July 2025
287 posts. Browse all months
- Phishing with Proofpoint: Cyber attack disguises itself as a security link
Cybercriminals are using Proofpoint’s link wrapping system to carry out targeted phishing attacks. The attackers exploit Proofpoint’s protection to make …
- Cyber Threats Surge in Australia, Aon Warns of Growing AI-Driven Risks
Aon’s 2025 Cyber Risk Report highlights the growing impact of AI-enabled cyber attacks and increasing exposure from third-party technology supply chains. The …
- Dark Web Profile: SafePay Ransomware - SOCRadar® Cyber Intelligence Inc.
SafePay, a ransomware group active since September 2024, primarily targets North America and Western Europe, avoiding CIS countries. They use stolen …
- Bill C-8 revives Canadian cyber security reform | BLG
Canada’s Carney government has revived expansive cybersecurity rules under Bill C-8, strengthening compliance requirements for federally regulated critical …
- Ransomware up 179%, credential theft up 800%: 2025’s cyber onslaught intensifies | CSO Online
Flashpoint’s midyear threat intelligence report reveals cybercriminals have intensified attacks in the first half of 2025, with credential theft surging 800% …
- Auto-Color Backdoor: How Darktrace Thwarted a Stealthy Linux Intrusion
Darktrace identified and contained an Auto-Color backdoor malware attack on a US chemicals company in April 2025, exploiting CVE-2025-31324 in SAP NetWeaver to …
- Russian Hackers Pose as Cyber Firm to Spy on Embassies - Bloomberg
A Russian hacking group, Turla, impersonated Kaspersky to spy on foreign embassies in Moscow. Using Russian internet service providers, they redirected …
- Hackers plant 4G Raspberry Pi on bank network in failed ATM heist
The UNC2891 hacking group (LightBasin) conducted a sophisticated hybrid attack on a bank using a 4G-equipped Raspberry Pi physically connected to the ATM …
- Kyrgyzstan To Control International Internet Access - Barron’s
Kyrgyzstan has nationalized international internet traffic for one year, granting a state monopoly to the state-run firm Elkat. The move, effective August 15, …
- Palo Alto Networks security advisory (AV25-467) - Canadian Centre for Cyber Security
Palo Alto Networks published a security advisory on July 28, 2025, addressing a vulnerability in GlobalProtect App 6.2 Linux versions prior to 6.2.9, as well …
- 2025 Unit 42 Global Incident Response Report: Social Engineering Edition
Palo Alto Networks’ Unit 42 reports that social engineering dominated initial access vectors between May 2024-2025, evolving into a highly reliable and …
- Apple Patches Safari Vulnerability Also Exploited as Zero-Day in Google Chrome
Apple released security updates for its software portfolio, including a fix for a vulnerability exploited as a zero-day in Google Chrome. The vulnerability, …
- Minnesota Activates National Guard in Response to Cyberattack - SecurityWeek
Minnesota Governor Tim Walz activated the National Guard to assist the City of Saint Paul in responding to a cyberattack. The attack, which targeted the city’s …
- Flaw in Vibe Coding Platform Base44 Exposed Private Enterprise Applications - SecurityWeek
A critical authentication bypass vulnerability was discovered in the vibe coding platform Base44, allowing unauthorized access to private applications and …
- Cost of Data Breach in US Rises to $10.22 Million, Says Latest IBM Report - SecurityWeek
The global average cost of a data breach fell to $4.44 million, while the US average rose to a record $10.22 million. The report highlights the increasing …
- TrickBot Behind More Than $724 Million in Crypto Theft and Extortion
Akamai’s Ransomware Report 2025 highlights the rise of quadruple extortion, where cybercriminals use data encryption, DDoS attacks, and third-party harassment …
- Chinese Firms Linked to Silk Typhoon Filed 15+ Patents for Cyber Espionage Tools
Chinese companies linked to the state-sponsored hacking group Silk Typhoon have been identified as behind over a dozen technology patents for cyber espionage …
- Google Chrome security advisory (AV25-465) - Canadian Centre for Cyber Security
Google Chrome security advisory (AV25-465) addresses vulnerabilities in Chrome for Desktop versions prior to 138.0.7204.183/.184 (Windows/Mac) and …
- SonicWall security advisory (AV25-466) - Canadian Centre for Cyber Security
SonicWall published a security advisory on July 29, 2025, addressing a vulnerability in Gen7 hardware and virtual Firewalls. Users are advised to review the …
- Inc Ransomware Claims 1.2TB Data Breach at Dollar Tree
INC Ransomware claims responsibility for a data breach at Dollar Tree, stealing 1.2TB of sensitive data including passport copies, payroll forms, and legal …
- Hunt for Weak Spots in Your Wireless Network with Airodump-ng from the Aircrack-ng Suite - Black Hills Information Security, Inc.
