/
attack_type:credential_theft × victim_sectors:military × limpar

Resultados

3 casos · pág. 1/1

gbhackers.com · · 3 fontes · 3 atualizações high

APT28 (Swallowtail) breaches NATO naval shipbuilder, aircraft engine maker and law enforcement agency with HOOKEDGE backdoor and new ld.exe loader

Symantec reports that the Russia-linked APT28 (aka Swallowtail, Fancy Bear, Forest Blizzard, BlueDelta), which the U.S. government links to the GRU, targeted organizations in two NATO member states. Victims were a naval shipbuilder, a manufacturer of military aircraft engines and a law enforcement agency (thehackernews.com, cyberscoop.com…

CVE-2026-21509 CVE-2026-8496 APT28 Swallowtail defense law enforcement
thehackernews.com · high

ThreatsDay bulletin: Zeabur, PingCAP, Genesys and Andromeda breaches, Bluesky phishing, Laravel, GLPI and Eptura Archibus flaws

This weekly roundup covers a cluster of breaches, critical vulnerabilities and law-enforcement actions. Bluesky confirmed more than 4,500 accounts compromised in a phishing campaign using a fake government payment offer. Zeabur will shut down after a second breach this year that exposed over 3.2 million environment variable records and da…

CVE-2026-65162 CVE-2026-114509 CVE-2026-107186 technology cloud
darkreading.com · · 7 fontes · 7 atualizações critical

Storm-0940 abuses ARTEX AI agents and stolen ConnectWise Cloud Backup app credentials to hit 2,250+ Microsoft 365 tenants

Microsoft attributes the supply-chain compromise of ConnectWise Cloud Backup (formerly SkyKick) to Storm-0940, a China state-aligned actor active since at least 2021. The group has used the agentic AI penetration-testing framework ARTEX since at least September 2026 against hundreds of organizations worldwide (cyberscoop.com, thehackernew…

Storm-0940 TAG-217 aerospace defense