Category: Full Text Articles – Audio Posts

DEIR AL-BALAH, Gaza Strip (AP) — Israeli strikes over the past 24 hours killed at least 38 people in Gaza, including children, local health officials said Sunday, with no data available for a second straight day from now-inaccessible hospitals in the north.

Further details emerged of the Palestinian doctor who lost nine of her 10 children in an Israeli strike on Friday.

Gaza’s Health Ministry said 3,785 people have been killed since Israel ended a ceasefire in March, vowing to destroy Hamas and return the 58 hostages it still holds from the Oct. 7, 2023, attack that triggered the war. Hamas has said it will only release the hostages in exchange for a lasting ceasefire and an Israeli withdrawal.

Israel also blocked all food, medicine and fuel from entering Gaza for 2 1/2 months before letting a trickle of aid enter last week, after experts’ warnings of famine and pressure from some of Israel’s top allies.

U.S. Homeland Security Secretary Kristi Noem was visiting Israel on Sunday and was meeting with Prime Minister Benjamin Netanyahu.

Israel is pursuing a new U.S.-backed plan to control all aid to Gaza, which the United Nations has rejected. U.N. World Food Program executive director Cindy McCain told CBS she has not seen evidence to support Israel’s claims that Hamas is responsible for the looting of aid trucks. “These people are desperate, and they see a World Food Program truck coming in and they run for it,” she said.

COGAT, the Israeli defense body overseeing aid for Gaza, said 107 trucks of aid entered Sunday. The U.N. has called the rate far from enough. About 600 trucks a day entered during the ceasefire.

Israel also says it plans to seize full control of Gaza and facilitate what it describes as the voluntary migration of its over 2 million population, a plan rejected by Palestinians and much of the international community.

More on the killing of a doctor’s 9 children

In Friday’s strike, only one of pediatrician Alaa al-Najjar’s 10 children survived at their home near the southern city of Khan Younis. The 11-year-old and al-Najjar’s husband, also a doctor, were badly hurt.

The children’s charred remains were put in a single body bag, said a fellow pediatrician at Nasser Hospital, Alaa al-Zayan.

The home was struck minutes after Hamdi al-Najjar had driven his wife to the hospital. His brother, Ismail al-Najjar, was first to arrive at the scene.

“They were innocent children,” the brother said, the youngest 7 months old. “And my brother has no business with (Palestinian) factions.”

Israel has said “the claim regarding harm to uninvolved civilians is under review.” It blames Hamas for civilian deaths because it operates in densely populated areas.

There was no immediate comment from the military on the latest strikes. One killed a mother and two children in the central city of Deir al-Balah, according to al-Aqsa Martyrs Hospital. Another in northern Gaza’s Jabaliya area killed at least five, including two women and a child, according to Gaza’s Health Ministry.

Also on Friday in Khan Younis, two International Committee of the Red Cross staffers were killed when shelling struck their home, the ICRC said.

“This is not an endless war,” Israel’s military chief of staff, Lt. Gen. Eyal Zamir, said during a visit to Khan Younis. Recent ceasefire talks in Qatar gained no ground.

Hamas-led militants killed some 1,200 people, mostly civilians, in the Oct. 7 attack and abducted 251. Around a third of the remaining hostages are believed to be alive. Israel’s 19-month offensive has killed over 53,000 Palestinians, according to Gaza’s Health Ministry, which says women and children make up most of the dead. It does not provide figures for the number of civilians or combatants killed.

New from Hezbollah’s leader

Speaking on the anniversary of Israel’s withdrawal from southern Lebanon in 2000, Hezbollah leader Naim Kassem reiterated the Lebanese militant group’s stance that it will not discuss giving up its remaining weapons until Israel withdraws from the five border points it occupies in southern Lebanon and stops its airstrikes.

The speech came nearly six months after the latest Israel-Hezbollah war ended with a U.S.-brokered ceasefire. Under the deal, Israel and Hezbollah were supposed to withdraw forces from southern Lebanon.

Israeli officials have said they plan to remain at the five points indefinitely to secure their border. Israel has also continued to carry out near-daily airstrikes in southern Lebanon and sometimes in Beirut’s suburbs.

“We adhered completely” to the agreement, Kassem said, adding: “Don’t ask us for anything else from now on. Let Israel withdraw, stop its aggression, release the prisoners and fulfill all obligations under the agreement. After that, we will discuss each new development.”

