The FBI is warning people about the security risks that come with using mobile apps that were made in other countries This article explores money laundering google. . Google is adding the option for Gmail users in the U.S. to change their usernames.

A federal judge put a stop to the Trump administration's decision to label Anthropic as a supply chain risk for a short time. A new phishing scheme that pretends to be real ChatGPT and Meta advertising apps as beta-testing opportunities has been targeting Android users. Li Xiong, who used to be the head of Cambodia's HuiOne group, has been sent back to China. He is being charged with running gambling dens, fraud, illegal business practices, and money laundering.

Google added the ability to find ransomware and restore files to Drive in September 2025.

GhostSocks lets hackers turn hacked devices into residential proxies by using the victim's internet bandwidth through SOCKS5 connections. Since January 2024, the number of malware warnings in open-source ecosystems has gone up by 13.6 times. Cybersecurity experts have found several zero-day flaws in ImageMagick that can be used to run code remotely by uploading images or PDFs.

As of the time of writing, the vulnerability has not been fixed and affects all major Linux distributions and WordPress installations that allow image uploads. A hacker group called LofyGang came back with a fake package called "undicy-http." The bad tool launches two attacks: a Node.js-based Remote Access Trojan (RAT) and a Windows PE binary that runs on its own. The session hijacking module is aimed at Discord, Roblox, Instagram, Spotify, TikTok, Steam, and Telegram.

It also downloads a native PE binary to help steal data through a Discord webhook and a Telegram bot. "The real risk is in the sequence: individually, these API calls seem normal, but when combined, they let attackers erase evidence and avoid detection altogether," Abstract Security said.