Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
Google Cloud Security analyzes the pro-Russia influence ecosystem, which has evolved from a tool of war into a global disinformation operation four years after the full-scale invasion of Ukraine. The report examines the drivers, dynamics, and applications of these campaigns.
Written by: James Sadowski, Alden Wahlstrom Introduction Four years into Russia’s full-scale invasion of Ukraine, the pro-Russia influence ecosystem has evolved from a tool of war back into a global strategic asset.
This report analyzes how the pro-Russia influence ecosystem has evolved from a war tool into a global strategic asset. It warns that influence activity targeting the EU, NATO, and other priorities may intensify as tactics expand with AI. The ecosystem's resilience requires defenders to address its interconnected nature.
This report details a ransomware campaign where Bumblebee and AdaptixC2 deliver Akira through Bing search. The case was initially reported in July 2025 and later shared publicly with Swisscom B2B CSIRT. It includes analysis from two separate intrusions tied to the same campaign.
The DFIR Report details a campaign where Bumblebee and AdaptixC2 were used to deliver Akira ransomware, with initial access achieved through Bing search engine poisoning. Originally reported in 2025 in partnership with Swisscom B2B CSIRT, the case highlights how search engine results remain a viable attack vector for ransomware distribution.
Key Takeaways This case was first reported to customers in a threat brief released in July 2025 and in a public flash alert in August 2025 in partnership with Swisscom B2B CSIRT, which observed another intrusion tied to the same campaign.