A missile from the Houthis

Separately, Israel’s military said it intercepted a missile fired by Yemen’s Houthi rebels on Sunday. It triggered air raid sirens in Jerusalem and other areas. There were no immediate reports of casualties or damage.

The Iran-backed Houthis have launched repeated missile attacks targeting Israel as well as international shipping in the Red Sea, portraying it as a response to Israel’s military campaign in Gaza. Most of the targeted ships had no relation to Israel or the conflict.

The United States halted a punishing bombing campaign against the Houthis earlier this month, saying the rebels had pledged to stop attacking ships. That informal ceasefire did not include attacks on Israel.

___

Magdy reported from Cairo. Associated Press writer Abby Sewell in Beirut contributed.

___

Follow AP’s war coverage at https://apnews.com/hub/israel-hamas-war

Ukrainian President Volodymyr Zelensky issued a strong statement addressing the ongoing Russia-Ukraine conflict, after Russia bombarded Ukraine with one of the largest air assaults of the war thus far.

In an update shared via social media on Sunday morning, Zelensky said “nearly 300 attack drones” and “almost 70 missiles of various types” were launched by Russia overnight. At least 12 people have been reported killed.

[time-brightcove not-tgx=”true”]

Meanwhile, Russia’s Defense Ministry said its air defenses had intercepted and destroyed 95 Ukrainian drones. “From 08:00 p.m. Moscow time of May 24 to 00:00 a.m. of May 25, air defenses on duty destroyed and intercepted 95 Ukrainian fixed-wing type unmanned aerial vehicles,” the ministry said.

“Russia is dragging out this war and continues to kill every day. The world may go on a weekend break, but the war continues, regardless of weekends and weekdays,” Zelensky said on X. 

The Ukrainian leader then went on to call out America over its “silence,” saying Russia’s actions—and those of its leader, President Vladimir Putin—“cannot be ignored.”

“Silence of America, silence of others around the world only encourage Putin,” he said. “Without truly strong pressure on the Russian leadership, this brutality cannot be stopped. Sanctions will certainly help. Determination matters now—the determination of the United States, of European countries, and of all those around the world who seek peace.”

Some time later, Trump’s special envoy for Ukraine and Russia, Keith Kellogg, took to X and called for an immediate cease-fire.

“This is Kyiv. The indiscriminate killing of women and children at night in their homes is a clear violation of the 1977 Geneva Peace Protocols designed to protect innocents. These attacks are shameful. Stop the killing. Cease-fire now,” he said.

This is Kyiv. The indiscriminate killing of women and children at night in their homes is a clear violation of the 1977 Geneva Peace Protocols designed to protect innocents. These attacks are shameful. Stop the killing. Ceasefire now. pic.twitter.com/89XRWZcP21

— Keith Kellogg (@generalkellogg) May 25, 2025

The overnight strikes cast a shadow over the prisoner swap between Russia and Ukraine on Sunday. “303 Ukrainian defenders are home. The third part of the 1000-for-1000 exchange deal, agreed upon in Turkey, has been completed,” Zelensky said.

Each country agreed to release 1,000 prisoners of war—the largest swap of the war so far—during peace talks between Russia and Ukraine delegates in Turkey on Friday, May 16. The countries’ respective leaders were notably absent from the talks, after Putin rejected Zelensky’s offer for an in-person sit-down and did not accompany the Russian delegation to Turkey.

Amid global efforts to procure a cease-fire in the Russia-Ukraine war, Trump spoke to Putin on the phone for two hours on Monday, May 19. The U.S. President said the “tone and spirit of the conversation were excellent, and that it “went very well.” He then announced that cease-fire conversations would begin “immediately.” As planned, Trump went on to call Zelensky and other European leaders.

After speaking with Trump, Zelensky said on social media that it was “a defining moment.”

“The world can now see whether its leaders are truly capable of securing a cease-fire and achieving real, lasting peace,” he said on X. “I reaffirmed to President Trump that Ukraine is ready for a full and unconditional cease-fire… It is important not to dilute this proposal. If the Russians are not ready to stop the killings, there must be stronger sanctions. Pressure on Russia will push it toward real peace—this is obvious to everyone around the world.”

Meanwhile, Zelensky’s latest comments calling out the “silence of America” mark the latest development in the often tense relationship between U.S. and Ukrainian leaderships. On Feb. 28, Zelensky and Trump engaged in a heated discussion in the Oval Office, which was filmed for the world to see. The pair clashed when discussing efforts for a Russia-Ukraine cease-fire.

