#apt29

Midnight Blizzard Data Drop: Microsoft Attack Exposes State-Sponsored Persistence

Russian state-sponsored group APT29 infiltrated Microsoft senior leadership accounts using a forgotten test tenant and OAuth manipulation…

Midnight Blizzard Data Drop: Microsoft Attack Exposes State-Sponsored Persistence

Russian state-sponsored threat group APT29, also known as Midnight Blizzard and Cozy Bear, successfully infiltrated Microsoft senior…

How Amazon Disrupted APT29’s Watering-Hole Attack

Cloud platforms are supposed to be safe harbors. Microsoft 365 is where businesses keep their email, files and collaboration tools. But…

Hunting Russian APT29 in Your F5 BIG-IP: A Complete Forensic Investigation Guide

Hunting Russian APT29 in Your F5 BIG-IP: A Complete Forensic Investigation Guide

Russian APTs: OAuth Abuse, RDP Phish, and Takedowns

Cozy Bear didn’t “hack Cloudflare.” They hacked your faith in the device-code box. After last year’s .rdp phish, they pivoted to watering…

Amazon déjoue une attaque watering hole d’APT29 visant Microsoft

Amazon Disrupts APT29 Watering Hole Campaign

APT29 compromised popular sites by injecting obfuscated JavaScript that quietly redirected around 10% of visitors to actor‑controlled…

TeamCity Exploit Lab (APT29 Exploiting TeamCity) — CyberDefenders Lab | Walkthrough

Greetings everyone and welcome to this walkthrough of the CyberDefenders lab! 👋

XINTRA TechTonik Lab Walkthrough

SCOPING NOTE

⚠️ Cyber-Goblins might be feasting on YOUR #VMware vulnerabilities! ⚠️

VMware admins, your worst nightmare just came true — #APT29, #APT41, and #APT28 might be feasting on fresh vulnerabilities (CVE-2025–22224…