Laundry Bear exploited a zero-day vulnerability for five months before it was patched in November 2025, and the group is still actively exploiting vulnerable environments.
In this pool photograph distributed by the Russian state agency Sputnik, Russian President Vladimir Putin and North Korean leader Kim Jong Un toast during a reception at the Mongnangwan Reception House in Pyongyang on June 19, 2024. Putin enjoyed a red carpet welcome, a military ceremony and an embrace from North Korea’s Kim Jong Un during a state visit to Pyongyang where they both pledged to forge closer ties. (Photo by Vladimir Smirnov / POOL / AFP via Getty Images)
DTEX researchers found a series of transactions in a payment wallet showing North Korean IT worker salaries flowing into sanctioned entities that support the regime’s military programs.
Officials accused three Russian nationals, Media Land and ML.Cloud of supporting cyberattacks spanning 21 U.S. states and other countries, resulting in losses surpassing $62 million.
13 July 2026, Belgium, Brüssel: Kaja Kallas, the EU’s High Representative for Foreign Affairs, is giving an interview in the hallway of the European Council ahead of the meeting of the foreign ministers of the EU member states. They are set to discuss the situation in the Near and Middle East as well as in Ukraine this Monday in Brussels. Photo: Michael Brandt/dpa (Photo by Michael Brandt/picture alliance via Getty Images)
The EU, its members and the U.K. took action against Russian government officials and others while attributing the winter cyberattacks against Poland’s energy grid to the FSB.
In this photo illustration, the Cellebrite logo is displayed on the screen of a tablet. (Photo Illustration by Sheldon Cooper/SOPA Images/LightRocket via Getty Images)
Microsoft, with law enforcement and industry partners, disrupted more than 200 command and control servers for Amadey and StealC, often used in conjunction.