The threat actor known as Silent Lynx has been attributed to a fresh set of attacks targeting government organizations across the Commonwealth of Independent States (CIS). The activity, observed from June 2025 through August 2026, involves four different infection chains that make use of macro-enabled documents, PS2EXE downloaders, GitHub-hosted PowerShell, and crafted WinRAR archives
Silent Lynx Exploits WinRAR Flaw to Deploy Reverse Shell in CIS Government Attacks
About this summary. This is a short, independently written summary of an article first published by The Hacker News. Cyber Security News did not report or verify the underlying story. Read the original: https://thehackernews.com/2026/10/silent-lynx-exploits-winrar-flaw-to.html
Source attribution: headline and facts are from The Hacker News (thehackernews.com). Summary method: excerpt of the source description. See our source attribution policy.
Related coverage
INFUSE: A Unified Surface Benchmark for Indirect Prompt Injection in Agentic Systems
arXiv:2610.20776v1 Announce Type: new Abstract: LLM-based agents increasingly execute long-horizon, end-to-end workflows involving shell commands, code modification…
Approve What, Exactly? Effect Binding and Trusted Rendering for Agent Step-Up Authorization
arXiv:2610.21063v1 Announce Type: new Abstract: AI agents now pause for approval before they send money, delete files or email outsiders, and that approval is usually…
ExecWeave: Cross-Layer Execution Provenance for Observable Agentic Software
arXiv:2610.21146v1 Announce Type: new Abstract: Agentic software invokes tools, launches processes, accesses files, and communicates with local or remote services…
Silent Lynx: Kazakhstan-Linked Hackers Target Russian Refinery and Government
Silent Lynx, a group likely based in Kazakhstan, targets Russian energy and government entities in espionage campaigns across Central Asia. Researchers from Cisco Talos…
GhostAction Compromises About 1,900 GitHub Accounts, Targets Over 30,000 Repositories
The credential-theft campaign known as GhostAction has ramped up, targeting more than 30,000 repositories across 3,000 users and organizations. The spike, according to…
AI-generated changes create review bottlenecks in software delivery
83.4% of respondents who use DevOps practices run CI/CD pipelines, making them the most widely adopted practice in that group, according to JetBrains’ The State of CI/CD…