Collecting Cyber-News from over 60 sources

Tag: office

FBI Takes Down Russian Campaign That Compromised Thousands of Routers

Apr 8, 2026 9:51 AM

Tags: attack, cyber, cyberespionage, infrastructure, intelligence, network, office, router, russia, threat

In a major counter-cyberespionage action dubbed >>Operation Masquerade,<< the U.S. Justice Department and the FBI successfully neutralized a global network of compromised small office/home office (SOHO) routers. The infrastructure was controlled by Russia's Main Intelligence Directorate (GRU) to execute sophisticated Domain Name System (DNS) hijacking attacks against high-value intelligence targets. The Threat Actor and Attack…
Russian Threat Actors Abuse Home Routers in Expanding DNS Hijacking Wave

Apr 8, 2026 9:51 AM

Tags: blizzard, cyber, data-breach, dns, group, hacker, intelligence, Internet, microsoft, military, office, router, russia, spy, threat

Russian military-linked hackers are actively compromising poorly secured home and small-office routers to hijack internet traffic and spy on organizations worldwide. Microsoft Threat Intelligence recently exposed this massive global campaign by a group known as Forest Blizzard, which has already impacted over 200 organisations and 5,000 consumer devices. Forest Blizzard is a sophisticated state-sponsored threat…
Russia Hacked Routers to Steal Microsoft Office Tokens

Apr 7, 2026 9:54 PM

Tags: authentication, flaw, hacker, intelligence, Internet, malicious, microsoft, military, network, office, router, russia, software

Hackers linked to Russia’s military intelligence units are using known flaws in older Internet routers to mass harvest authentication tokens from Microsoft Office users, security experts warned today. The spying campaign allowed state-backed Russian hackers to quietly siphon authentication tokens from users on more than 18,000 networks without deploying any malicious software or code. First…
UK exposes Russian cyber unit hacking home routers to hijack internet traffic

Apr 7, 2026 4:53 PM

Tags: cyber, data-breach, hacking, Internet, network, office, router, russia

Officials said the activity centers on compromising small office and home office routers and similar network devices exposed to the internet, often because of weak security settings or outdated software. First seen on therecord.media Jump to article: therecord.media/uk-exposes-russian-cyber-unit-hacking-home-routers
What we learned about TEE security from auditing WhatsApp’s Private Inference

Apr 7, 2026 2:50 PM

Tags: access, ai, attack, backdoor, breach, computing, control, data, encryption, exploit, firmware, flaw, Hardware, identity, malicious, nvidia, office, privacy, side-channel, software, threat, update, vulnerability

WhatsApp’s new “Private Inference” feature represents one of the most ambitious attempts to combine end-to-end encryption with AI-powered capabilities, such as message summarization. To make this possible, Meta built a system that processes encrypted user messages inside trusted execution environments (TEEs), secure hardware enclaves designed so that not even Meta can access the plaintext. Our…
BKA Identifies REvil Leaders Behind 130 German Ransomware Attacks

Apr 6, 2026 9:52 AM

Tags: attack, cybercrime, germany, group, identity, office, ransomware, service, threat, xss

Germany’s Federal Criminal Police Office (aka BKA or the Bundeskriminalamt) has unmasked the real identity of the main threat actors associated with the now-defunct REvil (aka Sodinokibi) ransomware-as-a-service (RaaS) operation.The threat actor, who went by the alias UNKN, functioned as a representative of the group, advertising the ransomware in June 2019 on the XSS cybercrime…
West Virginia Gives CISO Greater Authority to Lead Statewide Cybersecurity Program

Apr 5, 2026 5:50 AM

Tags: ciso, cybersecurity, law, office, technology

What happened West Virginia approved legislation that gives the state’s chief information security officer greater authority to lead and standardize cybersecurity efforts across state government. Gov. Patrick Morrisey signed the measure on Thursday. The law directs the state’s Cybersecurity Office, led by Leroy Amos within the Office of Technology, to develop statewide cybersecurity policies and…The…
Forking frenzy ensues after Euro-Office launch sparks OnlyOffice backlash

Apr 4, 2026 4:51 PM

Tags: office

Meanwhile, Collabora splits from LibreOffice Online amid claims TDF ejected ‘all Collabora staff and partners’ First seen on theregister.com Jump to article: www.theregister.com/2026/04/02/eurooffice_forks_onlyoffice/
When Your Own Eyes Turn Against You: How Compromised Security Cameras and IoT/OT Devices Become Tools for Your Attackers

