In the second quarter of 2025, specialists at Positive Technologies observed a sharp increase in cybercriminal and hacktivist activity targeting Russian organizations. Phishing emails emerged as the most common initial attack vector, used in both mass campaigns and more sophisticated zero-day operations. Phishing Tactics on the Rise Attackers employed several
Cybersecurity experts at Hunt Intelligence have uncovered a leak of the ERMAC 3.0 source code, an advanced Android banking trojan. The researchers also identified serious flaws in the malware operators’ infrastructure. Background on ERMAC The ERMAC banking trojan was first documented by ThreatFabric in September 2021, noted for its
Anthropic has introduced new capabilities that allow some of its latest AI models to end conversations in what the company describes as “rare, extreme cases of persistently harmful or offensive interactions with users.” Notably, the company stresses that this measure is not designed to protect users, but rather to safeguard
U.S. authorities have imposed sanctions on Grinex, the successor to the cryptocurrency exchange Garantex, which was previously blacklisted for facilitating darknet transactions and laundering money for cybercriminals. Links Between Grinex and Garantex Earlier this year, researchers at TRM Labs reported that Grinex was closely tied to Garantex’s prior
A newly disclosed vulnerability in several HTTP/2 implementations, dubbed MadeYouReset, can be exploited to launch powerful distributed denial-of-service (DDoS) attacks. Scope of the Vulnerability Researchers from Imperva, Deepness Lab, and Tel Aviv University confirmed that the flaw has been assigned the primary identifier CVE-2025-8671. However, the issue is broad
U.S. authorities are reportedly embedding covert tracking devices in shipments of advanced AI chips to detect and prevent their illegal diversion to China. According to Reuters, which cited anonymous sources, the tactic targets select hardware shipments from companies including Dell, Supermicro, Nvidia, and AMD. The trackers are designed to
BtcTurk, one of Turkey’s largest cryptocurrency platforms, has temporarily suspended deposits and withdrawals after detecting suspicious outflows totaling an estimated $49 million. Founded in 2013 in Istanbul, BtcTurk is widely recognized as Turkey’s first crypto trading platform and gained national prominence in 2020 as a major sponsor of
In Q2 2025, researchers identified a wave of cyberattacks targeting Russian companies in the finance, logistics, and telecom sectors. The activity was linked to the Kinsing hacking group—also known as H2Miner and Resourceful Wolf—whose primary objective was to infect victim systems with Kinsing malware and deploy XMRig for
Google has patched a vulnerability that allowed malicious Google Calendar invitations to remotely control Gemini agents running on a victim’s device and exfiltrate sensitive data. Gemini is Google’s large language model (LLM), integrated into Android, Google web services, and Google Workspace applications, with direct access to Gmail, Calendar,
Security researchers at Eclypsium have demonstrated a novel attack dubbed “BadCam” at DEF CON 33, revealing vulnerabilities in certain Lenovo webcam models that can be remotely repurposed as BadUSB attack tools. Key Details of the BadCam Attack (CVE-2025-4371) * First real-world demonstration of remotely hijacking Linux-based USB peripherals for malicious purposes.
Security analysts at Binarly have identified at least 35 Docker Hub images still infected with the backdoor that compromised xz Utils last year. Researchers warn this poses a serious supply chain risk to users, organizations, and their data. Supply Chain Risk in CI/CD Pipelines Many CI/CD pipelines, developers,
Researchers at Dr. Web have uncovered a sophisticated Android backdoor targeting Russian business representatives. The malware offers extensive surveillance and data theft capabilities, including: * Recording conversations * Streaming live camera footage * Stealing data from messengers and browsers * Keylogging Malware Evolution and Targeting Dubbed Android.Backdoor.916.origin, the Kotlin-based malware first