Between May and July 2025, specialists at Positive Technologies uncovered more than 180 compromised systems within Russian organizations. The malicious activity was traced back to the hacker group PhantomCore, which appears to have focused exclusively on targeting Russia’s critical infrastructure. Who Was Targeted The victims spanned a wide range
In 2023, researchers dropped a bombshell on the world of secure communications. They revealed TETRA:BURST, a set of vulnerabilities in the Terrestrial Trunked Radio (TETRA) standard — the digital radio system used by law enforcement, the military, and operators of critical infrastructure in more than 100 countries. The flaws meant
Experts from Kaspersky and BI.ZONE are warning about renewed activity linked to the PipeMagic backdoor. Kaspersky highlights the malware’s evolution and the shifting tactics of its operators, while BI.ZONE has published a technical analysis of the latest flaw exploited in attacks—CVE-2025-29824. A Persistent Threat Since 2022
Cybercriminals are exploiting the Unicode character «ん» from the Japanese hiragana script to disguise phishing links as legitimate. In certain systems and fonts, this character can resemble a forward slash, tricking users into believing a malicious URL is authentic. Homoglyph Tricks in Action This technique is part of a broader
Mozilla representatives report that a recent ruling by Germany's Federal Court of Justice (BGH) has reignited an old legal dispute over whether browser-based ad blockers violate copyright law. The organization warns this development could eventually lead to a ban on such tools in the country. The Legal Battle
In the second quarter of 2025, specialists at Positive Technologies observed a sharp increase in cybercriminal and hacktivist activity targeting Russian organizations. Phishing emails emerged as the most common initial attack vector, used in both mass campaigns and more sophisticated zero-day operations. Phishing Tactics on the Rise Attackers employed several
Cybersecurity experts at Hunt Intelligence have uncovered a leak of the ERMAC 3.0 source code, an advanced Android banking trojan. The researchers also identified serious flaws in the malware operators’ infrastructure. Background on ERMAC The ERMAC banking trojan was first documented by ThreatFabric in September 2021, noted for its
Anthropic has introduced new capabilities that allow some of its latest AI models to end conversations in what the company describes as “rare, extreme cases of persistently harmful or offensive interactions with users.” Notably, the company stresses that this measure is not designed to protect users, but rather to safeguard
U.S. authorities have imposed sanctions on Grinex, the successor to the cryptocurrency exchange Garantex, which was previously blacklisted for facilitating darknet transactions and laundering money for cybercriminals. Links Between Grinex and Garantex Earlier this year, researchers at TRM Labs reported that Grinex was closely tied to Garantex’s prior
A newly disclosed vulnerability in several HTTP/2 implementations, dubbed MadeYouReset, can be exploited to launch powerful distributed denial-of-service (DDoS) attacks. Scope of the Vulnerability Researchers from Imperva, Deepness Lab, and Tel Aviv University confirmed that the flaw has been assigned the primary identifier CVE-2025-8671. However, the issue is broad
U.S. authorities are reportedly embedding covert tracking devices in shipments of advanced AI chips to detect and prevent their illegal diversion to China. According to Reuters, which cited anonymous sources, the tactic targets select hardware shipments from companies including Dell, Supermicro, Nvidia, and AMD. The trackers are designed to
BtcTurk, one of Turkey’s largest cryptocurrency platforms, has temporarily suspended deposits and withdrawals after detecting suspicious outflows totaling an estimated $49 million. Founded in 2013 in Istanbul, BtcTurk is widely recognized as Turkey’s first crypto trading platform and gained national prominence in 2020 as a major sponsor of