APT28 group is rushing to exploit recent CVE-2017-11292 Flash 0Security Affairs·Oct 22, 11:29 UTC · Oct 22, 2017VulnerabilityCVE-2017-11292CVE-2015-7645CVE-2016-1019+2 CVEs60
January 2026 CVE Landscape: 23 Critical Vulnerabilities Mark 5% Increase, APT28 Exploits Microsoft Office ZeroRecorded Future·Feb 24, 00:00 UTC · Feb 24, 2026Vulnerability in the wildCVE-2026-21509CVE-2026-23760CVE-2026-1281+1 CVEs160
APT28 Uses Microsoft Office CVE-2026-21509 in EspionageThe Hacker News·Feb 4, 16:49 UTC · Feb 4, 2026VulnerabilityCVE-2026-21509147
Mandiant identifies 3 hacktivist groups working in support of RussiaSecurity Affairs·Sep 27, 07:57 UTC · Sep 27, 2022Vulnerability30
APT28 Tied to CVE-2026-21513 MSHTML 0-Day Exploited Before Feb 2026 Patch TuesdayThe Hacker News·Mar 2, 10:36 UTC · Mar 2, 2026VulnerabilityCVE-2026-21513CVE-2026-21509160
Microsoft Warns of Kremlin-Backed APT28 Exploiting Critical Outlook VulnerabilityThe Hacker News·Dec 8, 08:55 UTC · Dec 8, 2023VulnerabilityCVE-2023-23397CVE-2023-3883160
Friday Squid Blogging: Squid PursesSchneier on Security·May 3, 21:05 UTC · May 3, 2024VulnerabilityCVE-2023-23397135
February 2026 CVE Landscape: 13 Critical Vulnerabilities Mark 43% Drop from JanuaryRecorded Future·Mar 13, 00:00 UTC · Mar 13, 2026Vulnerability in the wildCVE-2025-15556CVE-2026-21513CVE-2026-21533+4 CVEs160
One year later: The VPNFilter catastrophe that wasn'tCisco Talos·May 23, 20:24 UTC · May 23, 2019Vulnerability30
FBI Issues Alert on Russian Threats Targeting Ubiquiti RoutersInfosecurity Magazine·Feb 28, 17:30 UTC · Feb 28, 2024VulnerabilityCVE-2023-2339735
Russian hackers use old Outlook vulnerability to target Polish orgs (CVE-2023-23397)Help Net Security·Dec 5, 00:00 UTC · Dec 5, 2023VulnerabilityCVE-2023-23397CVE-2023-38831CVE-2021-4044460
CISA, Cisco highlight Russian military targeting of router vulnerabilitiesThe Record·Apr 18, 18:56 UTC · Apr 18, 2023VulnerabilityCVE-2017-674235
⚡ Weekly Recap: Fiber Optic Spying, Windows Rootkit, AI Vulnerability Hunting and MoreThe Hacker News·Apr 15, 00:00 UTC · Apr 15, 2026Vulnerability in the wildCVE-2026-34621160
Russian hackers hijack internet traffic using vulnerable routersHelp Net Security·Apr 7, 00:00 UTC · Apr 7, 2026VulnerabilityCVE-2023-5022435
Microsoft Patch Tuesday updates for May 2017 fix Zero Days exploited by Russian APT groupsSecurity Affairs·Oct 22, 11:02 UTC · Oct 22, 2017VulnerabilityCVE-2017-0261CVE-2017-0262CVE-2017-0263+2 CVEs60
Thousands of consumer routers hacked by Russia's militaryArs Technica · Security·Apr 8, 11:00 UTC · Apr 8, 2026Vulnerability30
Russian APT targets Ukraine via Zimbra XSS flaw CVE-2025Security Affairs·Mar 19, 14:48 UTC · Mar 19, 2026Vulnerability in the wildCVE-2025-6637660
Russian hackers targeting European maritime and transport orgs using Microsoft Office exploitThe Record·Feb 5, 16:36 UTC · Feb 5, 2026VulnerabilityCVE-2026-2150960
Russian Hackers Exploit Email and VPN Vulnerabilities to Spy on Ukraine Aid LogisticsThe Hacker News·May 22, 07:30 UTC · May 22, 2025VulnerabilityCVE-2023-23397CVE-2020-12641CVE-2020-35730+2 CVEs35
