Cybersecurity News

According to a June 23, 2025 report by Channel 12 News, Iranian hackers used phishing techniques to compromise Google accounts of well-known Israeli journalists. The attackers impersonated trusted Israeli figures—such as the prime minister’s adviser and former JNS senior editor Caroline Glick—and contacted targets via WhatsApp.

The Prometei botnet has experienced a notable resurgence in 2025, particularly with its Linux variant, marking it as a persistent and evolving threat to organizations worldwide. Originally discovered in July 2020 primarily targeting Windows systems, Prometei expanded to Linux in December 2020 and has since continued to evolve both in scope and technical sophistication.

A recent cyberattack targeted users of CoinMarketCap, a widely used cryptocurrency data platform, resulting in the theft of more than $43,000 in crypto assets from 110 users. The attackers leveraged a malicious toolkit known as Inferno Drainer to execute the scheme.

The United States is on high alert for potential cyberattacks following its recent airstrikes on Iranian nuclear sites, which have significantly escalated tensions between the two nations. The Department of Homeland Security (DHS) and the National Terrorism Advisory System have issued bulletins warning of a “heightened threat environment” in the U.S., particularly concerning cyber threats from Iran and its allies.

Michigan-based McLaren Health Care has disclosed a significant data breach affecting 743,131 individuals after a ransomware attack compromised its systems in July and August 2024. This incident is the second major breach for the organization in recent years, following a 2023 attack that impacted over 2 million people.

Cybersecurity circles have been focused on a new threat actor claim regarding a zero-day exploit targeting Fortinet FortiGate firewalls. This claim emerged on a prominent dark web forum and has raised significant alarm due to the exploit’s purported capabilities and the critical role FortiGate devices play in enterprise network security.

European police, led by Denmark and Sweden, are intensifying efforts to dismantle a disturbing new criminal model known as “violence-as-a-service” (VaaS), in which organized crime groups recruit teenagers online to carry out contract killings. This crackdown is a response to a surge in cross-border violence facilitated by encrypted apps and social media platforms, which allow gangs to outsource violent crimes—including shootings and assassinations—to young people, some as young as 14.

A new joint report by FS-ISAC and Akamai, titled From Nuisance to Strategic Threat: DDoS Attacks Against the Financial Sector, highlights a sharp escalation in both the frequency and sophistication of distributed denial-of-service (DDoS) attacks targeting the global financial sector. The findings underscore a strategic shift in cybercriminal tactics, with significant consequences for financial institutions, their customers, and the broader economy.