- Tools and Resources -

This advisory details recent activity by the SafePay ransomware group. SafePay actors have been highly active since August 2024, targeting businesses and critical infrastructure across North America, South America, Europe, and Australia.

Chinese government-linked cyber threat actors, enabled by the Integrity Technology Group, are combining automated scanning tools, large-scale botnets, and hands-on exploitation techniques to target and steal sensitive data from organizations worldwide, including US critical infrastructure sectors.

NIST's Center for Advancing Innovation and Standards for Super Intelligence, the National Security Agency's Super Intelligence Security Center, and the Cybersecurity and Infrastructure Security Agency published ten key practices for managing potential incidents during super intelligence training and evaluation.