Latest cybersecurity reporting from selected sources.

The FBI deployed a method to unplug US-based routers compromised by APT28 from the threat actor’s malicious network

A low-skilled Russian-speaking attacker has used GenAI tools to help deploy a successful attack workflow targeting FortiGate instances

A newly-discovered Russian group, Void Blizzard, has successfully compromised organizations in critical industries, Microsoft warned

In Operation RoundPress, the compromise vector is a spearphishing email leveraging an XSS vulnerability to inject malicious JavaScript code into the victim's webmail page

Volexity highlighted how Russian nation-state actors are stealing Microsoft device authentication codes to compromise accounts

Microsoft has spotted a major spearphishing campaign from the Russian APT29 group using RDP for compromise

Threat group APT29 is using secrets stolen in an earlier attack to compromise Microsoft’s internal systems

Microsoft said the Russian nation-state group Midnight Blizzard obfuscated its attack through the use of an OAuth application

Russian intelligence hackers compromise emails of senior Microsoft leadership with simple password spray attacks

NPO Mashinostroyeniya is under sanctions for supporting Kremlin war machine

The Russia-based actor exploited compromised Microsoft 365 tenants owned by small businesses

Ukrtelecom claimed Russian hackers launched the attacks after compromising the credentials of an employee in an occupied area of the country

The 'Z' symbol was displayed on multiple Ukrainian news sites, allegedly perpetrated by Russian hackers

Researcher finds pro-Ukraine hacktivists are having an impact

Russian malware is designed to compromise SOHO devices