Amazon Threat Intelligence identifies Russian cyber threat group targeting Western critical infrastructure | Amazon Web Services

As we conclude 2025, Amazon Threat Intelligence is sharing insights about a years-long Russian state-sponsored campaign that represents a significant evolution in critical infrastructure targeting: a tactical pivot where what appear to be misconfigured customer network edge devices became the primary initial access vector, while vulnerability exploitation activity declined. This tactical adaptation enables the same […]

Getting code execution on Veeam through CVE-2023-27532 – SCRT Team Blog

ccondon-r7's assessment of CVE-2023-27532 | AttackerKB

We've continued to see reports of exploitation for CVE-2023-27532. Almost a year out from the initial advisory, there's been ransomware (Cuba, Akira) and other…