When Theft Replaces Encryption: Blue Report 2025 on Ransomware & Infostealers
Source: https://www.bleepingcomputer.com/news/security/when-theft-replaces-encryption-blue-report-2025-on-ransomware-and-infostealers/
Booking.com phishing campaign uses sneaky 'ん' character to trick you
Source: https://www.bleepingcomputer.com/news/security/bookingcom-phishing-campaign-uses-sneaky-character-to-trick-you/
Hacked Law Enforcement and Government Email Accounts Sold on Dark Web
Source: https://www.infosecurity-magazine.com/news/law-enforcement-government-emails/
Canada’s House of Commons investigating data breach after cyberattack
Source: https://www.bleepingcomputer.com/news/security/canadas-house-of-commons-investigating-data-breach-after-cyberattack/
# Summer cybersecurity news catch up
Paris Natural History Museum and hosting provider Francelink paralyzed, Google victim of an attack documented by their own services, urgent CISA directive for Exchange and 5 new KEV vulnerabilities, Microsoft Patch Tuesday with 111 vulnerabilities patched, Alltricks and Manpower compromised, Dell laptops hacked with vegetables 🤯, etc.
There are also some cool articles and cool tools.
Content in french but most of the articles are in english.
Google Requires Crypto App Licenses in 15 Regions as FBI Warns of $9.9M Scam Losses
Source: https://thehackernews.com/2025/08/google-requires-crypto-app-licenses-in.html
Microsoft asks users to ignore certificate enrollment errors
Source: https://www.bleepingcomputer.com/news/microsoft/microsoft-asks-users-to-ignore-certificate-enrollment-errors/
Docker Hub still hosts dozens of Linux images with the XZ backdoor
Source: https://www.bleepingcomputer.com/news/security/docker-hub-still-hosts-dozens-of-linux-images-with-the-xz-backdoor/
Hackers leak 2.8M sensitive records from Allianz Life in Salesforce data breach
Source: https://securityaffairs.com/181093/data-breach/hackers-leak-2-8m-sensitive-records-from-allianz-life-in-salesforce-data-breach.html
Chapter #1
Reward : $100
This challenge is part of ongoing research at Malwation examining the potential of abusing foundation model via manipulation for malware development. We are currently preparing a comprehensive paper documenting the scope and implications of AI-assisted threat development.
The ZigotRansomware sample was developed entirely through foundation model interactions without any human code contribution. No existing malware code was mixed in or given as source code sample, no pre-built packer were integrated, and no commercial/open-source code obfuscation product were applied post-generation.
Research Objectives
This challenge demonstrates the complexity level achievable through pure AI code generation in adversarial contexts. The sample serves as a controlled test case to evaluate:
\- Reverse engineering complexity of AI-generated malware
\- Code structure and analysis patterns unique to AI-generated threats
\- Defensive capability gaps against novel generation methodologies
US govt seizes $1 million in crypto from BlackSuit ransomware gang
Source: https://www.bleepingcomputer.com/news/security/us-govt-seizes-1-million-in-crypto-from-blacksuit-ransomware-gang/
MuddyWater’s DarkBit ransomware cracked for free data recovery
Source: https://www.bleepingcomputer.com/news/security/muddywaters-darkbit-ransomware-cracked-for-free-data-recovery/