Latest cybersecurity reporting from selected sources.

Russia-linked hacking group Fancy Bear is exploiting a brand-new vulnerability in Microsoft Office, CERT-UA says

Sandworm deployed data wipers against Ukrainian governmental entities and companies in the energy, logistics and grain sectors

ESET found that the FSB-affiliated groups, Gamaredon and Turla, are sharing tools to help conduct espionage attacks against Ukrainian organizations

Effective cybersecurity played a key role Ukraine drone attack on Russian strategic bombers, a leading government security expert has claimed

Researchers at ESET observed strengthened cyber-offensive activity from Russian groups, especially against Ukrainian and European entities

In Operation RoundPress, the compromise vector is a spearphishing email leveraging an XSS vulnerability to inject malicious JavaScript code into the victim's webmail page

A large-scale phishing campaign using DarkWatchman and Sheriff malware has been observed targeting companies in Russia and Ukraine

The CERT-UA investigation concluded that the attack’s techniques were “characteristic of Russian intelligence services”

Google has warned that Russian state-backed hackers are targeting Signal to eavesdrop on persons of interest in Ukraine

The December 2024 cyber-attack on the country’s state registers, was attributed to Russian military intelligence services

The Security Service of Ukraine has accused Russian-linked actors of perpetrating a cyber-attack against the state registers of Ukraine

Ukrainian officials say Russian intelligence is using video games to trick children into helping the enemy

Microsoft detailed how Russian espionage group Secret Blizzard is leveraging infrastructure of other threat actors to target the Ukrainian military with custom malware

South Korea warned that pro-Russian groups have attacked government and private sector websites following the deployment of North Korean soldiers in Ukraine

Google researchers have observed Russian threat actor UNC5812 using a malware campaign via Telegram to access the devices of Ukrainian military recruits

Russian cyber-attacks on Ukrainian servicemen underscore the escalating use of digital warfare tactics in the ongoing conflict

An overall rise in cyber incidents coming from Russian-aligned adversaries in 2024 was accompanied by a decrease in high and critical-severity incidents

A new report published by RUSI highlighted how Russia’s intelligence services have adapted their cybersecurity strategy to the demands of a long war in Ukraine

The US government is offering up to $10m for information on Amin Timovich Stigal’s location or his malicious cyber activity

Notorious APT44 group Sandworm launched a major campaign against Ukrainian critical infrastructure in March