Russia Hacked Routers to Steal Microsoft Office Tokens

Multiple high-impact cyber incidents and trends: Russian military-linked actors exploited known flaws in legacy routers to mass-harvest Microsoft Office authentication tokens from over 18,000 networks without installing malware; German authorities identified “UNKN” as Daniil Shchukin, linking him to REvil and GandCrab ransomware campaigns; an extortion group unleashed the CanisterWorm wiper that spreads via misconfigured cloud services and targets systems using Iran time zone or Farsi; Iran-linked actors claimed a wiper attack against medical device firm Stryker; U.S., Canadian and German law‑