Five Eyes nations warn of evolving Russian cyberespionage practices targeting cloud environments

Government cybersecurity agencies (led by the U.K.’s NCSC and co-signed by partners including the U.S., Australia, Canada and New Zealand) issued an advisory warning that SVR-linked APT29/Cozy Bear is evolving tactics to target cloud environments, citing their long history of sophisticated espionage operations (including SolarWinds) and recommending baseline cloud security measures—such as disabling dormant accounts, limiting token lifetimes, and stronger device enrollment—to reduce exposure.