Yandex (Organization): news timeline & CVEs

Targeted ads delivered 0-click exploits to install mercenary malware

Citizen Lab says Discover-Tech ads delivered Candiru zero-click exploits that installed mercenary spyware.

Citizen Lab reported the AdFection campaign, in which Discover-Tech served targeted ads that delivered zero-click exploits and installed mercenary spyware from Candiru, also known as Integrity Labs. Ad code contacted Candiru servers, which returned an exploit and payload when the ad rendered. Google, IAB Europe, Beeswax, Vungle, and Eskimi have since removed, paused, or blocked Discover-Tech. Impressions appeared on networks linked to NATO, the United Nations, European lawmaking bodies, Australian critical infrastructure, and Norwegian and Swedish government and military agencies. The report does not name the vulnerabilities or the final malware.

Ars Technica · Securityupdated Oct 16, 17:20 UTC · 11h agofirst Oct 15, 20:32 UTC · 1d agoThreat actor in the wild 12 sources2· 1 read

Data Centers Are War Targets Now

Ukrainian drones struck Russian Yandex and Sberbank data centers, disrupting everyday digital services across Russia.

404 Media reports that Ukrainian drones struck Russian data centers, including a fourth attack in a week against a Sberbank facility after earlier hits on Yandex sites. President Zelenskyy confirmed strikes on data centers and oil refineries. Three Yandex strikes damaged supercomputers that housed some AI models, took two of the company's six Russian data centers offline, and disrupted email, cloud services, taxis, and commercial logistics. The article also cites Iran's March strikes on AWS facilities in Dubai and a legal researcher on dual-use targeting, proportionality, and civilian harm.

404 MediaOct 15, 13:00 UTC · 1d agoPolicy & legal 11 sources2· 1 read

Yandex outage: Data shows that instead of going dark, malicious bots went on the move

Cloudflare says Yandex outages cut search crawling while malicious cloud bots mostly moved elsewhere.

Cloudflare analyzed traffic after reported Ukrainian drone strikes on Yandex facilities between October 7 and 11. On October 11, Yandex Search (AS13238) fell about 99% below baseline and Yandex.Cloud (AS200350) about 90%. Search losses were almost entirely verified crawlers, including YandexBot, while Yandex.Cloud's unverified bots showed sharp drops in WordPress plugin probing and scanner traffic. Global bot share stayed near 39%, and Cloudflare says high-volume malicious automation largely moved to other hosts rather than disappearing.

Cloudflare Blogupdated Oct 15, 13:00 UTC · 1d agofirst Oct 14, 20:24 UTC · 2d agoResearch 11 sources2

Yandex Data Center Outage Disrupts Access to Cloud Files Following Drone Attack

Drone strikes damaged three Yandex data centers in Russia, disrupting cloud files and Yandex Cloud.

Yandex said drone strikes damaged three Russian data centers between October 7 and 11, 2026. The Sasovo site and the Vladimir site stopped operating, while Kaluga lost part of its infrastructure; no injuries were reported. Yandex Disk users saw failed downloads and HTTP 302, 500, and 504 errors, and Yandex Cloud ran in emergency mode with partial compute, AI Studio, and security services and Monium offline. The company gave no restoration timeline, urged alternate disaster-recovery plans, and reporting did not establish malware, stolen credentials, or unauthorized access.

Cyber Security Newsupdated Oct 15, 13:00 UTC · 1d agofirst Oct 13, 03:28 UTC · 4d agoIndustry 11 sources3· 2 reads

Yandex confirms service outage as users lose access to cloud files

Drone strikes knocked out Yandex data centers, cutting customers off from cloud files and services.

Yandex said drone attacks damaged data centers in Sasovo (October 8), Kaluga (October 9), and Vladimir (October 11), fully shutting Sasovo and Vladimir and degrading Kaluga. Customers cannot reliably download Yandex Disk files, reporting HTTP 302, 500, and 504 errors and backups missing thumbnails. The company, whose cloud supports much of Russia’s government and business internet, called remaining capacity unstable and told customers to use alternative disaster-recovery infrastructure. No injuries were reported, permanent data loss is unconfirmed, and services such as Console, API, S3, and Kubernetes remain only partly available while Monium is offline.

BleepingComputerupdated Oct 15, 13:00 UTC · 1d agofirst Oct 12, 19:23 UTC · 4d agoIndustry 11 sources1

Russia was not ready for the data center war it started with Ukraine

Ukrainian drones struck Yandex data centers near Moscow, disrupting payments, cloud, and other Russian digital services.

Ukrainian drone strikes on October 9 and October 11 knocked out Yandex data centers in Russia's Kaluga and Vladimir regions, including a 63-megawatt facility and the site of the Galushkin supercomputer. Galushkin ranked 134 on the Top500 list at 20.64 petaflops. Reported disruptions hit Russian payment and banking apps, email, e-commerce, streaming, ride-hailing, maps, Yandex search, and Yandex Cloud customers. Commentators cited Yandex's centralized infrastructure and Russia's 2019 Sovereign Internet Law as limits on wartime backup.

Ars Technica · AIupdated Oct 15, 13:00 UTC · 1d agofirst Oct 12, 17:52 UTC · 4d agoOther 11 sources1

Ukrainian drone strikes on Yandex datacenters knock cloud and payments offline

Ukrainian drone strikes on three Yandex datacenters knocked Yandex Cloud and Yandex Pay offline.

Ukraine struck three of Yandex's five Russian datacenters with drones between October 7 and October 9, taking parts of the company's cloud and payments stack offline. The Sasovo site was seriously damaged and fully shut down, Kaluga lost some infrastructure, and a later strike hit the Vladimir site that supports Yandex Pay. Fintech head Dima Pirogov said customer money is safe but gave no restoration timeline. NetBlocks reported Yandex Cloud connectivity at about 30 percent of normal on October 11, while engineers prioritized Alice, Mail, Maps, Search, and Taxi.

