UK and partners expose Russian state-supported actors for new ‘zero-click’ phishing campaign targeting Western organisations

The UK NCSC and international partners disclosed a Russian state-supported actor dubbed 'LAUNDRY BEAR' conducting a new zero-click phishing campaign targeting Western organisations. The feed also includes allied advisories urging critical sectors to remediate poorly configured routers and network devices, and an NCSC alert following global targeting of Fortinet firewalls and VPN gateways. Additional items provide guidance on post-quantum migration, zero-trust access (ZTNA), software supply chain risks, AI in cyber defence, and authentication best practices (passkeys).