Ukrainian drone strikes hit Yandex data centers across Moscow region
Yandex provides Russia's leading search engine, a wide range of digital services and major AI development, according to Ars Technica.
nation-state
-
-
How the 2016 GRU Breach Shaped Election Security
This look back traces the Russian military intrusion into the Democratic National Committee, the ensuing email leaks, and the legal and defensive changes that followed.
-
UK National Security Centre and international partners release advisory on Integrity Technology Group
On 2026-05-12, Defence Online reported that the NCSC and partners re‑issued an advisory warning that China‑nexus actors attack UK organisations via large‑scale covert networks of compromised consumer routers and edge devices.
-
Japanese authorities detain 28‑year‑old Russian over Qilin ransomware suspicions in Osaka
German authorities received him on October 2, 2026, following a decision by the Tokyo High Court under Japan's extradition law (SecurityWeek).
-
Warlock Exploits SharePoint Flaws to Disable Defenses and Deploy Ransomware in Critical Infrastructure Attacks
The China‑linked group, also tracked as Gold Salem, Longlegs and Storm‑2603, uses unpatched SharePoint servers to gain access, exfiltrate machine keys, and distribute ransomware via SYSVOL in recent hits on water, telecom, government and education targets.
-
FBI internal notification says personal and medical data of thousands exposed via FBIJobs.gov portal breach
The intrusion, claimed by ShinyHunters, stole names, addresses, Social Security numbers and detailed health records, leaving unclear whether Congress has been formally notified.
-
UAC-0099’s MATCHBOIL Downloader Shifts to Dynamic Payloads, Targeting Ukraine’s Energy and Manufacturing Sectors
The Russia-aligned group’s evolving malware uses real-time C2 communication and obfuscation to evade detection in critical infrastructure.
-
Google Discloses Counterfeit TLS Certificates After Attackers Hijacked Three Country‑Code Domain Registries
On Oct. 6, 2026, Google said threat actors compromised the .gh, .sl and .as registries, altered DNS to pass domain‑validation checks and obtained unauthorized TLS certificates for Google domains and other major services.
-
FCC Adds Foreign-Produced Routers to Covered List as TP-Link Faces Five State Lawsuits Over Security Claims
The agency’s March 2026 national‑security determination placed foreign‑made routers on its Covered List, TP‑Link’s newest Wi‑Fi 8 models remain barred pending conditional approval, and states allege the firm misled buyers about security and China ties.
-
Former NSA Chief Nakasone Says NSA Overhaul Probably Needed as AI Shrinks Defender Response Time
Speaking at VulnCheck's ThreatCon1, Nakasone warned AI has reduced adversary dwell time to minutes, highlighted workforce pressures and a reported NSA reorganization into five mission-focused groups.
-
Pentagon Records Center Says Intruders Had Access to Personnel Data From October 2025 to Mid-July 2026
The Defense Manpower Data Center is notifying more than 3 million current, former and deceased people, a Pentagon official told Federal News Network.
-
US Offers $10 Million for Information on Zhang Yu, Charged With Xu Zewei in Hafnium Indictment
The State Department's Rewards for Justice program is seeking Zhang, who remains at large, months after Italy extradited his co-defendant Xu Zewei to the US.