Russian state-linked cyberespionage group (aka Nobelium/APT29) known for long-running intrusions against governments, diplomats and technology suppliers.
ReversingLabs says it expanded the two file hashes in Anthropic's Midnight Blizzard report into a campaign map in five pivots. RL says Anthropic's appendix does not list the servers, lures and domain links it found.
Reality
Anthropic says an alleged ShinyHunters member decompiled apps pulled from multiple stores and routed verified TruffleHog hits into a Telegram channel sorted by service, and those credentials opened most of his confirmed breaches.
Perspective Coverage
6 publishersReality
Anthropic's September misuse report withdraws the assumption that its newer models sit below the threshold for meaningful bioweapons help, and it describes five blocked biology cases in which the company never established what the scientists intended.
Perspective Coverage
9 publishersReality
TeamViewer urged users to install version 15.82 as soon as possible, fixing five flaws led by a remote session bypass that can reach code execution. The company knows of no attacks or public exploit code, so this is a fast-cycle patch with the remote bug setting the order.
Reality
Consent phishing, the most common OAuth entry point according to SC World, leaves a victim tenant three audit events and no app registration record. Registration monitoring misses it, so the hunt moves to consent and delegated-grant operations in the defender's own logs.
Reality
Anthropic's threat report says the operation pulled transponder identifiers, satellite-imagery scripts and personnel names off captions on public military photographs, and the company banned the account it traced the work to.
Reality
Anthropic's third misuse report says its 2025 Claude models sat well below the level that could help a sophisticated user with dangerous biology, and that for current models it can no longer make that assurance.
Perspective Coverage
5 publishersReality
The device code phishing cluster Microsoft disclosed in February 2025 is now assessed as an initial access arm of Midnight Blizzard. The sign-in flow the campaign abused works as designed, so the remedy is configuration.
Reality
Microsoft's September 17 post pins three current campaigns on excessive permissions, open authentication flows and sanctioned admin tooling, and says the change AI brought is the speed at which those combine.
Reality
New research counted roughly 350 of the ads on Meta's platforms, some built from images of real children, and lawmakers have said they will investigate. In the same week Meta launched a personal AI agent it says was built with security and privacy in mind.
Reality
The 154-page threat report says actors beat the company's region blocks and hid the purpose of their research, so Anthropic banned accounts and published the pattern with every country and institution removed.
Perspective Coverage
7 publishersReality
Anthropic's December-to-August threat report says none of the intrusions it disrupted used a novel technique. Stolen credentials and unpatched edge devices opened the doors, at machine speed, for single operators.
Reality