Cybersecurity Roundup: AI-Driven Open-Source Security, Domain Quarantines, and Rising Fraud Losses Athena Coalition Aims to Secure Open-Source Software with AI Chainguard CEO Dan Lorenc unveiled Athena, a new industry coalition leveraging AI to accelerate the remediation of vulnerabilities in critical open-source software. Founding members including JPMorgan Chase, Cisco, Cloudflare, Docker, Kyndryl, and PwC will pool data and fixes to shift from fragmented patching to a coordinated response. The first disclosures from Athena are expected within a month. This initiative follows similar efforts by IBM, Red Hat, and the Open Source Security Foundation’s AI/ML Security Working Group. Meanwhile, SoftBank announced plans to launch a cybersecurity "patching service" for Japan’s top 3,000 critical infrastructure companies through its joint venture with OpenAI, SB OAI Japan. Estonia to Quarantine Russian Email Domains Estonia will begin quarantining emails from Russia’s .ru top-level domain starting August 31, applying the same risk-based isolation protocols used for high-risk individual messages. Government officials will receive notifications for quarantined emails, with the option to open them under heightened security measures. Justice and Digital Affairs Minister Liisa Pakosta cited "elevated cyber risk" and concerns over potential database breaches as the rationale. Arch Linux Halts AUR Signups After Malicious Package Surge Arch Linux maintainers suspended new signups for the Arch User Repository (AUR) after a wave of malicious package submissions. Researchers at Sonatype identified over 1,500 compromised packages by June 11, many targeting abandoned projects to execute a malicious npm payload during installation. While the attack does not affect Arch Linux’s core distribution, the AUR’s community-driven nature made it a prime target. FTC Reports $3.5 Billion Lost to Imposter Scams in 2025 The U.S. Federal Trade Commission revealed that imposter scams cost victims $3.5 billion in 2025 triple the losses reported in 2020. Business and government impersonators accounted for nearly $2 billion, while bank fraud led to the highest individual losses. Social media played a central role, with $2.1 billion in fraud originating from platforms and one-third of scams beginning there. Overall, fraud losses reached $16 billion, a 25% increase from 2024. California Water Service Investigates Alleged Breach The Iranian-linked hacktivist group Handala claimed to have stolen data from California Water Service (Cal Water), publishing files allegedly containing customer billing information. While Handala suggested the attack could disrupt water supply, Cal Water stated no operational disruptions have been detected. Analysis by Dataminr confirmed the leaked data appears legitimate. iRhythm Confirms Patient Data Breach via Social Engineering Cardiac monitoring company iRhythm disclosed a June 8 data breach affecting patient records, following a social engineering attack on business applications. The company received extortion demands the next day but did not disclose further details. No clinical systems or medical devices were compromised, and no ransomware group has claimed responsibility. Rokarolla Trojan Targets Android Banking and Crypto Apps Researchers at zLabs identified Rokarolla, an Android trojan spreading via fake TikTok and Chrome download pages. The malware impersonates the Play Store to deliver a second-stage payload, then hijacks calls and texts to intercept one-time passcodes and fraud alerts. Using Accessibility services, it overlays fake login pages on legitimate banking and cryptocurrency apps to steal credentials. FulcrumSec Claims Novo Nordisk Cyberattack The group FulcrumSec took credit for a March breach of pharmaceutical giant Novo Nordisk, alleging it stole 1.3 terabytes of data including intellectual property and private AI models via a compromised GitHub access token. The group demanded a $25 million ransom, which Novo Nordisk reportedly did not pay. India Blocks Telegram to Prevent Exam Cheating India’s National Testing Agency (NTA) restricted access to Telegram nationwide until June 22, following reports of leaked exam questions for the National Eligibility Test for Undergraduate courses. The government also ordered Telegram to disable message-editing features until June 30 and removed numerous channels promoting cheating materials. The NTA maintains no test papers were leaked.