The two have since moved forward and have held productive talks, most notably when they sat down together ahead of Pope Francis’ funeral in the Vatican on April 26, sharing their first face-to-face conversation since the White House debacle. Following that conversation in Rome, Zelensky took to social media and expressed hope for future talks and relations.

“Good meeting. We discussed a lot one-on-one. Hoping for results on everything we covered. Protecting lives of our people,” Zelensky said. “Very symbolic meeting that has potential to become historic, if we achieve joint results.”

Congress could potentially pass the first major legislation related to children’s online safety since 1998, as the Kids Online Safety Act, sometimes referred to as KOSA, was reintroduced earlier this month after stalling last year.

[time-brightcove not-tgx=”true”]

The bill has proven to be a major talking point, garnering bipartisan support and the attention of tech giants, but it has also sparked concern re: targeted censorship from First Amendment rights groups and others advocating for LGBTQ+ communities.

Now, it will have another shot, and the bill’s Congressional supporters will have a chance to state why they believe the legislation is needed in this ever-evolving digital age.

The revival of the Kids Online Safety Act comes amid U.S. and global discussions over how to best protect children online. In late 2024, Australia approved a social media ban for under-16s. It’s set to come into effect later this year. In March, Utah became the first state to pass legislation requiring app stores to verify a user’s age. And Texas is currently moving forward with efforts regarding an expansive social media ban for minors. The Kids Off Social Media Act (KOSMA)—which would ban social media platforms from allowing children under 13 to create or maintain accounts—was also introduced earlier this year, but has seen little movement since.

Speaking on NBC’s Meet the Press on Sunday, May 25, during a special mental health-focused episode, former Rep. Patrick J. Kennedy, a Democrat who served Rhode Island, expressed a dire need for more protections surrounding children online.

When asked about the Kids Online Safety Act, and if it’s the type of legislation America needs, Kennedy said: “Our country is falling down on its own responsibility as stewards to our children’s future.” He went on to explain why he believes passing bills is just one factor of what needs to be addressed, citing online sports betting as another major concern.

“We can’t just pass these bills. We’ve got to stop all of these intrusive addiction-for-profit companies from taking our kids hostage. That’s what they’re doing. This is a fight,” he said. “And we are losing the fight because we’re not out there fighting for our kids to protect them from these businesses [whose] whole profit motive is, ‘How am I going to capture that consumer and lock them in as a consumer?’”

Calling out giant social media platforms, in particular, Kennedy went on to say: “We, as a country, have seen these companies and industries take advantage of the addiction-for-profit. Purdue, tobacco. Social media’s the next big one. And unfortunately, it’s going to have to be litigated. We have to go after the devastating impact that these companies are having on our kids.”

Amid these ongoing discussions, here’s what you need to know about the Kids Online Safety Act in light of its reintroduction.

What is the Kids Online Safety Act?

The Kids Online Safety Act aims to provide further protections for children online related to privacy and mental health concerns exacerbated by social media and excessive Internet use.

The bill would create “duty of care,” meaning that tech companies and platform giants would be required to take steps to prevent potentially harmful encounters, such as posts about eating disorders and instances of online bullying, from impacting minors.

“A covered platform shall exercise reasonable care in the creation and implementation of any design feature to prevent and mitigate the following harms to minors: anxiety, depression, eating disorders, substance use disorders, and suicidal behaviors… patterns of use that indicate or encourage addiction-like behaviors by minors…” the bill reads.

Health organizations including The American Academy of Pediatrics and the American Psychological Association, have pushed Congress to pass KOSA to better protect young people online—and see the bill as a potential way to intervene with the detrimental impact social media and Internet usage in general can have on one’s mental health.

Newer versions of the bill have narrowed regulations to apply to limiting “design features” such as notifications, “infinite scrolling or autoplay,” and in-game purchases.

It would also allow for more parental tools to manage the privacy settings of a minor, and ideally enable a parent to limit the ability for adults to communicate with their children via online platforms.

Read More: 6 Red Flags About the Mental-Health Content You’re Being Bombarded With on Social Media

What is the history of the bill? 

In 2024, KOSA seemingly had all the right ingredients to pass into law. It had bipartisan support, passed the Senate, and could have been put in front of President Joe Biden, who had indicated he would sign the bill.

