Business team around laptop displaying lock with code surrounded by clouds, shields, and threat type labels

Daily Dose of Cybersecurity News - August 18, 2025

Written by:Daily Cyber Briefing TeamVerified by:Kirill Gavrilenko

August 18, 2025 6:02 AM 2 min read

U.S. Seizes $2.8 Million in Cryptocurrency from Zeppelin Ransomware Operator

High

What happened

The U.S. Department of Justice seized over $2.8 million in cryptocurrency from Ianis Aleksandrovich Antropenko, an alleged operator of the Zeppelin ransomware, which was active between 2019 and 2022.

Who is affected

Individuals, businesses, and organizations worldwide, including those in the United States, targeted by the Zeppelin ransomware.

Why it matters

This seizure underscores the ongoing threat posed by ransomware operators and highlights the importance of robust cybersecurity measures to protect against data encryption and extortion schemes.

How it could have been prevented

Implementing comprehensive cybersecurity protocols, including regular data backups, employee training on phishing attacks, and maintaining up-to-date security software, could mitigate the risk of ransomware infections.

Relevant professional terms

Ransomware: Malicious software that encrypts a victim's data, demanding payment for its release.
Cryptocurrency Seizure: The act of law enforcement confiscating digital assets obtained through illegal activities.

Source: bleepingcomputer.com

Decline in Cybersecurity Prevention Effectiveness Raises Concerns for CISOs

High

What happened

A recent report indicates a significant decline in cybersecurity prevention effectiveness, dropping from 69% in 2024 to 62% in 2025. Detection capabilities remain weak, with less than 15% of simulated attacks triggering alerts. Notably, data exfiltration prevention rates have plummeted to 3%, and password cracking success rates have nearly doubled.

Who is affected

Organizations across various industries and regions are impacted by these declining prevention and detection capabilities, exposing them to increased cyber threats.

Why it matters

The decrease in prevention effectiveness and persistent detection gaps leave organizations vulnerable to data breaches, credential theft, and other cyberattacks. This trend underscores the urgent need for enhanced security measures and continuous validation of existing controls.

How it could have been prevented

Implementing robust data loss prevention (DLP) tools, enforcing strong password policies with multi-factor authentication, and regularly validating security controls through real-world simulations can mitigate these risks.

Relevant professional terms

Data Exfiltration: The unauthorized transfer of data from a computer or network.
Multi-Factor Authentication (MFA): A security system that requires more than one method of authentication from independent categories of credentials to verify the user's identity.

Recommended reading: Pentesting is now central to CISO strategy

Source: helpnetsecurity.com

WinRAR Zero-Day Vulnerability (CVE-2025-8088) Exploited by Multiple Threat Actors

Critical

What happened

A critical zero-day vulnerability in WinRAR (CVE-2025-8088) has been actively exploited by multiple threat actors, including the Russia-aligned group RomCom and another group known as Paper Werewolf. The flaw allows attackers to execute arbitrary code by crafting malicious archive files that bypass extraction safeguards.

Who is affected

Users of WinRAR versions prior to 7.13 are vulnerable. Targeted sectors include financial, manufacturing, defense, and logistics companies in Europe, Canada, and Russia.

Why it matters

Exploitation of this vulnerability can lead to unauthorized code execution, potentially resulting in data breaches, system compromise, and persistent access for attackers. The involvement of multiple sophisticated threat actors increases the risk of widespread attacks.

How it could have been prevented

Regularly updating software to the latest versions and educating users to avoid opening unsolicited or suspicious archive files can mitigate such vulnerabilities.

Relevant professional terms

Zero-day vulnerability: A software flaw unknown to the vendor, leaving systems vulnerable until a patch is developed.
Path traversal: A security vulnerability that allows attackers to access directories and files stored outside the intended directory.

Recommended reading: helpnetsecurity.com

Source: helpnetsecurity.com