{"slug": "year-long-russian-attacks-infect-users-as-soon-as-they-look-at-an-email", "title": "Year-long Russian attacks infect users as soon as they look at an email", "summary": "Russian state-backed hackers have been conducting year-long attacks that infect users as soon as they open an email, according to security researchers. The attacks exploit vulnerabilities in email clients to deliver malware without requiring any user interaction beyond viewing the message.", "body_md": "### MOST POPULAR\n\n[AI](https://beta.theregister.com/tag/ai)\n\n-\nSystems\n\n#### AMD attacks the rack with Helios systems that rival Nvidia's\n\nSpec for spec, the House of Zen's first rack-scale AI compute platform is bigger and faster than Nvidia's Vera Rubin by nearly every metric, but that's only on paper\n\n-\nDEVOPS\n\n#### Model Context Protocol prepares to break with its stateful past\n\nBiggest overhaul since launch ditches sessions, guts little-used features, and leaves homebrew implementations facing a slog\n\n-\nOffbeat\n\n#### Tesla burns through a billion as Musk bets the farm on chips and bots\n\nOptimus remains 'very complex' and Robotaxis will try not to flatten your cat\n\n-\nsoftware\n\n#### IBM insists AI didn't kill software deals, just delayed them\n\nBig Blue says customers postponed rather than abandoned major purchases as hardware soaked up enterprise budgets\n\n-\noffbeat\n\n#### UK pumps £708 million into its future fighter jet\n\nTempest cash lands alongside hypersonic target contract and BAE's 'loyal wingman' drone reveal\n\n[Infosec](https://beta.theregister.com/security)\n\n-\nSecurity\n\n#### Russians are posing as Signal support to launch phishing attacks\n\nPLUS: US takes down Iranian propaganda sites; Marketing company asks 'Why Do We Have Your Information?' And more!\n\n-\nSecurity\n\n#### Microsoft patches failed to fix on-prem SharePoint, which is now under zero-day attack\n\nPLUS: China upgrades smartphone surveillance tools; Ring eases anti-snooping stance; and more\n\n-\nBlack Hat and DEF CON\n\n#### DEF CON Franklin project enlists hackers to harden critical infrastructure\n\nVoting village reports have been so successful, says Jeff Moss, that the whole of DEF CON will now be included\n\n-\nSecurity\n\n#### EQT buys majority share in Swiss cybersecurity biz Acronis\n\nWent at equivalent of $3.5B+ valuation for entire firm, though portion sold not specified\n\n-\nMalware Month\n\n#### Ten years since the first corp ransomware, Mikko Hyppönen sees no end in sight\n\nOn the plus side, infosec's a good bet for a long, stable career\n\n[FOSS](https://beta.theregister.com/tag/FOSS)\n\n-\n#### GNOME can look like Windows – and Flashback can do it without extensions\n\nNew 'Simple-taskbar' is an option, but there's a simpler, stabler way\n\n-\n#### A moment of silence, please, for the final release of Debian on x86-32\n\nNew Debian versions hit FOSSland in the form of 13.6 and 12.15\n\n-\n#### Baddies caught exploiting extensions bugs with perfect 10 scores on vulnerable Joomla websites\n\nFlaws in iCagenda, Balbooa Forms extensions can impact open source CMS that powers a million sites worldwide\n\n-\n#### Frame: A new X11 server – implemented directly in assembly\n\nJoins yserver, Phoenix, and of course XLibre – and outlier Arcan\n\n-\n#### Cinnamon 6.8 will support Wayland – if you want it\n\nNext version of Linux Mint’s desktop has both kinds of display server\n\n-\n#### KDE Plasma users face a dire omen of change: 6.6.6 arrives\n\n6.7 is now current, and in 6.8 you're getting Wayland whether you like it or not", "url": "https://wpnews.pro/news/year-long-russian-attacks-infect-users-as-soon-as-they-look-at-an-email", "canonical_source": "https://www.theregister.com/patches/2026/07/23/year-long-russian-attacks-infect-users-as-soon-as-they-look-at-an-email/5277358", "published_at": "2026-07-23 16:47:02+00:00", "updated_at": "2026-07-23 17:26:16.598235+00:00", "lang": "en", "topics": ["ai-safety"], "entities": [], "alternates": {"html": "https://wpnews.pro/news/year-long-russian-attacks-infect-users-as-soon-as-they-look-at-an-email", "markdown": "https://wpnews.pro/news/year-long-russian-attacks-infect-users-as-soon-as-they-look-at-an-email.md", "text": "https://wpnews.pro/news/year-long-russian-attacks-infect-users-as-soon-as-they-look-at-an-email.txt", "jsonld": "https://wpnews.pro/news/year-long-russian-attacks-infect-users-as-soon-as-they-look-at-an-email.jsonld"}}