“There is undeniable evidence that social media and other online platforms contribute to our youth mental health crisis,” President Biden wrote in a statement on July 30, 2024, after KOSA passed the Senate. “Today our children are subjected to a wild west online and our current laws and regulations are insufficient to prevent this. It is past time to act.”

Yet, the bill was stalled. House Speaker Mike Johnson cautioned Republicans against rushing to pass the bill.

“We’ve got to get it right,” Johnson said in December. “Look, I’m a lifelong advocate of protection of children…and online safety is critically important…but we also have to make sure that we don’t open the door for violations of free speech.”

The bill received support across both aisles, and has now been endorsed by some of the “big tech giants” it aims to regulate, including Elon Musk and X, Microsoft, and Apple.

“Apple is pleased to offer our support for the Kids Online Safety Act (KOSA). Everyone has a part to play in keeping kids safe online, and we believe [this] legislation will have a meaningful impact on children’s online safety,” Timothy Powderly, Apple’s senior director of government affairs, said in a statement earlier in May after the bill was reintroduced.

But other tech giants, including Facebook and Instagram’s parent Meta, opposed the bill last year. Politico reported that 14 lobbyists employed directly by Meta, as well as outside firms, worked the issue.

The bill was reintroduced on May 14 by Republican Sen. Marsha Blackburn and Democratic Sen. Richard Blumenthal, who were joined by Senate Majority Leader John Thune and Senate Minority Leader Chuck Schumer.

“Senator Blackburn and I made a promise to parents and young people when we started fighting together for the Kids Online Safety Act—we will make this bill law. There’s undeniable awareness of the destructive harms caused by Big Tech’s exploitative, addictive algorithms, and inescapable momentum for reform,” said Blumenthal in a statement announcing the bill’s reintroduction. “I am grateful to Senators Thune and Schumer for their leadership and to our Senate colleagues for their overwhelming bipartisan support. KOSA is an idea whose time has come—in fact, it’s urgently overdue—and even tech companies like X and Apple are realizing that the status quo is unsustainable.

Read More: ‘We’re In a New World’: American Teenagers on Mental Health and How to Cope

What is the controversy around KOSA?

Since KOSA’s first introduction, it’s been the site of controversy over free speech and censorship concerns. In 2024, the American Civil Liberties Union (ACLU) discouraged the passage of KOSA at the Senate level, arguing that the bill violated First Amendment-protected speech.

“KOSA compounds nationwide attacks on young peoples’ right to learn and access information, on and offline,” said Jenna Leventoff, senior policy counsel at the ACLU. “As state legislatures and school boards across the country impose book bans and classroom censorship laws, the last thing students and parents need is another act of government censorship deciding which educational resources are appropriate for their families. The House must block this dangerous bill before it’s too late.”

Some LGBTQ+ rights groups also opposed KOSA in 2024—arguing that the broadly worded bill could empower state attorneys general to determine what kind of content harms kids. One of the bill’s co-sponsors, Blackburn, has previously said that one of the top issues conservatives need to be aware of is “protecting minor children from the transgender in this culture and that influence.” Calling out social media, Blackburn said “this is where children are being indoctrinated.”

Other organizations including Center for Democracy & Technology, New America’s Open Technology Institute, and Fight for the Future joined the ACLU in writing a letter to the House Energy and Commerce Committee in 2024, arguing that the bill would not—as intended—protect children, but instead threaten young people’s privacy and lead to censorship.

In response to these concerns, the newly-introduced version of the bill has been negotiated with “several changes to further make clear that KOSA would not censor, limit, or remove any content from the internet, and it does not give the FTC [Federal Trade Commission] or state Attorneys General the power to bring lawsuits over content or speech,” Blumenthal’s statement on the bill reads.

Where do things currently stand?

Now, KOSA is back where it started—sitting in Congress waiting for support.

With its new changes, lawmakers argue that they have heard the concerns of opposing advocates. KOSA still needs support and passage from Congress—and signing from President Donald Trump—in order to pass into law.

Trump’s son, Donald Trump Jr., has previously voiced strong support of the bill. “We can protect free speech and our kids at the same time from Big Tech. It’s time for House Republicans to pass the Kids Online Safety Act ASAP,” Trump Jr. said on X on Dec. 8, 2024.

