APT29
In 11 briefs, most recently 5 November 2026. RSS for this tag
Learn more: Malpedia ↗ ThreatFox ↗ MalwareBazaar ↗
Coverage in DanSec Daily
- Zyxel GS1900 zero-day hit nearly 1,000 switches, OpenSSH 'sshole' flaw on musl systems, and Chainalysis confirms all users' tokens exposed.
- Binance $6.34B theft by North Korean actors, Beget cloud wipe, and a cPGuard supply chain backdoor.
- The PNLD police data leak, N-able N-central CVE-2026-18577 exploitation, and INC Ransomware's SonicWall SMA 1000 attacks, plus Midnight Blizzard and DOUBLECUP …
- Salesloft Drift OAuth breach hits Cloudflare, Palo Alto Networks and Zscaler; Jaguar Land Rover cyberattack halts production; WhatsApp zero-day exploited …
- The Zscaler and Salesloft data breaches, Midnight Blizzard's Microsoft 365 operation disrupted by Amazon, and a WhatsApp zero-click patch.
- The TransUnion breach affecting 4.4M US consumers, the Nevada ransomware attack, and a FreePBX zero-day under active exploitation.
- The TransUnion breach affecting 4.4 million people, a Nevada ransomware attack, and an actively exploited FreePBX zero-day.
- Salt Typhoon breaches Viasat, Krispy Kreme data theft of 160,000+ people, and Paragon Graphite spyware used against European journalists.
- Azerbaijan blames APT29 for media cyberattack, Golden Chickens unveil TerraStealerV2 and TerraLogger malware, and UK retailers hit as NCSC issues guidance.
- APT29 phishes European diplomats with wine-themed lures and GRAPELOADER; malicious npm packages plant SSH backdoors; Entra ID leaked-credential alerts lock out …
- Phishing tops UK attacks, North Korea expands IT worker fraud, and MITRE's CVE funding expires, threatening the vulnerability database.