Russian hackers Star Blizzard expand targeting, change up tactics to reach Ukraine and beyond

2026-09-29T20:51:34Z•0d6053f27ea735c10836ad5259e90a65d0e15e490791aec1ad04aa2b4bd5e66a
AI securityCitrix NetScalerKiteworksRussia-nexus threat actorShinyHuntersStar BlizzardUkraineUnited KingdomUnited Statesactive exploitationbiotechnologycritical infrastructurecritical vulnerabilitycyberespionagedata breachextortionlaw enforcementphishingspearphishingzero-day

What happened

CyberScoop RSS items report multiple significant cybersecurity developments, including expanded Star Blizzard cyberespionage phishing activity targeting U.S., U.K., Ukraine, and other organizations; active exploitation of Citrix NetScaler zero-days; discovery and patching of a critical Kiteworks vulnerability amid a shutdown advisory; ShinyHunters-related breaches and law-enforcement action; and broader policy and AI-security initiatives. The most urgent threats are the actively exploited Citrix vulnerabilities and high-volume espionage phishing campaigns.

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
cyberscoop
Record identifier
0d6053f27ea735c10836ad5259e90a65d0e15e490791aec1ad04aa2b4bd5e66a
Enrichment time
2026-09-29T20:51:34Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.

Record · Russian hackers Star Blizzard expand targeting, change up tactics to reach Ukraine and beyond · Baitaphish