Apr 3, 2026 1:51 AM

Tags: access, advisory, attack, botnet, cctv, china, cloud, control, corporate, credentials, cyber, cyberattack, cybersecurity, dark-web, data, data-breach, defense, detection, endpoint, espionage, exploit, finance, firmware, flaw, government, group, hacking, healthcare, infrastructure, intelligence, international, Internet, iot, iran, law, linux, malware, network, office, privacy, ransomware, resilience, risk, russia, service, supply-chain, technology, threat, tool, ukraine, unauthorized, update, vpn, vulnerability, warfare, windows, zero-day, zero-trust

TL;DR Security cameras, IoT, and OT devices that are meant to protect us, are easily compromised and turned against defenders, enabling nation-state reconnaissance (Iranian hacks on Hikvision/Dahua cameras during strikes, Russian webcam abuse in Ukraine), espionage via exposed live feeds, ransomware pivots (Akira group bypassing EDR), massive botnets (Mirai/Eleven11bot), and physical disruption. Structural weaknesses like…
High Court dismisses judicial review against eVisa system

Mar 31, 2026 8:30 PM

Tags: data, office

The High Court rules that the Home Office is acting lawfully in refusing to issue alterative proof of immigration status outside of its electronic visa system, but both the judge and the department accepts that those affected by data quality and integrity issues are facing ‘real difficulties’ in their day-to-day lives First seen on computerweekly.com…
6 key takeaways from RSA Conference 2026

Mar 31, 2026 11:29 AM

Tags: ai, api, attack, ceo, cio, ciso, compliance, conference, control, cyber, cybersecurity, data, framework, google, governance, government, identity, infrastructure, injection, intelligence, jobs, LLM, office, RedTeam, regulation, risk, saas, service, technology, threat, tool, training

Securing the AI stack: Yes, but the threat surface has grown: The first technical priority I offered for CISOs in my conference preview was securing the AI stack, RAG workflows, LLM data pipelines, vector databases, and model APIs, on the basis that prompt injection, training data poisoning, and model inversion attacks were no longer theoretical.The…
ICO Fines UK Nuisance Call Scammers £100,000

Mar 30, 2026 1:29 PM

Tags: office, scam

The UK Information Commissioner’s Office has handed a £100,000 fine to Birmingham-based TMAC First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/ico-fines-uk-nuisance-call/
Microsoft’s March Security Update of High-Risk Vulnerability Notice for Multiple Products

Mar 30, 2026 7:30 AM

Tags: cyber, microsoft, network, office, risk, sql, update, vulnerability, windows

Overview On March 11, NSFOCUS CERT detected that Microsoft released the March Security Update patch, which fixed 83 security issues involving widely used products such as Windows, Microsoft Office, Microsoft SQL Server, Azure, etc., including high-risk vulnerability types such as privilege escalation and remote code execution. Among the vulnerabilities fixed by Microsoft’s monthly update this…The…
Euro-Office: Wirtschaftsinitiative startet souveräne Office-Alternative

Mar 30, 2026 1:30 AM

Tags: office

First seen on datensicherheit.de Jump to article: www.datensicherheit.de/euro-office-wirtschaftsinitiative-start-souveraenitaet-alternative
UK sanctions Xinbi marketplace linked to Asian scam centers

Mar 26, 2026 5:46 PM

Tags: breach, crypto, data, Internet, marketplace, network, office, scam

The United Kingdom’s Foreign, Commonwealth and Development Office (FCDO) has sanctioned Xinbi, a Chinese-language cryptocurrency-based online marketplace that sells stolen data and satellite internet equipment to scam networks in Southeast Asia. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/uk-sanctions-xinbi-marketplace-linked-to-asian-scam-centers/
WatchGuard Internet Security Report 2HJ. 2025 – Deutschland Platz drei bei Office-Exploits weltweit

Mar 26, 2026 1:46 PM

Tags: exploit, germany, Internet, office

First seen on security-insider.de Jump to article: www.security-insider.de/watchguard-report-2025-deutschland-office-exploits-web-shells-a-cf10d914b701cfad4dfbf9975b19b0d9/
Microsoft breaks Microsoft account sign-ins in Windows 11 with latest update