UK authorities are leaving no stone unturned as three Ukrainian born men are charged in connection with firebomb attacks on London properties affiliated with Sir Kier Starmer.

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape

Sarcoma Ransomware Unveiled: Anatomy of a Double Extortion Gang

RVTools Bumblebee Malware Attack – How a Trusted IT Tool Became a Malware Delivery Vector  

Malicious ‘Checker’ Packages on PyPI Probe TikTok and Instagram for Valid Accounts

RedisRaider: Weaponizing misconfigured Redis to mine cryptocurrency at scale 

Hidden Threats of Dual-Function Malware Found in Chrome Extensions       

Chinese Hackers Deploy MarsSnake Backdoor in Multi-Year Attack on Saudi Organization

Threat Actors Deploy LummaC2 Malware to Exfiltrate Sensitive Data from Organizations 

Pure Harm: PureRAT Attacks Russian Organizations  

Lumma Stealer: Breaking down the delivery techniques and capabilities of a prolific infostealer

A Brief History of DanaBot, Longtime Ecrime Juggernaut Disrupted by Operation Endgame    

Bumblebee malware distributed via Zenmap, WinMRT SEO poisoning  

60 Malicious npm Packages Leak Network and Host Data in Active Malware Campaign 

Following the spiders: Investigating Lactrodectus malware 

TikTok Videos Promise Pirated Apps, Deliver Vidar and StealC Infostealers Instead

Russian GRU Targeting Western Logistics Entities and Technology Companies

A familiar playbook with a twist: 3AM ransomware actors dropped virtual machine with vishing and Quick Assist 

From banks to battalions: SideWinder’s attacks on South Asia’s public sector

UAT-6382 exploits Cityworks zero-day vulnerability to deliver malware

Consistent and Compatible Modelling of Cyber Intrusions and Incident Response Demonstrated in the Context of Malware Attacks on Critical Infrastructure

Malware families discovery via Open-Set Recognition on Android manifest permissions

Follow me on Twitter: @securityaffairs and Facebook and Mastodon

Pierluigi Paganini

(SecurityAffairs – hacking, newsletter)

Moscow contends that all the Ukrainian children made to participate in its marksmanship training and memorial parades obviously want to become good Russian citizens.

Sen. John Fetterman (D-Pa.) said his mental illness was being “weaponized” against him by the media after a bombshell report resurfaced his ongoing struggle with depression. 

In recent weeks, he’s appeared in the Capitol for committee meetings to show his capability of fulfilling the role he’s been elected to serve in until 2028. 

“My doctor warned years ago: After it’s public that you are getting help for depression, people will weaponize that,” Fetterman told the New York Times. 

“Simple things are turned. That’s exactly what happened. It shook me that people are willing to weaponize that I got help,” he continued. 

Former staffers had described the lawmaker’s behavior in a recent article, alleging that past treatment and coping mechanisms had faded from Fetterman’s daily routine, creating a hostile work environment. 

However, the Pennsylvania senator told the New York Times that his openness surrounding mental illness has spiraled into the “Belichick girlfriend story of politics,” referring to the University of North Carolina football coach whose partner has become a revolving name in headlines. 

Fetterman said his decision to be absent at committee votes were conscious choices he made to prioritize his family over his work in Washington.

“The votes I missed were overwhelmingly procedural; they’re even called ‘bed check’ votes,” he said. “I had to make a decision: getting here and sticking my thumb in the door for three seconds for a procedural vote or spend Monday night as a dad-daughter date.”

Another time, Fetterman said he went to visit his father who’s recovering from a heart attack. 

Amidst internal struggles, Fetterman has met with Senate Majority Leader Chuck Schumer (D-N.Y.) for support and a separate meeting with Sen. Amy Klobuchar (D-N.Y.) to discuss his focus for the Agriculture Committee. 

“I enjoy working with him and appreciate his perspectives,” she told the Times.

Despite their confidence in the lawmaker’s ability to perform his duties, some constituents have raised concerns with his absences.

State legislative sessions around the country are coming to a close, and fights over public vs. charter school funding and cell phones were among the biggest policy battles this year.  

While all eyes have been on federal changes to education policies, such how schools should approach diversity, equity and inclusion (DEI), state lawmakers have attempted to push forward with changes to their own systems, ranging from enrollment of migrant students to increased school choice funding.  

From Texas to Colorado to New York, state lawmakers took on a wide variety of schools-based issues, and not all of them were fully resolved.

