Recorded FutureAug 22, 2025criticalRussia-Aligned TAG-70 Targets European Government and Military Mail Servers in New Espionage Campaign4 min readcve-2023-23397threat-actor3
Recorded FutureAug 21, 2025criticalBlueDelta Exploits Ukrainian Government Roundcube Mail Servers to Support Espionage Activities3 min readcve-2020-35730cve-2023-233974
The Hacker NewsMay 22, 2025Russian Hackers Exploit Email and VPN Vulnerabilities to Spy on Ukraine Aid Logistics4 min readcve-2023-23397cve-2020-126413
Security AffairsMay 22, 2025highRussia-linked APT28 targets western logistics entities and technology firms3 min readcve-2023-23397cve-2023-388312
CyberScoopMay 21, 2025criticalMulti-national warning issued over Russia’s targeting of logistics, tech firmsExploited5 min readcve-2023-23397cve-2023-388313
Security AffairsApr 30, 2025criticalFrance links Russian APT28 to attacks on dozen French entities3 min readcve-2023-23397threat-actor3
Security AffairsFeb 13, 2025highRussia-linked APT Seashell Blizzard is behind the long-running global access operation BadPilot campaign4 min readcve-2021-34473cve-2022-413522
Help Net SecurityFeb 13, 2025criticalSandworm APT's initial access subgroup hits organizations accross the globe4 min readcve-2021-34473cve-2022-413522
Help Net SecurityDec 11, 2024Microsoft enforces defenses preventing NTLM relay attacks2 min readcve-2024-21413cve-2023-233974
Help Net SecurityDec 9, 2024criticalPatching problems: The "return" of a Windows Themes spoofing vulnerabilityExploited4 min readcve-2024-21320cve-2024-380303
Kaspersky SecurelistDec 6, 2024criticalAnalyzing the vulnerability landscape in Q3 202411 min readcve-2023-38831cve-2023-233972
CVE-2024-38080Krebs on SecurityJul 9, 2024criticalMicrosoft Patch Tuesday, July 2024 EditionExploited4 min readcve-2024-38080cve-2024-381124
The Hacker NewsMay 31, 2024criticalRussian APT28 Hackers Targeting 13 Nations in Ongoing Cyber Espionage Campaign2 min readcve-2023-38831cve-2023-233972
Security AffairsMay 12, 2024criticalNATO and the EU formally condemned APT28 cyber espionage6 min readcve-2023-23397cve-2022-301901
Security AffairsMay 10, 2024criticalRussia-linked APT28 targets government Polish institutions4 min readcve-2023-23397threat-actor2
The Hacker NewsMay 9, 2024criticalMicrosoft Outlook Flaw Exploited by Russia's APT28 to Hack Czech, German Entities6 min readcve-2023-23397cve-2022-380283
CVE-2023-23397Schneier on SecurityMay 3, 2024Friday Squid Blogging: Squid Purses15 min readcve-2023-23397vulnerability3
The Hacker NewsApr 24, 2024highRussia's APT28 Exploited Windows Print Spooler Flaw to Deploy 'GooseEgg' Malware3 min readcve-2022-38028cve-2023-233974
Help Net SecurityApr 23, 2024criticalRussian hackers' custom tool exploits old Windows Print Spooler flaw (CVE-2022-38028)3 min readcve-2022-38028cve-2023-233973
Ars Technica · SecurityApr 22, 2024criticalWindows vulnerability reported by the NSA exploited to install Russian malwareExploited4 min readcve-2022-38028cve-2023-233972
The Hacker NewsMar 19, 2024criticalAPT28 Hacker Group Targeting Europe, Americas, Asia in Widespread Phishing Scheme3 min readcve-2023-23397threat-actor2
Help Net SecurityMar 14, 2024criticalMicrosoft patches two zero-days exploited by attackers (CVE-2024-21412, CVE-2024-21351)4 min readcve-2024-21412cve-2024-213512
Infosecurity MagazineFeb 28, 2024FBI Issues Alert on Russian Threats Targeting Ubiquiti Routers3 min readcve-2023-23397vulnerability2