Related Threat Clusters
-
Russian Hackers Exploit Zimbra Zero-Day for Espionage Campaign
Since July 2025, Russian state-backed hackers, known as Laundry Bear, have exploited a zero-click vulnerability (CVE-2025-66376) in the Zimbra Collaboration Suite to infiltrate Western government and commercial…
82 articles · Updated July 23, 2026 -
Russian FSB Exploits Vulnerable Routers to Target Critical Infrastructure
A joint advisory from 21 global cybersecurity agencies warns that Russian state hackers from the FSB's Center 16 are exploiting poorly configured routers to infiltrate critical infrastructure networks worldwide. The…
76 articles · Updated July 13, 2026 -
EU Sanctions Russia Over Ongoing Cyber Espionage Campaign
The European Union has condemned and sanctioned Russia for a prolonged cyber espionage campaign targeting its member states. The campaign, orchestrated by the 16th Centre of the FSB, has involved infiltrating government…
172 articles · Updated July 13, 2026 -
APT28 Exploits Vulnerable Routers for Global DNS Hijacking Campaign
Russian cyber group APT28, also known as Fancy Bear, has been exploiting vulnerabilities in TP-Link and MikroTik routers to conduct large-scale DNS hijacking operations. This campaign, which has affected over 18,000…
100 articles · Updated April 7, 2026 -
Ukraine's Energy Infrastructure Under Cyber and Physical Attack
Ukraine has faced systematic Russian strikes on its energy infrastructure for four consecutive winters, with the most recent winter seeing near-daily attacks across 17 regions. All of Ukraine's thermal power plants have…
2 articles · Updated April 2, 2026 -
UK Enhances Protections for Subsea Cables Amid Rising Russian Threats
On May 29, 2026, the UK government announced plans to impose stricter penalties for damaging subsea internet cables, which are crucial for national infrastructure. Telecoms minister Liz Lloyd highlighted that subsea…
13 articles · Updated May 29, 2026 -
Operation Saffron: First VPN Dismantled in Major Cybercrime Takedown
On May 19-20, 2026, an international law enforcement operation, dubbed Operation Saffron, successfully dismantled First VPN, a virtual private network service heavily utilized by cybercriminals for ransomware, fraud,…
32 articles · Updated May 21, 2026 -
APT28 Exploits Roundcube Vulnerabilities in Targeted Cyber Espionage Campaign
APT28 (Fancy Bear) has been linked to Operation Roundish, utilizing a comprehensive Roundcube exploitation toolkit against Ukrainian government targets. The toolkit, discovered in January 2026, includes XSS payloads, a…
3 articles · Updated July 23, 2026 -
Europe's Electricity Infrastructure Under Siege from Hybrid Warfare
European electricity infrastructure is increasingly targeted by hybrid warfare, with a report from Eurelectric revealing that most utilities are unprepared. The report highlights a surge in physical sabotage,…
4 articles · Updated April 1, 2026 -
US Military Operation in Venezuela: Abduction of Maduro and Escalating Tensions
On January 3, 2026, the US conducted a military operation named 'Absolute Resolve' that resulted in the abduction of Venezuelan President Nicolás Maduro and his wife, Cilia Flores, in Caracas. The operation led to…
9 articles · Updated April 13, 2026
Recent Intelligence Reports
- BlueDelta Targets Defense and Diplomatic Organizations With HOOKEDGE Malware — Gbhackers · August 28, 2026
- BlueDelta Targets Defense and Diplomacy with HOOKEDGE — Recordedfuture · August 27, 2026
- Read the full article — thegaze.media · August 26, 2026
- Interpol Operation Jackal IV Identifies 263 Cybercrime Suspects — Infosecurity-Magazine · August 26, 2026
- Pro-Russian hackers declare 'cyberwar' on Norway — Thebarentsobserver · August 26, 2026
- Interpol's Jackal IV Disrupts West African Crime Infrastructure — Darkreading · August 26, 2026
- Interpol arrest suspected black axe scammers, identify hundreds for cyber crimes across West Africa — Bbc · August 26, 2026
- Russian Motivations Hanoi Convention Cybercrime — www.justsecurity.org · August 22, 2026