The Register · Securityupdated Oct 15, 13:00 UTC · 1d agofirst Oct 12, 13:45 UTC · 4d agoIndustry 11 sources2

Ukraine strikes third Yandex data center, disrupting digital services across Russia

Ukrainian drones struck three Yandex data centers in Russia, disrupting cloud services, payments, and AI training infrastructure nationwide.

Ukrainian drone strikes targeted three of Yandex's six data centers in Ryazan, Kaluga, and Vladimir over the past week, forcing at least two facilities to shut down completely. The attacks disrupted Yandex Cloud (serving ~64,000 customers), Yandex Pay, delivery services, the Alice voice assistant, and third-party platforms including the Russian TikTok segment. Two Yandex supercomputers used for AI model training were housed at targeted facilities; the extent of damage remains undisclosed. Russia and Ukraine have exchanged strikes on each other's digital infrastructure in recent weeks.

The Recordupdated Oct 15, 13:00 UTC · 1d agofirst Oct 12, 12:00 UTC · 4d agoThreat actor 11 sources3· 1 read

Yandex bot traffic down 99% after data center attack

Yandex bot traffic fell about 99% after a reported data center attack, per Cloudflare Radar.

A Hacker News post points to Cloudflare Radar for AS13238, where Yandex bot traffic is shown down about 99% over seven days after a reported data center attack. The item itself only notes 54 points and 7 comments and does not name an attacker, malware, CVE, or confirm data theft or ransomware. The visible impact is a near-total collapse of Yandex bot traffic rather than a documented breach.

Hacker News · securityupdated Oct 15, 13:00 UTC · 1d agofirst Oct 12, 04:54 UTC · 5d agoIndustry 11 sources HN 54↑ · 7 comments1

3rd Yandex Cloud Data Center Was Hit

A Hacker News report says a third Yandex Cloud data center was hit.

A Hacker News security thread points to Yandex Cloud status incident 2136 under the headline that a third Yandex Cloud data center was hit. The supplied text only notes 48 points and 30 comments and does not describe the cause, affected services, or whether customer data was accessed. Impact should be treated as unconfirmed beyond the reported data-center incident.

Hacker News · securityupdated Oct 15, 13:00 UTC · 1d agofirst Oct 11, 07:34 UTC · 5d agoData breach 11 sources HN 48↑ · 30 comments2

Ukraine’s drones knock out AI data center belonging to "Russia’s Google"

Ukrainian drones knocked out a Yandex AI data center, disrupting several Russian online services.

Ars Technica reported that Ukrainian drones knocked out an AI data center belonging to Yandex, often called Russia's Google. The same reporting said a dating app, a real-estate aggregator, a self-publishing platform, and a Russian Premier League club website were also affected. The article describes data centers as 2026 wartime targets, including earlier Iranian drone strikes on Amazon sites in Bahrain and the UAE, alongside Ukraine's strikes on Russian military, shipping, and energy infrastructure.

Ars Technica · AIOct 9, 22:04 UTC · 7d agoAI industry5· 3 reads

Yandex Takes a Second Data Center Hit in 48 Hours

A drone strike took Yandex’s Kaluga data-center modules offline, the company’s second Russian site hit in 48 hours.

Russian state media TASS reported on October 9 that a drone strike put several modules of Yandex’s Kaluga data center completely out of service. The Grabtsevo industrial-park site, described as Yandex’s largest in Russia, covers about 130,000 square meters, was planned for 63 megawatts, and can hold more than 3,800 server racks. It supports Yandex internal services and Yandex Cloud. The strike was the company’s second data-center hit in 48 hours, after damage at its Sasovo facility in Ryazan.

Hacker News · securityOct 9, 14:20 UTC · 7d agoOther HN 23↑ · 6 comments1· 1 read

Drones hit Yandex site in first major attack on Russian data hub

Drones struck a Yandex data centre in the first major attack on a Russian data hub.

Reuters reports that drones hit a Yandex site in what is described as the first major attack on a Russian data hub. The Hacker News post only carries the headline, with 20 points and one comment. No cyber intrusion, stolen-data figures, or technical indicators are included in the available text.

Hacker News · securityOct 8, 15:29 UTC · 8d agoOther HN 20↑ · 1 comments1

Major Yandex data center in Russia hit by Ukrainian drone strike

A reported Ukrainian drone strike disrupted a major Yandex data center in Sasovo, Ryazan, degrading Yandex Cloud services and connectivity.

Russian state media said the Sasovo facility was shut down after the strike, while Yandex acknowledged a power outage, migrated workloads, and warned that creating new cloud resources may be limited. NetBlocks measured Yandex connectivity falling to roughly 70 percent of normal, with Yandex Cloud, Yandex Disk, Yandex Documents and several Russian websites affected. The incident follows Russian strikes that damaged at least six Ukrainian data centers, including facilities run by MiroHost, Parkovy, Data Group, Utels and Pautina.

The RecordOct 8, 12:00 UTC · 8d agoOther1· 1 read

Yandex Introduces Sona: A Single Generative Recommender That Replaces Entire Recommendation Cascade

Yandex's Sona transformer replaced Music's recommendation cascade and lifted likes 11.42% in testing.

Yandex introduced Sona, a single generative recommender that uses one transformer for both candidate generation and ranking instead of a multi-stage cascade. In a Yandex Music A/B test it operated without hand-engineered features and increased likes by 11.42%. The announcement does not report parameter counts or comparisons beyond that test.

MarkTechPostOct 5, 08:10 UTC · 11d agoAI research2· 1 read

Yandex

Timeline15 articles

Appears with