The national railway operator of Ukraine, Ukrzaliznytsia, has experienced severe interruptions nationwide as a result of a sophisticated hack that has damaged its online systems, forcing customers to buy tickets in person. The railway company confirmed on March 24, 2025,…
Opposition activists in Belarus as well as Ukrainian military and government organizations are the target of a new campaign that employs malware-laced Microsoft Excel documents as lures to deliver a new variant of PicassoLoader.
The threat cluster has been assessed to be an extension of a long-running campaign mounted by a Belarus-aligned threat actor dubbed Ghostwriter (aka Moonscape,
[[{“value”:”A subgroup of the Russia-linked Seashell Blizzard is tasked with broad initial access operations to sustain long-term persistence. The post Russian Seashell Blizzard Hackers Gain, Maintain Access to High-Value Targets: Microsoft appeared first on SecurityWeek.”}]] Read More
Two critical username enumeration vulnerabilities were identified in the AWS Web Console, exposing all console-enabled Identity and Access Management (IAM) users to potential risk. These vulnerabilities, discovered by Rhino Security Labs, highlight security issues on AWS’s side of the Shared…
