ESET links Cereal toolset to Turla in Romanian breach
CerealBox copied NATO and EU Word and PDF emails from servers ESET says were compromised in December 2025.
11 stories, newest first · one card per story
CerealBox copied NATO and EU Word and PDF emails from servers ESET says were compromised in December 2025.

More than 250 people from over 40 countries in Tallinn practice timing cyber effects to kinetic action within minutes.

The unnamed intrusion began July 24, 2026, via a Word macro and lasted at least two months.

A naval shipbuilder intrusion starting July 24, 2026 lasted at least two months and included stolen credentials.

Symantec says the operators used Hookedge and an undocumented loader, ld.exe, whose decrypted payload was not recovered.

Symantec says operators stole credentials two ways, opened an SSH tunnel and ran a new in-memory loader.
A July Word attachment led to Hookedge and an in-memory tool; activity ran from July 24 to September 24.

Osavul raised a $10 million Series A to scale AI that detects hostile intent across cyber, physical, and information domains.

NATO-backed startup Scaleout Systems uses federated learning and small edge AI models to let military drones autonomously identify, prioritize, and attack battlefield targets.
EU Commission President von der Leyen proposed an Emergency Security Protocol letting any member state convene joint responses to cyberattacks and sabotage.

MarketsandMarkets projects the cyber warfare market to nearly double from $14.99bn in 2026 to $28.75bn by 2031, driven by attacks on military systems.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views