Ukraine – Page 2 – Experimental News Clipping Site

Microsoft Security Blog: New Russia-affiliated actor Void Blizzard targets critical sectors for espionage

May 27, 2025

—

by

Source URL: https://www.microsoft.com/en-us/security/blog/2025/05/27/new-russia-affiliated-actor-void-blizzard-targets-critical-sectors-for-espionage/ Source: Microsoft Security Blog Title: New Russia-affiliated actor Void Blizzard targets critical sectors for espionage Feedly Summary: Microsoft Threat Intelligence has discovered a cluster of worldwide cloud abuse activity conducted by a threat actor we track as Void Blizzard, who we assess with high confidence is Russia-affiliated and has been active since…

The Register: Russia’s Fancy Bear swipes a paw at logistics, transport orgs’ email servers

May 21, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://www.theregister.com/2025/05/21/russias_fancy_bear_alert/ Source: The Register Title: Russia’s Fancy Bear swipes a paw at logistics, transport orgs’ email servers Feedly Summary: 13 govt agencies sound the alarm Russian cyberspies have targeted “dozens" of Western and NATO-country logistics providers, tech companies, and government orgs providing transport and foreign assistance to Ukraine, according to a joint government…

Cloud Blog: COLDRIVER Using New Malware To Steal Documents From Western Targets and NGOs

May 7, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://cloud.google.com/blog/topics/threat-intelligence/coldriver-steal-documents-western-targets-ngos/ Source: Cloud Blog Title: COLDRIVER Using New Malware To Steal Documents From Western Targets and NGOs Feedly Summary: Written by: Wesley Shields Google Threat Intelligence Group (GTIG) has identified a new piece of malware called LOSTKEYS, attributed to the Russian government-backed threat group COLDRIVER (also known as UNC4057, Star Blizzard, and Callisto).…

Cloud Blog: Hello 0-Days, My Old Friend: A 2024 Zero-Day Exploitation Analysis

Apr 29, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://cloud.google.com/blog/topics/threat-intelligence/2024-zero-day-trends/ Source: Cloud Blog Title: Hello 0-Days, My Old Friend: A 2024 Zero-Day Exploitation Analysis Feedly Summary: Written by: Casey Charrier, James Sadowski, Clement Lecigne, Vlad Stolyarov Executive Summary Google Threat Intelligence Group (GTIG) tracked 75 zero-day vulnerabilities exploited in the wild in 2024, a decrease from the number we identified in 2023…

Cloud Blog: Windows Remote Desktop Protocol: Remote to Rogue

Apr 7, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://cloud.google.com/blog/topics/threat-intelligence/windows-rogue-remote-desktop-protocol/ Source: Cloud Blog Title: Windows Remote Desktop Protocol: Remote to Rogue Feedly Summary: Written by: Rohit Nambiar Executive Summary In October 2024, Google Threat Intelligence Group (GTIG) observed a novel phishing campaign targeting European government and military organizations that was attributed to a suspected Russia-nexus espionage actor we track as UNC5837. The…

Cisco Talos Blog: One mighty fine-looking report

Apr 3, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://blog.talosintelligence.com/one-mighty-fine-looking-report/ Source: Cisco Talos Blog Title: One mighty fine-looking report Feedly Summary: Hazel highlights the key findings within Cisco Talos’ 2024 Year in Review (now available for download) and details our active tracking of an ongoing campaign targeting users in Ukraine with malicious LNK files. AI Summary and Description: Yes Summary: The Threat…

Cloud Blog: DPRK IT Workers Expanding in Scope and Scale

Apr 1, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://cloud.google.com/blog/topics/threat-intelligence/dprk-it-workers-expanding-scope-scale/ Source: Cloud Blog Title: DPRK IT Workers Expanding in Scope and Scale Feedly Summary: Written by: Jamie Collier Since our September 2024 report outlining the Democratic People’s Republic of Korea (DPRK) IT worker threat, the scope and scale of their operations has continued to expand. These individuals pose as legitimate remote workers…

Cisco Talos Blog: Gamaredon campaign abuses LNK files to distribute Remcos backdoor

Mar 28, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://blog.talosintelligence.com/gamaredon-campaign-distribute-remcos/ Source: Cisco Talos Blog Title: Gamaredon campaign abuses LNK files to distribute Remcos backdoor Feedly Summary: Cisco Talos is actively tracking an ongoing campaign, targeting users in Ukraine with malicious LNK files which run a PowerShell downloader since at least November 2024. AI Summary and Description: Yes **Summary:** The text details a…

Wired: Low-Cost Drone Add-Ons From China Let Anyone With a Credit Card Turn Toys Into Weapons of War

Mar 20, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://www.wired.com/story/drone-accessories-weapons-of-war/ Source: Wired Title: Low-Cost Drone Add-Ons From China Let Anyone With a Credit Card Turn Toys Into Weapons of War Feedly Summary: Chinese ecommerce giants like Temu and AliExpress sell drone accessories like those used by soldiers in the Russia-Ukraine conflict. AI Summary and Description: Yes Summary: The text discusses the alarming…

The Register: Eutelsat in talks with Euro leaders as they mull Starlink replacement in Ukraine

Mar 7, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://www.theregister.com/2025/03/07/eutelsat_starlink_ukraine/ Source: The Register Title: Eutelsat in talks with Euro leaders as they mull Starlink replacement in Ukraine Feedly Summary: Increasingly shaky relationship with the States has Europe considering options Talks are underway between European leaders and Eutelsat about a possible replacement for Starlink in Ukraine.… AI Summary and Description: Yes Summary: The…

Tag: Ukraine