US sanctions Russian broker for buying stolen zero-day exploits

The U.S. Treasury (OFAC) designated Matrix LLC (doing business as Operation Zero), its owner Sergey Zelenyuk, and affiliated entities and individuals under PAIPA after Operation Zero purchased and sold stolen zero-day exploits—including at least eight proprietary tools stolen from a U.S. defense contractor. A former L3Harris executive pleaded guilty and was sentenced for stealing and selling those exploits, and Operation Zero publicly offers bounties for exploits targeting commonly used software, creating a high-risk marketplace for zero-days that threatens U.S. and allied systems.