SysBlue Cyber Solutions

Nearly 300 GitHub repos pose as legit software to push malware.

A threat actor has published hundreds of fake GitHub repositories impersonating legitimate software and security projects to distribute infostealer malware.

The campaign drew traffic from search results for security products, cryptocurrency services, financial tools, developer utilities, secure email providers, macOS utilities, and gaming software.

Nearly 300 GitHub repos pose as legit software to push malware A threat actor has published hundreds of fake GitHub repositories impersonating legitimate software and security projects to distribute infostealer malware.

DuckDuckGo browser now blocks YouTube video ads.

DuckDuckGo announced that its browser can now block most video ads on YouTube, including those shown before the video starts playing and during playback.

The feature is enabled by default in the latest versions of DuckDuckGo for iOS, Mac, and Windows, while Android users can enable it manually by going to Settings > Ad Blocking.

DuckDuckGo browser now blocks YouTube video ads DuckDuckGo announced that its browser can now block most video ads on YouTube, including those shown before the video starts playing and during playback.

Flipper Zero firmware development continues with community help.

Flipper Devices says development of the Flipper Zero firmware will continue, albeit with a smaller internal team and greater reliance on community contributions.

The announcement comes as the gadget maker decided to focus on building new devices, like the Flipper One open Linux platform, for which the company turned to the community's help to complete development.

Flipper Zero firmware development continues with community help Flipper Devices says development of the Flipper Zero firmware will continue, albeit with a smaller internal team and greater reliance on community contributions.

U.S. Government Entity Paid Kairos $1 Million in Data-Theft Extortion Case.

A U.S. government entity paid about $1 million to keep stolen files from being leaked, according to a new case study by Rakesh Krishnan for Ransom-ISAC, built on a leaked negotiation chat and the blockchain trail the payment left.

The odd part: the group that took the money calls itself Kairos, but it may not be a ransomware gang at all. Krishnan found no sign that it ever locked a single machine: no encryptor, no locker, no demand for a decryption key. The threat was simpler. Steal the files, then charge the victim not to publish them.

U.S. Government Entity Paid Kairos $1 Million in Data-Theft Extortion Case The case study found no encryptor or locked machines, only stolen files used as leverage in a month-long negotiation ending June 13, 2025.