Security Bulletin

Infosecurity Magazine reports that threat actors have pilfered almost $2.47 billion worth of cryptocurrency in scams and other heists during the first half of 2025, surpassing cryptocurrency losses recorded for the entirety of 2024.

Updates have been issued by Google to resolve an actively exploited zero-day vulnerability impacting its Chrome browser, tracked as CVE-2025-6554, which is the fourth Chrome zero-day addressed by Google so far this year, The Hacker News reports.

SecurityWeek reports that organizations, particularly those in critical infrastructure sectors, could be remotely compromised through the exploitation of a trio of flaws impacting Microsens' NMP Web+ offering, which allows management of industrial...

North Carolina's City of Thomasville was purported to have been compromised by the INC Ransom ransomware-as-a-service operation, reports Cybernews.

By using social engineering tactics, threat actors are able to manipulate their victims into saving and renaming files that will backfire against them.

The attack uses sideloading to deliver a variant of the popular Gh0stRAT malware and lures victims by posing — among other things — as a purported installer for DeepSeek's LLM.

Historically, North Korean threat actors have applied for outsourced IT support positions at U.S. firms.

The ransomware sample contained “oddities” including encryption of its own ransom note.

Just as attackers have used SEO techniques to poison search engine results, they could rinse and repeat with artificial intelligence and the responses LLMs generate from user prompts.

As the largest managed security services provider, the combined entity will offer cyber consulting, managed detection and response, and incident response services.