Defense

ESET exposes Gorbag stealing data from Ukrainian government and defense bodies via spearphishing and WinRAR flaw CVE-2025-8088

ESET researchers exposed a Russia-aligned threat actor they named Gorbag, active since at least February 2025 and focused exclusively on Ukrainian targets, especially law enforcement and justice entities, local administrations near the front line, the defense sector and a major transportation hub for foreign military aid .

According to Military Times, a September 18 notification letter from the Defense Manpower Data Center (DMDC) says it found a vulnerability in a file-sharing system on July 16 and that unauthorized users accessed files with unencrypted personal data on a server between October 2025 and July 16, 2026 .

The UK government disclosed a security incident affecting an Armed Forces payment network operated by an external contractor and separate from core Ministry of Defence (MOD) systems .