The vulnerability could be used to deploy a variety of attacks including ransomware.

The sanctions mark the first time any government has publicly connected Trisis to Russia.

FireEye released details on new customized tools the company’s incident responders had found at the unnamed critical infrastructure facility.

Researchers say that the same sophisticated group behind last year's incident in Saudi Arabia has attacked multiple U.S. companies.

Schneider Electric had remained largely silent about an August incident where Trisis shut down operations at a Saudi energy plant.

An elite cyberweapon has been publicly sitting online due to a mistaken upload to VirusTotal, three sources familiar with the matter told CyberScoop.