French Diplomatic Entities Targeted in Russian-Linked Cyber Attacks

ANSSI reported that Russian-linked clusters (tracked as Nobelium/APT29 and related names) have conducted targeted cyber espionage against French diplomatic entities, using phishing campaigns leveraging compromised legitimate email accounts and opportunistic exploitation of security flaws (e.g., JetBrains TeamCity). The advisory links recent activity to breaches affecting IT vendors (Microsoft, HPE) and references prior supply-chain operations (SolarWinds), warning that attacks on IT and cybersecurity targets could strengthen the actor's offensive capabilities.