A multinational advisory (CISA, NSA, FBI, AIVD, MIVD, NCSC-UK and others) warns that the Russian state-supported APT LAUNDRY BEAR (aka Void Blizzard, TA488) has compromised Western government, defense industrial base and NGO organizations running Zimbra Collaboration Suite (ZCS) since at least July 2025. The campaign uses a view-based XSS…
This SentinelOne weekly roundup covers law enforcement wins and two major breaches. A federal court sentenced former U.S. Army soldier Cameron John Wagenius to 70 months for attacks on technology and telecom firms, and former U.S. Air Force members Chijioke Timothy Odimegwu and Harafat Mogaji received a combined 189 months for business em…
Symantec reports that the Russia-linked APT28 (aka Swallowtail, Fancy Bear, Forest Blizzard, BlueDelta), which the U.S. government links to the GRU, targeted organizations in two NATO member states. Victims were a naval shipbuilder, a manufacturer of military aircraft engines and a law enforcement agency (thehackernews.com, cyberscoop.com…
The Citizen Lab disclosed AdFection on 15 October 2026. It calls this the first public technical confirmation of zero-click mercenary spyware delivered to real devices through targeted online advertising. The Israeli ad firm Discover-Tech (spelled Discovere-Tech by bleepingcomputer.com) posed as a legitimate ad company while acting as a b…
Microsoft attributed the recent supply-chain attack on ConnectWise customers' Microsoft 365 environments to Storm-0940, a China-state aligned actor active since 2021. Since at least September 2026 the group has used the open-source agentic AI penetration testing framework ARTEX to automate attacks against hundreds of organizations worldwi…