The hunt is on, Digital Defenders. |
US authorities have seized $1 million in bitcoin from a Russian ransomware gang. Researchers have uncovered TETRA radio flaws exposing law enforcement to interception. And Connex Credit Union is reeling from a breach impacting 172,000 members |
|
| Here’s what you need to know: |
|
|
Bitcoin Busted: US Seizes $1M From Russian Ransomware Gang |
The US Department of Justice has seized $1 million in bitcoin from a Russian ransomware group tied to the BlackSuit and Royal malware campaigns, along with four servers and nine domains taken offline. |
According to the DOJ, these campaigns have struck US critical infrastructure, including manufacturing, healthcare, public health, and government facilities. The takedown was part of a coordinated operation involving law enforcement from the UK, Germany, Ireland, France, Canada, Ukraine, Lithuania, and the US.
Use this as a reminder that cybercriminals operate across borders, and so must the defenses. Share threat intelligence, invest in proactive defenses, and close vulnerabilities before the next campaign begins. |
VPN Lockdown: SonicWall Warns of Possible Exploitation in Progress |
SonicWall is advising customers using Gen 7 SonicWall firewalls with SSLVPN to disable the service while it investigates ongoing cyberattacks and suspicious activity.
Researchers from Arctic Wolf, Google Mandiant, and Huntress have all reported unusual intrusion attempts targeting SonicWall’s VPN service, prompting the company’s precautionary recommendation. SonicWall has stated it will release a firmware update if a vulnerability is confirmed.
The wave of attacks, first detected on July 15, has been actively tracked by multiple security organizations since. Just last month, SonicWall’s Secure Mobile Access appliances were also targeted in backdoor exploitation attacks.
SonicWall’s recommendations: Disable SSLVPN, restrict SSLVPN connectivity to trusted source IPs, and enable MFA. |
Radio Breach: TETRA Flaws Expose Law Enforcement to Interception |
Midnight Blue security researchers have uncovered vulnerabilities in the Terrestrial Trunked Radio (TETRA) communications protocol, an EU radio standard widely used by law enforcement, military, and other critical operators.
Dubbed 2TETRA:2BURST, the flaws expose TETRA’s end-to-end encryption mechanisms to replay and brute-force attacks. While no active exploitation has been reported, these security gaps could allow threat actors to intercept sensitive communications and inject malicious data.
Agencies using TETRA should follow recommended mitigations, review encryption settings, and prepare secure fallback communications, if available. |
|
|
Do you think international law enforcement is keeping pace with cybercriminals? |
|
|
Yesterday's Pulse Check Results |
Could you tell if your webcam turned against you? |
|
|
Security Tools You Can Use |
-
With NordLayer, you get an easy-to-use network security platform built to secure companies of any size.
-
hide.me VPN delivers a blazing-fast, no-logs VPN that keeps your online data away from prying eyes.
|
|
|
Archive Ambush: WinRAR Zero-Day Fuels Spear Phishing Attacks in Europe and Canada |
A Russian hacker group has been exploiting CVE-2025-8088, a zero-day vulnerability that causes WinRAR to extract files to an attacker-defined path instead of the one designated by the user. |
Discovered by ESET on July 18, the attackers sent spear phishing emails containing malicious archives to targeted individuals in defense, finance, and logistics companies across Canada and Europe. Fortunately, none of the intended targets were compromised, and the zero-day was patched on July 30.
Always verify the sender before opening unexpected email attachments, especially compressed files, and scan all downloads with up-to-date security tools before extraction. |
Bank Breach: 172K Connex Members Exposed in Data Heist |
Connex Credit Union has suffered a data breach affecting 172,000 members, potentially exposing names, account numbers, debit card details, and Social Security numbers.
Reports indicate the attack began on June 2 and was detected the next day. According to Connex, there is currently no evidence that hackers accessed member accounts or funds, and all impacted individuals have since been notified. Connex users: Take advantage of the free 12-month credit monitoring and identity protection services offered, and watch for any unusual account activity. |
|
|
How to Stay Safe on Public WiFi |
Free WiFi in public places like libraries, coffee shops, and public transportation can be a lifesaver for your data plan. But they can also serve as prime hunting grounds for cybercriminals. These networks often lack encryption, making it easy for attackers to intercept your traffic, steal credentials, or inject malicious code. |
Source: Unsplash / Bernard Hermant |
Here are a few tips when it comes to using public WiFi: |
- Use your own mobile data or a personal hotspot instead.
- If you must use public WiFi, connect through a reputable VPN before logging in to any accounts.
- Verify that the public WiFi SSID matches the official name provided by the venue.
-
Avoid accessing sensitive accounts (like banking or email) over public WiFi.
|
While public WiFi is convenient, always take steps to keep your data and accounts secure. |
|
|
| Senior Staff Writer at TechnologyAdvice |
Luis Millares is a seasoned tech writer with broad experience reviewing consumer gadgets and enterprise software, offering clear, reliable insights across the latest in technology. |
|
|
Protect your team with premium policies, guides, and more |
Cybersecurity Insider subscribers can now get 20% off an annual subscription to TechRepublic Premium and unlock unlimited access to hundreds of customizable policy templates, step-by-step checklists, and expert-written guides. Replace days of research and drafting with proven, plug-and-play resources that help your team harden defenses and stay audit-ready — fast. Use the code CSI20 at checkout. |
|
|
Protect your team with premium policies, guides, and more |
Cybersecurity Insider subscribers can now get 20% off an annual subscription to TechRepublic Premium and unlock unlimited access to hundreds of customizable policy templates, step-by-step checklists, and expert-written guides. Replace days of research and drafting with proven, plug-and-play resources that help your team harden defenses and stay audit-ready — fast. Use the code CSI20 at checkout. |
|
|
Cybersecurity Insider is a TechnologyAdvice business |
© 2025 TechnologyAdvice, LLC. All rights reserved. |
TechnologyAdvice, 3343 Perimeter Hill Dr., Suite 100, Nashville, TN 37211, USA. |
|
|
|