Russian espionage group using novel Zimbra exploit to steal sensitive data from Western countries

Laundry Bear exploited a zero-day vulnerability for five months before it was patched in July 2025, and the group is still actively exploiting vulnerable environments.

The post Russian espionage group using novel Zimbra exploit to steal sensitive data from Western countries appeared first on CyberScoop.

Continue reading Russian espionage group using novel Zimbra exploit to steal sensitive data from Western countries

Malware is targeting AI tools in software development environments

The worm blends in with thousands of other commands occurring daily in any given environment, yet its intent and origins remain unknown.

The post Malware is targeting AI tools in software development environments appeared first on CyberScoop.

Continue reading Malware is targeting AI tools in software development environments

North Korea’s IT worker scheme funds Russia’s war effort

DTEX researchers found a series of transactions in a payment wallet showing North Korean IT worker salaries flowing into sanctioned entities that support the regime’s military programs.

The post North Korea’s IT worker scheme funds Russia’s war effort appeared first on CyberScoop.

Continue reading North Korea’s IT worker scheme funds Russia’s war effort

Leading members of Scattered Spider sentenced in UK to 66 months in jail

Thalha Jubair and Owen Flowers led and directed many attacks attributed to the hacker subset of The Com. U.S. authorities previously accused Jubair of participating in at least 120 attacks.

The post Leading members of Scattered Spider sentenced in UK to 66 months in jail appeared first on CyberScoop.

Continue reading Leading members of Scattered Spider sentenced in UK to 66 months in jail

Russian trio indicted for allegedly running bulletproof hosting providers that spurred cybercrime

Officials accused three Russian nationals, Media Land and ML.Cloud of supporting cyberattacks spanning 21 U.S. states and other countries, resulting in losses surpassing $62 million.

The post Russian trio indicted for allegedly running bulletproof hosting providers that spurred cybercrime appeared first on CyberScoop.

Continue reading Russian trio indicted for allegedly running bulletproof hosting providers that spurred cybercrime

Russian trio indicted for allegedly running bulletproof hosting providers that spurred cybercrime

Officials accused three Russian nationals, Media Land and ML.Cloud of supporting cyberattacks spanning 21 U.S. states and other countries, resulting in losses surpassing $62 million.

The post Russian trio indicted for allegedly running bulletproof hosting providers that spurred cybercrime appeared first on CyberScoop.

Continue reading Russian trio indicted for allegedly running bulletproof hosting providers that spurred cybercrime

SonicWall customers under threat as attackers exploit 2 zero-days

Researchers said the vulnerabilities, which attackers are chaining together, were first exploited three weeks before the vendor disclosed and patched the defects.

The post SonicWall customers under threat as attackers exploit 2 zero-days appeared first on CyberScoop.

Continue reading SonicWall customers under threat as attackers exploit 2 zero-days

Microsoft discloses ‘the mother of all’ vulnerability loads, tripling June’s previous record

The company forewarned customers and defenders that a flood of defects would be uncovered by AI. It delivered with a striking exponential increase.

The post Microsoft discloses ‘the mother of all’ vulnerability loads, tripling June’s previous record appeared first on CyberScoop.

Continue reading Microsoft discloses ‘the mother of all’ vulnerability loads, tripling June’s previous record

Officials once again warn defenders that Russian hackers are targeting network devices

State-sponsored attackers are targeting critical infrastructure networks in defense, communications, energy, finance, government and health care.

The post Officials once again warn defenders that Russian hackers are targeting network devices appeared first on CyberScoop.

Continue reading Officials once again warn defenders that Russian hackers are targeting network devices

Armenian national pleads guilty to Ryuk ransomware attacks

Karen Vardanyan faces up to 15 years in federal prison and agreed to pay nearly $1.2 million in restitution.

The post Armenian national pleads guilty to Ryuk ransomware attacks appeared first on CyberScoop.

Continue reading Armenian national pleads guilty to Ryuk ransomware attacks