Cyberwarfare | Byte Watchrhttps://bytewatchr.com/category/cyberwarfare/State-linked operations, critical infrastructure and the security of connected societies.en-usSun, 04 Oct 2026 02:16:47 GMTWarlock’s attacks on water and telecom operators expose the path from SharePoint to widespread ransomwarehttps://bytewatchr.com/articles/warlock-sharepoint-water-telecom-ransomware/https://bytewatchr.com/articles/warlock-sharepoint-water-telecom-ransomware/New research traces how an exposed collaboration server can become a route to disabled defenses and ransomware across a domain. The warning reaches beyond the initial patch.Sun, 04 Oct 2026 02:16:47 GMTCyberwarfareMI5’s research-funding alert makes the source behind a collaboration part of security reviewhttps://bytewatchr.com/articles/mi5-cgtri-research-funding-espionage-alert/https://bytewatchr.com/articles/mi5-cgtri-research-funding-espionage-alert/MI5 says a research-funding body supports Chinese intelligence capabilities. Its alert asks institutions to examine funding relationships without assuming every contributor knew their source.Sun, 04 Oct 2026 02:16:47 GMTCyberwarfareAntino’s Microsoft 365 command channel challenges simple cloud allowlistshttps://bytewatchr.com/articles/antino-microsoft-365-command-channel-espionage/https://bytewatchr.com/articles/antino-microsoft-365-command-channel-espionage/Cisco Talos describes a Windows backdoor using Outlook and OneDrive for command traffic. The report makes endpoint context essential to interpreting trusted cloud destinations.Sun, 04 Oct 2026 02:16:47 GMTCyberwarfareThe QTFY disruption targeted the machinery behind concealed cyber operationshttps://bytewatchr.com/articles/fbi-qtfy-botnet-disruption/https://bytewatchr.com/articles/fbi-qtfy-botnet-disruption/The FBI's August announcement offers a case for examining infrastructure disruption as an intervention with measurable, limited goals.Fri, 02 Oct 2026 07:58:57 GMTCyberwarfareThe Salt Typhoon lessons begin in the network management planehttps://bytewatchr.com/articles/telecom-security-salt-typhoon-lessons/https://bytewatchr.com/articles/telecom-security-salt-typhoon-lessons/A historical look at the December 2024 communications-security guidance, and the operational questions it still raises.Fri, 02 Oct 2026 07:58:57 GMTCyberwarfareCyberattack attribution is a chain of judgmentshttps://bytewatchr.com/articles/cyberattack-attribution-evidence/https://bytewatchr.com/articles/cyberattack-attribution-evidence/An infrastructure match, an activity cluster, and a judgment about state sponsorship answer different questions.Fri, 02 Oct 2026 07:58:57 GMTCyberwarfareWhat the 2024 Volt Typhoon warning taught infrastructure defendershttps://bytewatchr.com/articles/critical-infrastructure-volt-typhoon-lessons/https://bytewatchr.com/articles/critical-infrastructure-volt-typhoon-lessons/The joint advisory made persistent access and the paths toward operational systems central concerns. Its enduring lesson is to examine what an intruder could eventually reach.Fri, 02 Oct 2026 07:58:57 GMTCyberwarfareIn operational technology, a security change is an engineering decisionhttps://bytewatchr.com/articles/operational-technology-security-safety/https://bytewatchr.com/articles/operational-technology-security-safety/Cybersecurity controls have to fit the physical process, its failure modes, and the people responsible for keeping it safe.Fri, 02 Oct 2026 07:58:57 GMTCyberwarfare