APT29's Watering Holes Target Thousands of Mobile Users
2026-11-05T20:51:33Z•db2b65c877c6d966a68192bc890ada56c11775b2986c22cb52690cca3a61b540
3AMAPT29Active StorageAndroidBinance breachCursorImageMagickIoTLLMjackingPapRATRailsSQL ServerXCPEarbitrary file writebotnetcloud abusecyber espionagedata breachdata exfiltrationmobile securityransomwaresensitive file readsupply-chain attack,trojanized extensionwatering-hole attack
What happened
Dark Reading feed covering active cyber threats, vulnerabilities, breaches, malware and supply-chain attacks, including APT29 mobile watering holes, a critical Rails/Active Storage file read and write flaw, a 1.3 million-device XCPE botnet disruption, government data theft, LLMjacking, ransomware activity, AI-assisted exploitation, phishing, credential theft and developer-focused infostealers. The feed also includes defensive guidance, law-enforcement operations and AI security risk analysis.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- darkreading
- Record identifier
- db2b65c877c6d966a68192bc890ada56c11775b2986c22cb52690cca3a61b540
- Enrichment time
- 2026-11-05T20:51:33Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.