NewsThe Hacker News2026-09-29 17:20 UTCSME Public Sector

Russia's Star Blizzard Targets 100+ Organizations With Fake Event Invites to Deliver Backdoor

Russian state hackers known as Star Blizzard have been using fake event invitations to trick people into installing a backdoor on their Windows computers, according to Microsoft. The campaigns, aimed at people and organizations tied to Ukraine, have affected more than 100 organizations since January, mostly in the U.S. and U.K. At least one computer was infected, but the number of breached

Other advisories

osv:CVE-2026-105213none
ZITADEL before 4.17.1 Authentication Bypass via Login V2 for Deactivated Organizations
osv:CVE-2026-104914none
MISP: Soft-Deleted Attributes from Other Organizations Exposed via Attribute Search and Paginated View
osv:CVE-2026-94455none
Unauthenticated /enterprise/create-user mints lifetime top-tier organizations and discloses their API key
osv:CLEANSTART-2026-FD75876none
Keycloak provides a way to manage identity providers and organizations through its administrative API
CVE-2026-18201none
Keycloak-services: keycloak-services: generic identity-provider creation can bind brokers to organizations without manage-organizations
osv:CVE-2026-75542none
OAuth token exchange grants repository scopes for organizations the principal cannot access
CVE-2026-75542none
OAuth token exchange grants repository scopes for organizations the principal cannot access
osv:CVE-2026-58417none
REST API exposes organization membership of private organizations to public

Other news entries

Newsbleepingcomputer2026-10-10
Criminal IP Introduces AITEM as the Next Evolution of Attack Surface Management
Newsvmware-security2026-10-09
Mastering Cybersecurity with VMware vDefend and Avi via Hands-on Labs
Newsbleepingcomputer2026-10-09
How to keep AI agents within their permissions
Newsbleepingcomputer2026-10-08
FBI disrupts Chinese hacking tools used to breach critical infrastructure
Newsthehackernews2026-10-08
FBI Says China-Linked Hackers Ran Portal Giving Third Parties Access to Stolen Emails
Newsdarkreading2026-10-08
Russian Spies Give 'MatchBoil' Malware a Stealthy Facelift
Newsthehackernews2026-10-08
Japan Sees Sharp Rise in Web Data Leaks Amid Mobile API Abuse and Metabase Attacks
Newsthehackernews2026-10-08
ARTEX AI Pentesting Tool Used in Data Theft Attacks on South Korean Financial Firms

Source: https://thehackernews.com/2026/09/russias-star-blizzard-targets-100.html

More on Organizations