Russian Hackers Breach UK Government Email Accounts in Major Cyberattack

Russian-linked attackers (suspected APT28) exploited a Fortinet firewall vulnerability affecting over 80,000 devices to harvest UK government and Foreign Office email credentials, which are being traded on dark web forums; the active campaign used DNS hijacking techniques and has prompted NCSC warnings due to potential catastrophic follow-on ransomware and impacts to critical services.