Mar 21, 2026 5:11 AM

Tags: Internet, microsoft, office, update, windows

OneDrive, Office, Teams Free users greeted with phantom ‘no internet’ errors, restart may help if you’re lucky First seen on theregister.com Jump to article: www.theregister.com/2026/03/20/microsoft_account_not_working_have/
CISA Warns of Zimbra, SharePoint Flaw Exploits; Cisco Zero-Day Hit in Ransomware Attacks

Mar 19, 2026 8:10 AM

Tags: attack, cisa, cisco, cve, cybersecurity, exploit, flaw, government, infrastructure, microsoft, office, ransomware, vulnerability, zero-day

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has urged government agencies to apply patches for two security flaws impacting Synacor Zimbra Collaboration Suite (ZCS) and Microsoft Office SharePoint, stating they have been actively exploited in the wild.The vulnerabilities in question are as follows -CVE-2025-66376 (CVSS score: 7.2) – A stored cross-site scripting First seen…
OFAC Sanctions DPRK IT Worker Network Funding WMD Programs Through Fake Remote Jobs

Mar 18, 2026 7:10 PM

Tags: control, jobs, korea, network, north-korea, office, technology

The U.S. Department of the Treasury’s Office of Foreign Assets Control (OFAC) has sanctioned six individuals and two entities for their involvement in the Democratic People’s Republic of Korea (DPRK) information technology (IT) worker scheme with an aim to defraud U.S. businesses and generate illicit revenue for the regime to fund its weapons of mass…
RSAC 2026 Innovation Sandbox – Charm Security: AI Anti-Fraud Platform for New Types of Fraud

Mar 18, 2026 8:09 AM

Tags: ai, cyber, finance, fraud, network, office

Company Profile Charm Security (hereinafter referred to as Charm) is an innovative security company focused on preventing and solving fraud and deception using Agentic AI technology. Founded in January 2025, the company has set up offices in Tel Aviv, Israel and New York, USA. With a core focus on financial security, it has become an…The…
FAQ on CVE-2026-21514: OLE bypass N-Day in Microsoft Word

Mar 18, 2026 5:10 AM

Tags: access, ai, apt, attack, awareness, backdoor, cctv, cisa, cloud, control, cve, cyber, cyberattack, data, data-breach, detection, email, endpoint, exploit, flaw, fortinet, google, government, group, healthcare, identity, infrastructure, intelligence, Internet, iran, kev, malicious, malware, microsoft, mitigation, network, office, phishing, remote-code-execution, risk, technology, theft, threat, training, unauthorized, update, vulnerability, windows, zero-day

An N-day vulnerability in Microsoft Word exposes nearly 14 million assets. Attackers can exploit this flaw to bypass security prompts, enabling deployment of malware and establishing persistent access without triggering user warnings. Key takeaways: CVE-2026-21514 is a Microsoft Word n-day that bypasses OLE and Mark-of-the-Web protections, executing payloads silently without triggering user security prompts Tenable’s…
FAQ on CVE-2026-21514: OLE bypass N-Day in Microsoft Word

Mar 18, 2026 5:10 AM

Tags: access, ai, apt, attack, awareness, backdoor, cctv, cisa, cloud, control, cve, cyber, cyberattack, data, data-breach, detection, email, endpoint, exploit, flaw, fortinet, google, government, group, healthcare, identity, infrastructure, intelligence, Internet, iran, kev, malicious, malware, microsoft, mitigation, network, office, phishing, remote-code-execution, risk, technology, theft, threat, training, unauthorized, update, vulnerability, windows, zero-day

An N-day vulnerability in Microsoft Word exposes nearly 14 million assets. Attackers can exploit this flaw to bypass security prompts, enabling deployment of malware and establishing persistent access without triggering user warnings. Key takeaways: CVE-2026-21514 is a Microsoft Word n-day that bypasses OLE and Mark-of-the-Web protections, executing payloads silently without triggering user security prompts Tenable’s…
Operation Epic Fury: Why exposure data changes everything about Iran’s cyber-kinetic campaign

Mar 18, 2026 5:10 AM

Tags: access, ai, api, apt, attack, backdoor, breach, cctv, cisa, cloud, country, cve, cvss, cyber, cybersecurity, data, data-breach, ddos, detection, dns, espionage, exploit, firewall, flaw, fortinet, government, group, healthcare, identity, infrastructure, intelligence, Internet, iot, iran, kev, malware, microsoft, military, network, office, phishing, radius, remote-code-execution, risk, strategy, supply-chain, technology, threat, unauthorized, update, vpn, vulnerability, warfare, windows

