Russia

OpenSSH Flaw Allows Authentication Bypass Using Oversized Passwords
Check Point Research documented active exploitation of high-severity vulnerabilities and new supply-chain attacks in its latest threat report.

US State Department: Rubio Says Iran Sanctions Eliminate Need for Combat Operations
Secretary of State Marco Rubio stated that economic pressure on Iran removes the current need for major U.S. military combat operations.

Unit 42 Warns Retailers of Peak Season Cyber Threats
Unit 42 highlights major enterprise and guest-focused cyber threats facing retailers heading into the 2026 peak shopping season.

Oleg Korniev Pleads Guilty to Cybercrime Money Laundering
Oleg Korniev admitted to operating an international money laundering ring that moved millions for hackers.

UK Sanctions Target Cryptomus, Heleket, and TokenSpot
The United Kingdom targeted crypto payment processors supporting Russia's wartime economy.

UK says JEF drills tested cyber coordination and cable security
The Ministry of Defence said Exercise Lion Protector 26 rehearsed protection of critical national infrastructure, including data cables, and tested coordination across sea, land, air, cyber and space.

Microsoft says Star Blizzard uses RedFlick to deploy CosmicPulse
Microsoft says the Russian state actor shifted to mass phishing and a one-click malware delivery technique, affecting more than 100 organizations, mostly in the US and UK.