Phishing

Hackread reports that North Korean state-sponsored advanced persistent threat operation Kimsuky has harnessed artificial intelligence-generated military IDs as part of a new spear-phishing campaign initially discovered in July.

The new PhaaS uses adversary-in-the-middle techniques to steal credentials, MFA codes, and session tokens.

Organizations across different sectors around the world are having their Microsoft and Google accounts targeted by multiple cybercrime operations in attacks exploiting the nascent VoidProxy phishing service that has been underway since January, reports The Register.

Mounting law enforcement action and increased artificial intelligence adoption have prompted ransomware intrusions to surge during the first half, with a 73% rise observed during the first quarter, while ransomware claims cost rose by 17% over last year, SecurityWeek reports.

Attacks leveraging the open-source HTTP client increased 241% from June to August 2025.

Kazakhstan state-owned oil and gas firm KazMunayGas has disclosed conducting an internal phishing drill as it denied having its systems compromised by the Russia-linked NoisyBear threat operation as reported by Seqrite Labs, according to The Record, a news site by cybersecurity firm Recorded Future.