August 21, 2026
- Three suspected Russian espionage clusters — UNC6293, UNC7005 and UNC5976 — are abusing legitimate authentication flows rather than credential phishing. Techniques include Google OAuth abuse and WhatsApp device-linking to attach attacker devices to victim accounts, targeting academia, aerospace and defence, government and think tanks across Europe and the US (The Hacker News, The Register). · Cloud & Identity