Policies that passed this legislative session 

The state education policy that has received the most national attention came out of Texas with the passage of its school choice program.  

With the largest day one program in the country, Texas has dedicated $1 billion in the first year to give scholarships to students that they can take to private or homeschooling options.  

“I am signing this law that will ensure Texas families, whose children can no longer be served by the public school assigned to them, have the choice to take their money and find the school that is right for them,” said Gov. Greg Abbott (R).

Other states have also expanded school choice programs, including in Indiana and Wyoming, or begun new ones, as in Tennessee and Idaho.  

In line with the direction of the Trump administration, multiple states also passed bills to restrict DEI programs in K-12 or higher education, including Indiana, Iowa and Ohio.

“One of the goals of this bill is to make sure that we do everything that we can so that a student feels free to express their point of view, whether that be in a classroom or whether that be someplace else on campus,” Ohio Gov. Mike DeWine (R) said. “That should be part of what we’re doing in higher education.” 

Another major issue that swept numerous states this year is cell phone bans, with lawmakers looking for school officials to make policies limiting screen time on students’ personal devices.  

At least 11 states have put some restrictions on cell phones in schools in the 2025 legislative session: New York, Oklahoma, Georgia, Alabama, Missouri, Iowa, Virginia, Arkansas, New Mexico, Arizona and North Dakota.

Other states were able to build on public school funding as fear rises about the future of federal funding under President Trump.

Lawmakers in Alaska overrode a veto by their governor to allow the establishment of charter schools and implement a $700 increase to the base student allocation. Overall, the bill will give a $180 million increase to the state’s education budget.

In Colorado, lawmakers gave more than $10 billion in public school funding for the next academic year, but it is still less of an increase than what schools were expecting.

Measures that failed or were tabled for later 

Tennessee saw major backlash when it attempted to pass legislation that would have required proof of citizenship for students to be enrolled in public schools.  

The bill had bipartisan opposition and came at a time where undocumented students have heightened concerns after President Trump said Immigration and Customs Enforcement (ICE) could now enter schools. There have been no confirmed reports of ICE raids at schools so far. 

“Passing this bill would make it impossible for many kids to access the education they deserve, and it would be a betrayal of the values that our state and our country stand for,” Osiris Pizen-Magana, an immigrant and educator, told local outlet MTSU Sidelines. “Every child deserves access to equality, education and the opportunities that come with it.” 

And while anti-DEI measures were successful in some states, others saw the efforts stall.  

In Colorado, a bill that would have barred state universities from requiring students to take a DEI-related college course failed to move forward. 

George Republicans tabled an anti-DEI bill this legislative session that would have taken away funding from state K-12 or higher education institutions that had DEI programs.  

“This bill was never about fairness — it was about fear,” Democratic State Sen. Sonya Halpern told local outlet Capital B Atlanta. “It sought to censor honest discussions, dismantle programs that create opportunity, and undermine our ability to compete in a diverse, global economy.” 

South Dakota had one of the busiest education sessions with a quarter of its more than 400 bills revolved around education, according to Argus Leader. 

Among those bills the state failed in their efforts to make school board elections partisan and create a school choice program.  

“Public education funding should reflect a shared responsibility. Instead, public funds would be drained from public and tribal schools, leaving fewer resources and opportunities for all students,” said Roquel Gorneau, representing the Great Plains Tribal Education Directors, South Dakota Searchlight reported. “This bill does not strengthen education. It weakens it, forcing public schools to do more with less.” 

A new round of the weekly Securitythe weekly Security Affairs newsletterAffairs newsletter arrived! Every week the best security articles from Security Affairs are free in your email box.

Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.

Silent Ransom Group targeting law firms, the FBI warns

Leader of Qakbot cybercrime network indicted in U.S. crackdown

Operation RapTor led to the arrest of 270 dark web vendors and buyers

Chinese threat actors exploited Trimble Cityworks flaw to breach U.S. local government networks

U.S. CISA adds a Samsung MagicINFO 9 Server flaw to its Known Exploited Vulnerabilities catalog

New Signal update stops Windows from capturing user chats

Law enforcement dismantled the infrastructure behind Lumma Stealer MaaS

Russia-linked APT28 targets western logistics entities and technology firms

A cyberattack was responsible for the week-long outage affecting Cellcom wireless network

