ClearSky has spotted the Gamaredon APT deploying the GamaWiper in data-wiping attacks at Ukrainian organizations.
The attacks leveraged a WinRAR vulnerability tracked as CVE-2025-80880.
ANY.RUN says activity from the Salty2FA phishing service collapsed in October and payloads now seem to overlap with the IOCs of another service named Tycoon2FA.
Cato Networks has discovered HashJack, an indirect prompt injection technique that conceals malicious instructions after the # in legitimate URLs.
This attack works when AI agents have to parse links inside documents or emails.
Europol has seized the domain of the Cryptomixer cryptocurrency mixing service.
The site was allegedly responsible for helping criminal groups launder funds. Officials also seized โฌ25 million worth of assets.
