Search: “NotPetya”

4 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Ransomware 267 Malware 110 Vulnerability 47 Threat actor 39 Policy & legal 24 Exploit / PoC 23 Data breach 14 Industry 9 Phishing & fraud 4 Advisory 4 Research 1 Tools 1 AI policy 1

SeverityAll critical 299 high 194 medium 35 low 12 info 4

Leaked Russian Cyber-Operations Training Materials

Leaked Bauman university records reveal a formalized Russian pipeline training GRU cyber personnel, linking a graduate to Sandworm's Military Unit 74455.

Leaked training materials from Bauman university describe a force-generation mechanism feeding graduates into General Staff components, including the GRU and directorates responsible for protected communications, cryptography and information security. A 2024 graduate of Department No. 4, Aleksei Kondrashov, was linked to Military Unit 74455, the GRU unit known as Sandworm, which conducted destructive attacks including the 2017 NotPetya attack. Researchers say the leak shows Russian cyber capability is institutionally sustained through recruitment pipelines beyond the familiar APT28 and Sandworm brand names.

Schneier on SecuritySep 1, 16:29 UTC · 15d agoThreat actor

Securing Your Business: The Vital Role of Cyber Insurance | Huntress

Huntress explains cyber insurance coverage types, insurer security requirements, and the shift toward documented evidence of controls.

Huntress outlines first-party and third-party cyber insurance coverage, including business interruption, data recovery, extortion, privacy liability, and regulatory fines. Insurers now commonly require EDR, MFA, security awareness training, patching, tested backups, least-privilege access, and incident response plans. With ransomware accounting for 91% of insurance losses in H1 2025 and average US breach costs at $10.22 million, underwriters increasingly demand evidence packs rather than self-attestation.

HuntressSep 1, 16:00 UTC · 15d agoIndustry

Srsly Risky Biz: Trump's Private Hacker Memo Is the Right Idea

A Trump presidential memo directs DHS to authorize vetted private-sector hackers to conduct cyber operations against foreign cybercriminal groups (CE-TCOs).

A presidential memorandum directs the Department of Homeland Security to establish a program authorizing private companies to conduct cyber surveillance and cyber effects operations against Cyber-Enabled Transnational Crime Organisations (CE-TCOs). Participating companies must pass vetting, obtain government approval before operations, and post a USD $1 million bond. The accompanying fact sheet cites more than USD $20.8 billion in US losses to cyber-enabled crime in 2025. Critics worry about accidental escalation if operations touch foreign government systems.

Risky Business NewsAug 20, 05:29 UTC · 27d agoPolicy & legal1

APERION releases SmartFlow SDK for secure, on-prem AI governance without cloud reliance

Help Net SecurityApr 3, 00:00 UTC · Apr 3, 2026AI policy