1. UK Raises Terrorism Threat Level to “Severe” Following Golders Green Attack

The UK's Joint Terrorism Analysis Centre raised the national terrorism threat level from “substantial” to “severe” on April 30—the highest in four years — following an antisemitic stabbing attack in Golders Green, London. MI5 cited a rise in both Islamist and extreme right-wing terrorist threats as the driving factors. The U.S. Embassy in London subsequently issued a security alert advising American citizens to avoid schools, churches, and tourist locations, warning that a terrorist attack is "highly likely."

2. China-Linked Espionage Campaign Targets Asian Governments, NATO Member, and Journalists

Trend Micro disclosed a multi-stage cyber espionage campaign attributed to a China-aligned cluster tracked as “SHADOW-EARTH-053,” which has compromised government and defense networks across South, East, and Southeast Asia, plus one NATO member state in Europe. The attackers exploited Microsoft Exchange vulnerabilities active since December 2024, deploying ShadowPad malware and maintaining persistent access for up to eight months before detection. Targets include India, Taiwan, and Poland, with journalists and activists also affected.

3. FBI Warns China's Hacker-for-Hire Ecosystem "Out of Control"

A senior FBI official stated that China's government-backed hiring of hackers has "gotten out of control," providing cyber operatives with plausible deniability while enabling state-directed espionage at scale. The warning came as Chinese national Xu Zewei was extradited from Italy to the United States, charged with hacking COVID-19 researchers at the University of Texas Medical Branch. The FBI emphasized that Chinese hackers are vulnerable to arrest when they travel outside China.

4. Chinese State Actors Deploy Fake Whistleblowers and Impersonation to Target Journalists

An investigation by ICIJ and Citizen Lab revealed that following ICIJ's “China Targets” probe, Chinese state-aligned actors deployed fake journalists and phony whistleblowers to approach reporters, Taiwanese officials, and human rights advocates, seeking to extract sensitive data and disrupt investigations. Citizen Lab identified two distinct actor sets perpetuating digital transnational repression through impersonation and stolen narratives — a novel information operations tactic aimed at undermining investigative journalism networks.

5. Canada's CSIS Report Flags Rising Youth Radicalization and Foreign Interference

Canada's Security Intelligence Service released its annual public report, warning that violent extremism is becoming more complex to counter due to secretive online radicalization pathways. The report flags Khalistani extremist elements as an ongoing national security threat and alleges foreign interference operations by China, Russia, and India targeting Canadian democratic institutions. CSIS noted that anonymous online spaces are accelerating radicalization among Canadian youth in ways that are increasingly difficult to detect or attribute.

6. Iran-Linked Cells Accused of Destabilization Campaign in Syria

Syria's Interior Ministry accused Iran-linked cells of orchestrating a “systematic” campaign to destabilize the country, following the assassination of a Shiite cleric close to the transitional government. Separately, Arab News reported that Syria's government is actively working to dismantle IRGC networks and deepen ties with Gulf Arab states. The incidents underscore ongoing Iranian efforts to maintain influence through proxy networks despite the collapse of the Assad regime.

7. State Cybersecurity Officials Signal AI-Driven Threat Escalation

At the NASCIO Midyear Conference, U.S. state CIOs and CISOs reported a widening gap between jurisdictions that have adapted AI-driven defenses and those that remain exposed to increasingly automated cyber threats. Officials described AI as simultaneously enabling faster detection and empowering adversaries — particularly state-backed actors — to scale attacks beyond what traditional defenses can absorb.