/
countries_code:RU × criticity:medium × limpar

Resultados

13 casos · pág. 1/1

darkreading.com · medium

Researchers infiltrate Microsoft impersonation tech support scam using Russian-run TDS and thousands of abused Cloudflare links

Researchers infiltrated a large-scale tech support scam operation that impersonates Microsoft. The operation relies on a malicious traffic distribution system (TDS) run by a Russian organization. It also abuses thousands of Cloudflare links to route victims to scam content. The article snippet gives no victim counts, losses or technical i…

haveibeenpwned.com · medium

Burger King Russia customer data exposed via Mindbox platform breach, 3.2M email addresses added to HIBP

A breach of the Mindbox marketing automation platform in August 2024 exposed data belonging to Burger King Russia customers. News of the incident broke in October 2024, and the dataset was added to Have I Been Pwned on 21 Sep 2026. It contains 3.2M unique email addresses along with names, genders, dates of birth, phone numbers and approxi…

recordedfuture.com · medium

Russia escalates VPN blocking, regional internet shutdowns and surveillance, raising operational risk for firms in Russia

Since mid-2025 the Kremlin has sharply escalated restrictions on digital communications, according to Insikt Group (Recorded Future). Measures include VPN blocking, state-managed regional internet shutdowns, throttling of Telegram and WhatsApp, promotion of the state-owned Max messenger, and expanded surveillance of Russian and foreign en…

blog.cloudflare.com · medium

Yandex outage after reported strikes: Cloudflare data shows malicious bot automation migrated to other Russian hosts instead of going offline

Following reported Ukrainian drone strikes on three Yandex facilities in Russia between October 7 and 11, claims spread that Russian bot farms and influence operations had been knocked offline. Cloudflare analyzed Radar and Bot Management data for the two Yandex ASNs, AS13238 (search) and AS200350 (Yandex.Cloud). It found no evidence that…

Terra Security: Reported broken security patches surge in 2026 as AI accelerates bug discovery and patch bypasses

AI pen-testing startup Terra Security reports a sharp rise in security fixes later found to be bypassed or incomplete. The share of GitHub security fixes needing a follow-up advisory for a failed patch within 90 days held near 0.2% from 2019 to 2025 but jumped to 2.3% in 2026. Terra links the trend to the 2026 explosion in AI-driven vulne…

krebsonsecurity.com · medium

UK sanctions Cryptomus/Heleket and three payment platforms over crypto laundering that helps Russia evade sanctions

On October 8, the U.K. imposed economic sanctions on Cryptomus (formerly Certa Payments and Xeltox Enterprises, rebranded as Heleket) for processing payments that benefit the Russian government and its financial institutions. The sanctions also cover the virtual payment platforms VexPay, TokenSpot and Tsunami Payments. Experts describe Cr…

bitdefender.com · medium

German police arrest Russian Qilin ransomware suspect 'Vladimir K', linked to 2024 Synnovis attack that contributed to a patient's death

A 28-year-old Russian man, identified by German media only as "Vladimir K", has been arrested in Germany on suspicion of being a key member of the Qilin ransomware gang. He was first detained in Japan in May while on holiday and was extradited to Germany earlier this month. German investigators are examining possible links between him and…

theregister.com · medium

X removes 13,000+ accounts tied to three suspected Iran-, Russia- and China-linked influence operations ahead of US midterms

X said it removed more than 13,000 accounts involved in three suspected foreign influence operations targeting US political debate ahead of the 3 November 2026 US midterm elections. The platform linked the operations to Iran, Russia and China. It said the networks used inauthentic accounts to post and amplify political content aimed at ca…

f5.com · medium

F5 Labs analyzes SparkRAT open-source RAT architectural weaknesses, exploits an in-the-wild C2, and releases YARA rules

F5 Labs published research on SparkRAT, a freely available, Go-based open-source Remote Access Trojan with a C2 server and builds for Windows, Linux and macOS. Public reporting since January 2023 shows use by a widening set of actors: Chinese-speaking groups, Winnti (APT41), Patchwork, TAG-100, suspected UAC-0194 against Ukraine, and Cybe…

newsroom.trendmicro.com · medium

TrendAI H1 2026 APT roundup: nation-state actors use AI across the intrusion lifecycle, plus zero-days and OT attacks

TrendAI™ (Trend Micro) published its H1 2026 APT Activity Roundup on July 29, 2026. It finds nation-state actors used AI in more stages of the intrusion lifecycle than in any prior half-year the company has tracked. China-aligned actors used generative AI to refine exploits and iteratively build malware through "vibe coding", and one AI a…

krebsonsecurity.com · medium

Court orders Radaris and 13 other data broker domains transferred to Atlas Data Privacy Corp under New Jersey's Daniel's Law

A New Jersey court has ordered radaris.com and 13 other domains in the Radaris family of people-search sites transferred to Atlas Data Privacy Corp. The ruling came after the defendants repeatedly failed to appear and defend a suit alleging violations of Daniel's Law, which requires data brokers to remove personal information of law enfor…