Pravda.Ua Romanian Arson Attack Linked to Russian Sabotage Network
Article Content
- •A fire near a Romanian arms company was linked to a Russian sabotage network.
- •Three suspects, two Belarusians and one Ukrainian, were identified, with two arrested.
- •The Romanian government is enhancing security measures to prevent future attacks.
On September 14, a fire near CARFIL SA, a Romanian arms company, was reportedly orchestrated by a Russian sabotage network, as confirmed by Romanian officials on October 26. The attack involved three suspects, two from Belarus and one from Ukraine, who were allegedly coerced by Russian operatives. Two suspects were arrested while planning similar attacks in Germany, while the third remains at large in Poland. Romanian authorities believe this incident is part of a broader campaign of Russian sabotage aimed at undermining European security. Similar incidents have occurred across Europe, indicating a pattern of Russian hybrid warfare tactics. Romanian President Nicușor Dan condemned the attack, emphasizing the violation of Romania's sovereignty and the need for decisive action to prevent further incidents. The Romanian Intelligence Service is actively investigating the network behind the attack.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (4)
Following this threat?
Track Carfil SA in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
Who are the suspects involved?
What measures is Romania taking?
Is this part of a larger trend?
Continue Reading
China-Linked Hackers Exploit PHP2Shell to Root 25 Servers Cybersecurity firm Dream reported that a China-linked threat actor exploited PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619) and a Linux kernel privilege escalation flaw (CVE-2026-46300) to gain root access to 25 servers, including three in a U.S. government-affiliated environment. The attackers used… 
Brotli Decoder Vulnerability Patched Across Multiple Linux Distributions A vulnerability, CVE-2026-111497, affecting the Brotli decoder has been patched in various Linux distributions, including Fedora 44 and Oracle Linux 10. The flaw allows for an out-of-bounds write, which could potentially enable attackers to execute arbitrary code. The vulnerability was published on October 22, 2026…