State of Cybercrime

Midnight Blizzard

State of Cybercrime

Show Notes

Russia's APT29, a.k.a "Midnight Blizzard," is arguably one of the world's most notorious threat actors. You might recall their involvement in the 2019 SolarWinds attack where they operated under the alias "Cozy Bear."

The group is back with more relentless attacks—breaching cloud credentials and targeting over 100 organizations worldwide.

In this episode of State of Cybercrime, Matt and David dive into some of the hottest cybersecurity news and recent breaches, including Midnight Blizzard. Discover how these sophisticated attacks are happening and what you can do to stay a step ahead.

More from State of Cybercrime

Sep 28, 2026

ShinyHunters claims it stole 2-3 TB of FBI data and shared a sample with researchers containing information on employees, applicants, and even family members.

Sep 12, 2026

If your company runs PTC Windchill, Cl0p may already have your blueprints.

Aug 15, 2026

Out of the sandbox and into the fire.

Jul 18, 2026

A complete attack chain run by an AI agent – with zero human hands on the keyboard.

Jun 12, 2026

The supply chain remains the weakest link. A new automated malware campaign dubbed “Megalodon” poisoned more than 5,500 GitHub repos in just six hours, quietly harvesting cloud credentials, tokens, and sensitive code from environments that implicitly trust what they pull.

See all episodes →