Intelligence Group warns of a "relentless barrage of cyber operations" aimed at Europe's defense industrial base, with drone makers and advanced weapons developers emerging as top targets. Attackers are seeking to steal research, disrupt production, and gain insight into next-generation battlefield systems. Russia-linked actors are cited as primary offenders, particularly in connection with the war in Ukraine, focusing heavily on unmanned aircraft technologies and related suppliers. A phishing campaign attributed to the cluster UNC5976 used malicious Remote Desktop Protocol files and spoofed domains impersonating defense firms across multiple countries. Smaller manufacturers, including automotive and component suppliers, are also experiencing extortion attempts, signaling broader supply chain targeting. Google says adversaries, including Russia, Iran, China, and North Korea, are exploiting hiring processes, personal accounts, and remote work setups, concluding that the defense sector is under "constant, multi-vector siege." SC Staff Ransomware Sophisticated RustyRocket malware added to WorldLeaks ransomware’s arsenal SC Staff February 13, 2026 Infosecurity Magazine reports that more clandestine and persistent intrusions have been conducted by the WorldLeaks ransomware operation through the new advanced RustyRocket malware. Threat Intelligence Attribution of sprawling cyberespionage campaign allegedly held back amid China retaliation fears SC Staff February 13, 2026 Attacks part of a global cyberespionage campaign by the TGR-STA-1030 hacking operation were noted by sources to have been attributed by Palo Alto Networks Unit 42 researchers to an Asian state-aligned group rather than to China due to possible retribution to the cybersecurity provider or its customers, Reuters reports. AI/ML Google Gemini weaponized in state-sponsored attacks SC Staff February 13, 2026 The Hacker News reports that multiple state-sponsored threat operations have been exploiting Google Gemini to facilitate accelerated cyber intrusions. Get daily email updates SC Media's daily must-read of the most current and pressing daily news Related Terms Black Hat Deauthentication Attack Dictionary Attack Disruption Distributed Scans Dumpster Diving Google Hacking Hybrid Attack Password Cracking Reconnaissance You can skip this ad in 5 seconds