Iran’s retaliatory campaign following Operation Epic Fury has collapsed the boundary between physical and digital warfare. Tenable’s exposure data analysis across seven target countries reveals that the largest exploitable attack surface isn’t the headline threat, it’s a Microsoft Word N-day affecting nearly 14 million assets. Key takeaways: Exposure data rebalances the threat picture. A Microsoft…
Operation Epic Fury: Why exposure data changes everything about Iran’s cyber-kinetic campaign

Mar 18, 2026 5:10 AM

Tags: access, ai, api, apt, attack, backdoor, breach, cctv, cisa, cloud, country, cve, cvss, cyber, cybersecurity, data, data-breach, ddos, detection, dns, espionage, exploit, firewall, flaw, fortinet, government, group, healthcare, identity, infrastructure, intelligence, Internet, iot, iran, kev, malware, microsoft, military, network, office, phishing, radius, remote-code-execution, risk, strategy, supply-chain, technology, threat, unauthorized, update, vpn, vulnerability, warfare, windows

Iran’s retaliatory campaign following Operation Epic Fury has collapsed the boundary between physical and digital warfare. Tenable’s exposure data analysis across seven target countries reveals that the largest exploitable attack surface isn’t the headline threat, it’s a Microsoft Word N-day affecting nearly 14 million assets. Key takeaways: Exposure data rebalances the threat picture. A Microsoft…
Energy Department set to release its first-ever cyber strategy

Mar 17, 2026 7:10 PM

Tags: cyber, cybersecurity, office, strategy

Alex Fitzsimmons, the acting director of the Office of Cybersecurity, Energy Security, and Emergency Response (CESER), said the plan is meant to supplement the recently-published national cyber strategy and will focus on how the agency will strengthen the “security resilience” of the energy sector. First seen on therecord.media Jump to article: therecord.media/energy-department-set-to-release-first-ever-cyber-strategy
Fake rooms, props and a script to lure victims: inside an abandoned Cambodia scam centre

Mar 14, 2026 5:10 AM

Tags: business, finance, fraud, group, military, office, phone, scam, service

Sprawling compound, including mock-up banks and police offices, uncovered by Thai military during border clashesIt is as if you have walked into a branch of one of Vietnam’s banks. A row of customer service desks, divided by plastic screens, with landline phones, promotional leaflets and staff business cards. A seated waiting area and a private…
UK regulators demand social media platforms make it harder for kids under 13 to access sites

Mar 12, 2026 6:10 PM

Tags: access, office

The Information Commissioner’s Office (ICO) and Ofcom stressed that they expect immediate action, with Ofcom saying that firms have until the end of April to report back on their plans. First seen on therecord.media Jump to article: therecord.media/uk-regulators-demand-social-media-platforms-restrict-kids-access
Palantir’s lethal AI weaponry deployed to find chairs for US government staff

Mar 11, 2026 4:48 PM

Tags: ai, government, office

As Department of Agriculture employees return to the office, it needs ‘real-time analytics to optimize employee seat assignments’ First seen on theregister.com Jump to article: www.theregister.com/2026/03/10/palantir_usda_seating_software/
Foreign hacker reportedly breached FBI servers holding Epstein files in 2023

Mar 11, 2026 2:48 PM

Tags: cybercrime, hacker, office

Cybercriminal reportedly accessed a server at the FBI’s New York field office, according to a source and DoJ documentsA foreign hacker compromised files relating to the FBI’s investigation of the late sex offender Jeffrey Epstein during a break-in at the bureau’s New York field office three years ago, according to “‹a source familiar with the…
Critical Vulnerability in Microsoft Office Allows Malicious Code to Run Remotely

Mar 11, 2026 1:49 PM

Tags: cve, cvss, cyber, flaw, malicious, microsoft, office, remote-code-execution, threat, vulnerability

Microsoft has disclosed a critical security flaw in its Microsoft Office suite, officially tracked as CVE-2026-26110. Released on March 10, 2026, this Remote Code Execution (RCE) vulnerability poses a significant threat to organizations and individuals relying on the widely used productivity software. With a base CVSS score of 8.4, the flaw demands immediate attention from…