Hackers are targeting major organisations across Russia, including government bodies, financial institutions, and industrial sectors, with an advanced malware distributed as a legitimate update for ViPNet software. This sophisticated backdoor, termed HEUR:Trojan.Win32.Loader.gen by Kaspersky, allows attackers to exfiltrate sensitive data and maintain continuous access to compromised systems. To combat such threats, robust, multi-layered security architectures with advanced endpoint protection and threat intelligence are required.

AOA, DaVita and Bell Ambulance Breached
Healthcare organizations Alabama Ophthalmology Associates, DaVita, and Bell Ambulance were hit by ransomware attacks in 2025, compromising data of nearly 245,000 individuals. The breaches were