19 Jul, 2025

Russian hackers attack Western military mission using malicious drive

The Russian state-backed hacking group Gamaredon (aka “Shuckworm”) has been targeting a military mission of a Western country in Ukraine in attacks likely deployed from removable drives. Symantec threat researchers say the campaign started in February 2025 and continued until March, with hackers deploying an updated version of the GammaSteel info-stealing malware to exfiltrate data. According to […]

2 mins read

Microsoft fixes printing issues caused by January Windows updates

Microsoft has fixed a known issue causing some USB printers to start printing random text after installing Windows updates released since late January 2025. The bug has been addressed in the March 2025 KB5053643 and KB5053657 non-security preview updates for Windows 10 (version 22H2) and Windows 11 (versions 22H2 and 23H2). This fix will also roll out to users […]

2 mins read

Microsoft: Recent Windows updates make USB printers print random text

Microsoft says that some USB printers will start printing random text after installing Windows updates released since late January 2025. The known issue affects Windows 10 (version 22H2) and Windows 11 (versions 22H2 and 23H2), but according to an update to the Windows release health dashboard, the latest Windows 11 24H2 is not impacted. “After […]

2 mins read

European govt air-gapped systems breached using custom malware

An APT hacking group known as GoldenJackal has successfully breached air-gapped government systems in Europe using two custom toolsets to steal sensitive data, like emails, encryption keys, images, archives, and documents. According to an ESET report, this happened at least two times, one against the embassy of a South Asian country in Belarus in September 2019 […]

3 mins read

New CMoon USB worm targets Russians in data theft attacks

A new self-spreading worm named ‘CMoon,’ capable of stealing account credentials and other data, has been distributed in Russia since early July 2024 via a compromised gas supply company website. According to Kaspersky researchers who discovered the campaign, CMoon can perform a broad range of functions, including loading additional payloads, snapping screenshots, and launching distributed denial of […]

3 mins read