Related Threat Clusters
-
Russian Hackers Exploit Zimbra Zero-Day for Espionage Campaign
Since July 2025, Russian state-backed hackers, known as Laundry Bear, have exploited a zero-click vulnerability (CVE-2025-66376) in the Zimbra Collaboration Suite to infiltrate Western government and commercial…
82 articles · Updated July 23, 2026 -
APT28 Exploits Roundcube Vulnerabilities in Targeted Cyber Espionage Campaign
APT28 (Fancy Bear) has been linked to Operation Roundish, utilizing a comprehensive Roundcube exploitation toolkit against Ukrainian government targets. The toolkit, discovered in January 2026, includes XSS payloads, a…
3 articles · Updated July 23, 2026 -
Webworm APT Expands Operations to Europe with New Backdoors
The China-aligned APT group Webworm has shifted its focus from Asia to Europe, targeting government organizations in Belgium, Italy, Poland, Serbia, and Spain during 2025. ESET researchers identified new backdoors,…
12 articles · Updated May 20, 2026 -
China-aligned APT Groups Target Global Maritime and Tech Sectors Amid Geopolitical Tensions
ESET's latest APT Activity Report reveals that from October 2025 to March 2026, China-aligned threat actors engaged in extensive espionage campaigns, particularly in Venezuela and the Gulf region. Following U.S.…
6 articles · Updated May 28, 2026 -
Explosives Discovered Near Serbian Gas Pipeline Ahead of Hungarian Elections
On April 5, 2026, Serbian authorities discovered two backpacks containing explosives near the Balkan Stream pipeline, which supplies Russian gas to Hungary. The explosives were found a few hundred meters from the…
16 articles · Updated April 5, 2026 -
Cellebrite Tools Used by Russia to Hack Political Activist's Phone Despite Contract Cancellation
Russian authorities used Cellebrite's forensic tools to access the iPhone of political activist Andrey Pivovarov in June 2021, despite Cellebrite's announcement in March 2021 that it would cease sales to Russia. The…
22 articles · Updated June 25, 2026 -
Russian Hackers Breach Over 170 Ukrainian Prosecutor Email Accounts
A hacking campaign attributed to a Russia-linked group, likely Fancy Bear, compromised over 284 email accounts belonging to Ukrainian prosecutors and investigators from September 2024 to March 2026. The breach was…
7 articles · Updated April 15, 2026 -
Montenegro Arrests Iranian Hacker Linked to $3.4 Billion Cyberattacks
Montenegrin authorities, in collaboration with the FBI, arrested a 39-year-old Iranian national with dual Iranian and Turkish citizenship in Kotor. He is accused of orchestrating cyberattacks from 2013 that targeted…
13 articles · Updated June 26, 2026 -
Intensified Drone Warfare: Ukraine and Russia Exchange Strikes Amid Civilian Casualties
On March 21, Ukraine launched nearly 300 drones targeting Russian military and industrial sites, including an oil refinery in Saratov, while Russia retaliated with 154 drones against Ukraine, resulting in civilian…
1410 articles · Updated March 21, 2026 -
Bulgaria's Circles Exports Surveillance Tech to Rights Violators
Between 2018 and 2023, Bulgaria licensed the export of surveillance technology from Circles, a company linked to NSO Group, to various countries with histories of human rights abuses. Human Rights Watch revealed that…
9 articles · Updated June 19, 2026
Recent Intelligence Reports
- Threat Intelligence — www.eset.com · August 27, 2026
- Dangerous Invitations Russian Threat Actor Spoofs European Security Events In Targeted Phishing Attacks — www.volexity.com · August 21, 2026
- Ukraine-Russia war latest: Putin could attack Nato within weeks, US intelligence warns — Independent · August 8, 2026
- Agerpres Franța afirmă că 'nu va tolera nicio tentativă de ingerință străină' în alegerile prezidențiale — agerpres.ro · August 7, 2026
- How Cyberattacks Became a Censorship Tool — Techpolicy.Press · July 30, 2026
- Operation Roundpress — www.welivesecurity.com · July 24, 2026
- Industrial Defender Partners with COMPUTER 2000 Bulgaria to Expand OT Cybersecurity ... — Morningstar · July 9, 2026
- Industrial Defender Partners with COMPUTER 2000 Bulgaria to Expand OT Cybersecurity ... — Prnewswire · July 9, 2026