NCSC Warns of Destructive Russian Attacks on Critical InfrastructureInfosecurity Magazine·Apr 19, 09:30 UTC · Apr 19, 2023VulnerabilityCVE-2017-674260
Russian Hackers Exploiting Microsoft Follina Vulnerability Against UkraineThe Hacker News·Sep 7, 14:46 UTC · Sep 7, 2022VulnerabilityCVE-2022-3019060
UK, US agencies warn of bruteSecurity Affairs·Jul 1, 21:56 UTC · Jul 1, 2021VulnerabilityCVE-2020-0688CVE-2020-1714447
A Slice of 2017 Sofacy ActivityKaspersky Securelist·Feb 20, 14:00 UTC · Feb 20, 2018VulnerabilityCVE-2017-0262CVE-2017-026347
Russian 'Fancy Bear' Hackers Using (Unpatched) Microsoft Office DDE ExploitThe Hacker News·Nov 9, 09:14 UTC · Nov 9, 2017Vulnerability142
UK exposes Russian cyber unit hacking home routers to hijack internet trafficThe Record·Apr 7, 14:02 UTC · Apr 7, 2026Vulnerability30
Russian hackers exploit Zimbra flaw to breach Ukrainian maritime agencyThe Record·Mar 19, 12:41 UTC · Mar 19, 2026VulnerabilityCVE-2025-6637660
⚡ Weekly Recap: Drift Breach Chaos, Zero-Days Active, Patch Warnings, Smarter Threats & MoreThe Hacker News·Dec 6, 11:14 UTC · Dec 6, 2025Vulnerability in the wildCVE-2025-53690CVE-2025-38352CVE-2025-48543+25 CVEs160
Russia-Aligned TAG-110 Targets Asia and Europe with HATVIBE and CHERRYSPYRecorded Future·Aug 22, 00:00 UTC · Aug 22, 2025VulnerabilityCVE-2024-2369260
Russia-linked APT TAG-110 uses targets Europe and AsiaSecurity Affairs·Nov 25, 09:52 UTC · Nov 25, 2024Vulnerability42
Germany recalls ambassador to Russia over cyberattacksThe Record·May 6, 15:46 UTC · May 6, 2024Vulnerability55
NATO and EU condemn ‘intensifying’ Russian sabotage and hybrid operationsThe Record·May 3, 12:03 UTC · May 3, 2024Vulnerability55
Pawn Storm’s Stealthy NetInfosecurity Magazine·Jan 31, 16:30 UTC · Jan 31, 2024VulnerabilityCVE-2023-23397CVE-2023-3883160
In the opaque world of government hacking, private firms grapple with allegiancesCyberScoop·Jul 23, 16:57 UTC · Jul 23, 2018Vulnerability55
BitDefender found the first MAC OS version of the XSecurity Affairs·Aug 20, 17:10 UTC · Aug 20, 2017Vulnerability42
Gamaredon Exploits WinRAR to Deliver GammaWorm and GammaSteel Against UkraineThe Hacker News·Jun 2, 18:21 UTC · Jun 2, 2026VulnerabilityCVE-2025-8088CVE-2026-2150960
Week in review: High-severity LPE vulnerability in the Linux kernel, cPanel 0-day exploited for monthsHelp Net Security·May 3, 00:00 UTC · May 3, 2026Vulnerability in the wildCVE-2026-32202CVE-2026-21510CVE-2026-21513+3 CVEs260
CISA, Microsoft warn of active exploitation of Windows Shell vulnerability (CVE-2026-32202)Help Net Security·Apr 29, 00:00 UTC · Apr 29, 2026Vulnerability in the wildCVE-2026-32202CVE-2026-21510CVE-2026-21513160
Russia Hacked Routers to Steal Microsoft Office TokensKrebs on Security·Apr 7, 17:52 UTC · Apr 7, 2026Vulnerability155
ThreatsDay Bulletin: DDR5 Bot Scalping, Samsung TV Tracking, Reddit Privacy Fine & MoreThe Hacker News·Mar 5, 13:50 UTC · Mar 5, 2026Vulnerability42