Coinbase data breach impacted 69,461 individuals

U.S. CISA adds Ivanti EPMM, MDaemon Email Server, Srimax Output Messenger, Zimbra Collaboration, and ZKTeco BioTime flaws to its Known Exploited Vulnerabilities catalog

A critical flaw in OpenPGP.js lets attackers spoof message signatures

SK Telecom revealed that malware breach began in 2022

4G Calling (VoLTE) flaw allowed to locate any O2 customer with a phone call

China-linked UnsolicitedBooker APT used new backdoor MarsSnake in recent attacks

UK’s Legal Aid Agency discloses a data breach following April cyber attack

Sarcoma Ransomware Unveiled: Anatomy of a Double Extortion Gang

Mozilla fixed zero-days recently demonstrated at Pwn2Own Berlin 2025

Japan passed a law allowing preemptive offensive cyber actions

James Comey is under investigation by Secret Service for a seashell photo showing “8647”

Pwn2Own Berlin 2025: total prize money reached $1,078,750

Experts found rogue devices, including hidden cellular radios, in Chinese-made power inverters used worldwide

International Press – Newsletter

Cybercrime

M&S hackers believed to have gained access through third party 

Domestic abuse victim data stolen in Legal Aid hack  

An $8.4 Billion Chinese Hub for Crypto Crime Is Incorporated in Colorado  

“SKT All Subscribers’ SIM Card Information Leaked”… Malicious Codes Increase to 25 Types 

Worcester College Student to Plead Guilty to Cyber Extortions  

A familiar playbook with a twist: 3AM ransomware actors dropped virtual machine with vishing and Quick Assist

Cellcom Service Disruption Caused by Cyberattack

Justice Department Seizes Domains Behind Major Information-Stealing Malware Operation

270 arrested in global dark web crackdown targeting online drug and criminal networks  

KrebsOnSecurity Hit With Near-Record 6.3 Tbps DDoS

TikTok Videos Promise Pirated Apps, Deliver Vidar and StealC Infostealers Instead

Leader of Qakbot Malware Conspiracy Indicted for Involvement in Global Ransomware Scheme

Silent Ransom Group Targeting Law Firms 

Operation ENDGAME strikes again: the ransomware kill chain broken at its source 

Malware

Sarcoma Ransomware Unveiled: Anatomy of a Double Extortion Gang

RVTools Bumblebee Malware Attack – How a Trusted IT Tool Became a Malware Delivery Vector  

RedisRaider: Weaponizing misconfigured Redis to mine cryptocurrency at scale 

Hidden Threats of Dual-Function Malware Found in Chrome Extensions       

Lumma Stealer: Breaking down the delivery techniques and capabilities of a prolific infostealer

A Brief History of DanaBot, Longtime Ecrime Juggernaut Disrupted by Operation Endgame    

Hacking

Pwn2Own Berlin 2025: Day Three Results  

Firefox Security Response to pwn2own 2025 

The Legacy Loophole: How Attackers Are Exploiting Entra ID and What to Do About It  

O2 VoLTE: locating any customer with a phone call  

ViciousTrap – Infiltrate, Control, Lure: Turning edge devices into honeypots en masse

Advisory Update on Cyber Threat Activity Targeting Commvault’s SaaS Cloud Application (Metallic)      

Intelligence and Information Warfare

Rogue communication devices found in Chinese solar power inverters

New Japan law allows preemptive defense of infrastructure cyberattack

ESET APT Activity Report Q4 2024–Q1 2025

From banks to battalions: SideWinder’s attacks on South Asia’s public sector  

Russian GRU Targeting Western Logistics Entities and Technology Companies

UAT-6382 exploits Cityworks zero-day vulnerability to deliver malware

Cybersecurity

Ex-FBI boss James Comey investigated for seashell photo seen as threat to Trump 

“We would be less confidential than Google” – Proton threatens to quit Switzerland over new surveillance law 

Japan passed a law allowing preemptive offensive cyber actions

We Made Luigi Mangione’s 3D-Printed Gun—and Fired It 

Cyber attack threat keeps me awake at night, bank boss says  

By Default, Signal Doesn’t Recall  

Follow me on Twitter: @securityaffairs and Facebook and Mastodon

Pierluigi Paganini

(SecurityAffairs – hacking, newsletter)

This year’s team included 15 participants, 13 of whom are active-duty soldiers wounded in action while defending Ukraine against Russian aggression.