Chinese hackers infiltrated Cuba's Washington embassy to monitor diplomatic communications as the US prepared a naval blockade, according to cybersecurity firm Gambit Security.
The breach targeted dozens of Cuban diplomats at the embassy during a period of heightened US-Cuba tensions. Gambit Security's investigation revealed that the hackers accessed sensitive embassy communications, providing Chinese intelligence with visibility into Cuban diplomatic activities at a critical moment.
The timing of the operation coincided with US preparations for a naval blockade against Cuba, suggesting the intrusion aimed to gather intelligence on the island nation's diplomatic response to American pressure. The scope of the breach encompassed multiple diplomats' accounts and communications channels.
The incident underscores ongoing cyber espionage operations by state-sponsored actors targeting diplomatic facilities. Cuban embassy networks in Washington represent high-value targets for intelligence gathering, given the embassy's role in coordinating bilateral relations and managing communications with Cuban leadership.
Gamebit Security did not disclose the specific timeline of the breach or the extent of data exfiltrated. The firm's findings have not been independently verified by US government agencies, though such breaches typically trigger coordinated responses from the FBI and NSA.
The operation adds to a pattern of Chinese cyber activities targeting US-allied and strategic targets. Previous investigations have documented similar Chinese-backed intrusions into government networks and critical infrastructure.
Cuba faces limited cybersecurity resources compared to developed nations, making its diplomatic networks potentially more vulnerable to sophisticated state-sponsored attacks. The breach highlights how smaller nations can become collateral damage in broader geopolitical disputes between major powers.
No official response from Cuban or Chinese government representatives has been released regarding the breach. The US State Department has not publicly commented on the incident.
A US federal judge dismissed a class action lawsuit accusing Apple of failing to prevent child sexual abuse material from spreading through iCloud, citing Section 230 protections for online platforms.
A threat actor has created nearly 300 fraudulent GitHub repositories impersonating legitimate software and security projects to distribute infostealer malware to unsuspecting developers.
LastPass has issued a warning about an active phishing campaign using fraudulent security notices to redirect users to malicious websites. The scheme targets both LastPass and Bitwarden password manager users.
Microsoft has rolled out cumulative updates KB5101650 and KB5099414 for Windows 11, addressing security vulnerabilities and bugs across multiple versions. The updates target versions 25H2/24H2 and 23H2.