Russian hackers use stealthy Exchange malware to steal government emails

Turla hackers use new Cereal malware to spy on govt Exchange servers

The Russian state-backed threat group Turla has been using a new malicious toolset called 'Cereal' to intercept emails on Microsoft Exchange servers at government organizations. [...]

Turla’s Cereal malware turns victims’ Exchange servers into spy hubs

Russia-aligned group Turla planted a modular .NET toolset on Microsoft Exchange servers at two government organizations, one in Kazakhstan and one in Romania, and used it to copy selected email straight out of the mail flow. ESET researchers found the malware and named it Cereal. The toolset doesn’t need an attacker-owned server. Operators send commands to the victim’s internet-facing Exchange server, dressed up as o…

Google fixes Chrome XML zero-day flaw exploited in attacks

Google released a Chrome security update that addresses nine vulnerabilities, including a high-severity XML flaw exploited in the wild. The security update brings the Stable channel to version 157.0.8103.50/.51 for Windows and macOS and 157.0.8103.50 for Linux, with the rollout to users taking place over the coming days and weeks. Tracked as CVE-2026-125350, the exploited … The post Google fixes Chrome XML zero-day f…

Queens Public library under ransomware attack e-borrowing suspended