> TritonInfoSec News
Home / Nov 11, 2026 / Story
0
#4 The Hacker News general November 10, 2026 at 10:07 UTC

Russian Turla Hackers Use New Cereal Malware to Steal Emails From Government Exchange Servers

By [email protected] (The Hacker News)

AI Summary

Russia-linked Turla (aka Snake) has deployed a previously undocumented toolset called 'Cereal' to compromise Microsoft Exchange servers at government organizations in Kazakhstan and Romania, silently exfiltrating emails. Per a new ESET report, Cereal features a novel Exchange email collection module, a unique C2 mechanism, and sophisticated .NET execution tricks with minimal indicators of compromise. The targeting of NATO and EU correspondence via government email infrastructure represents a significant ongoing espionage operation.

Read full article → https://thehackernews.com/2026/11/russian-turla-ha…

Relevance score: 88.0/100

# More from November 11

  1. 1
    Microsoft November 2026 Patch Tuesday fixes 1,235 flaws, Outlook zero-day BleepingComputer
  2. 2
    France Blames Iran for Sabotage Attack on Refrigeration Controllers at About 700 Retail Sites The Hacker News
  3. 3
    N-able Takes N-central Cloud Offline After Researcher Discloses 33 Zero-Days with PoC Exploits The Hacker News
  4. 5
    New OpenSSH Vulnerability Schneier on Security
  5. 6
    SAP Patches Four CVSS 10.0 Flaws, Including Two Enabling Remote Code Execution The Hacker News
  6. 7
    Hackers Exploit Critical Xen Orchestra Auth Bypass Flaw to Gain Admin Access The Hacker News
  7. 8
    Google Issues Chrome Security Update for Eighth Actively Exploited Zero-Day of 2026 The Hacker News
  8. 9
    Japanese furniture giant Nitori says hackers stole 37.6M customer records BleepingComputer
  9. 10
    Git Patches Flaw That Lets Malicious Repositories Execute Code During Recursive Clones The Hacker News