Latest cybersecurity reporting from selected sources.

FSB-linked Gamaredon concealed a fileless worm in NTFS data streams to spy on Ukraine targets

Russia-linked hacking group Fancy Bear is exploiting a brand-new vulnerability in Microsoft Office, CERT-UA says

Ukraine’s CERT-UA has identified a new AI-powered malware, dubbed “LameHug,” which executes commands on compromised Windows systems in cyber-attacks, targeting the nation’s security and defense sector

Microsoft detailed how Russian espionage group Secret Blizzard is leveraging infrastructure of other threat actors to target the Ukrainian military with custom malware

Discovered by FortiGuard Labs, the attack leverages an Excel file embedded with a VBA macro

Organizations outside Ukraine could be targeted

Ukraine's allies may be in the firing line for destructive attacks

The campaign had several features differentiating it from other ransomware tracked by Microsoft

Microsoft warns of “defensive weaknesses” in European governments

Brad Smith argues that the Russia-Ukraine war marks significant shift in way warfare is conducted

Pre-positioning began as far back as March 2021

Tech giant disrupts APT28 but warns of all-out cyber-offensive