Sanctions target Russian broker accused of exploits theft

Exploit Broker Gets Tangled with Treasury Sanctions

A shadowy Russian firm faces U.S. sanctions over stolen zero-day exploits. The U.S. Treasury Department has imposed sanctions on Positive Technologies, accusing it of buying stolen zero-day vulnerabilities from a hacked U.S. defense contractor. A zero-day is a software flaw unknown to its developer, giving attackers the upper hand until it’s patched. Tightening the noose around cyber espionage networks, U.S. officials said the firm had been exploiting loopholes to sell these vulnerabilities. The move highlights Russia’s role in cyber arms markets and signals more aggressive U.S. enforcement. Sanctions bar Positive Technologies from accessing U.S. markets or systems, dealing a financial and operational blow. This action sets a precedent for future crackdowns on cyber middlemen.