Airodump-ng, part of the Aircrack-ng suite, is a powerful tool for wireless network reconnaissance. It helps identify access points, including hidden ones, and …
- It’s Official: Palo Alto Networks to Buy CyberArk for $25B
Palo Alto Networks announced a $25 billion acquisition of CyberArk, marking its entry into the identity security market. The deal, expected to close in early …
- Zscaler ThreatLabz Report: Ransomware Data Theft Surges to 238 TB in One Year
Zscaler’s 2025 ThreatLabz Ransomware Report reveals a dramatic escalation in global ransomware activity, with data theft volumes skyrocketing 92% year‑over‑year …
- SafePay Ransomware Group Threatens to Leak 3.5 TB of Ingram Micro Data
The SafePay ransomware group has set an August 1 deadline to leak 3.5 TB of data stolen from global IT distributor Ingram Micro, escalating a high‑profile …
- Lovense Zero‑Day Flaw Exposes User Emails, Raising Risks of Doxxing and Harassment
Security researchers have discovered a zero‑day flaw in the Lovense connected sex toy platform that allows attackers to obtain a user’s email address by knowing …
- Scattered Spider Targets Snowflake Data in Sophisticated Social Engineering Attacks
Scattered Spider, a cybercriminal group notorious for its disruptive campaigns, is now focusing on victims’ Snowflake data storage environments, exploiting …
- ChatGPT Agent Passes “I Am Not a Robot” Test, Stirring Debate on CAPTCHA’s Future
OpenAI’s new ChatGPT Agent, designed to perform multistep tasks within a sandboxed browser environment, has demonstrated the ability to click through …
- Gunra Ransomware Expands With Powerful Linux Variant
Gunra ransomware has unveiled a sophisticated Linux variant, marking a significant expansion beyond its original Windows-focused operations. First observed in …
- Cyberattack on Orange Disrupts Telecom Services Across France
Orange, France’s largest telecom provider and one of Europe and Africa’s leading mobile service companies, has confirmed a cyberattack on one of its internal …
- Why Palo Alto Networks Is Eyeing a $20B+ Buy of CyberArk
Palo Alto Networks is considering a $20 billion acquisition of CyberArk, a significant departure from its previous M&A strategy of acquiring startups. This …
- Cyber Threat Intelligence Report – Jul. 29, 2025
Incident: Microsoft SharePoint ToolShell zero-day chain exploited globally Date of Incident (ET): Jul. 18-29, 2025 Date of Disclosure/Publication (ET): Jul. 28, …
- Existential Dread in 2025: SonicWall SMA100 Vulnerabilities Highlight Old-School Risks
Researchers at watchTowr Labs have uncovered three serious vulnerabilities in SonicWall’s SMA100 series, all exploitable before authentication and stemming from …
- UNC3886: Revisiting Tactics of a Persistent APT Targeting Critical Infrastructure
UNC3886, a sophisticated advanced persistent threat (APT) group first reported in 2022, continues to pose significant risks to critical infrastructure across …
- Sploitlight: macOS Vulnerability Exposes Apple Intelligence Data
Microsoft Threat Intelligence has uncovered a macOS vulnerability, dubbed “Sploitlight,” that could allow attackers to bypass Apple’s Transparency, Consent, and …
- Naval Group Probes Alleged 1TB Data Leak Amid Extortion Threats
France’s state-owned defence contractor Naval Group is investigating a reported cyberattack following the leak of 1TB of data on a hacking forum. The threat …
- When Threat Intelligence Overload Becomes a Security Risk
A new study commissioned by Google Cloud and conducted by Forrester Consulting highlights a growing paradox in cybersecurity: organizations are awash in threat …
- Pro-Ukraine hacktivists claim cyberattack on Russian Airline Aeroflot that caused the cancellation of +100 flights
Ukrainian group Silent Crow and Belarusian Cyber-Partisans claimed responsibility for a devastating cyberattack on July 28, 2025, that crippled Russian …
- AI Coding Assistants Cause Data Loss in Back-to-Back Failures
Two major AI coding assistants — Google’s Gemini CLI and Replit — recently triggered catastrophic data loss, exposing risks in the growing field of “vibe …
- Muddled Libra Evolves into Enterprise-Scale Cyber Threat
Cybercrime group Muddled Libra — also known as Scattered Spider — has evolved from small-scale social engineering scams into highly organized, enterprise-scale …
- Growing Concerns Over AI’s Impact on Mental Health
As artificial intelligence becomes more integrated into daily life, concerns are rising about its potential effects on mental health. Recent cases highlight …
- Homograph Email Attacks Use Lookalike Characters to Evade Detection
Threat actors are increasingly using homograph attacks — swapping Latin characters with visually similar Cyrillic, Greek or other Unicode characters — to trick …
- Scattered Spider Hackers Exploit VMware ESXi Without Vulnerabilities
The hacker group Scattered Spider has intensified its attacks on U.S. companies in the retail, airline, transportation and insurance sectors by targeting VMware …
- Chaos Ransomware Group Emerges Following BlackSuit Takedown
A new ransomware group called Chaos has quickly surfaced following the international law enforcement takedown of BlackSuit, highlighting the recurring nature of …
- Big News in AI: GPT‑5 Is Imminent
OpenAI is reportedly preparing to launch GPT‑5 in early August 2025, according to multiple reports. While the timing appears likely, the company has not yet …
- Hacker plants three strains of malware in a Steam Early Access game called Chemia — security company found crypto-jacking infostealers and a backdoor to install yet more malware in the future | Tom’s Hardware
Cyber threat intelligence firm Prodaft discovered that “Chemia,” a survival crafting game previously available through Steam’s Early Access program, contained …
- Emerging Threat Actor: Warlock Ransomware
The Warlock ransomware operation emerged in June 2025 through a Russian cybercrime forum and is linked to China-based actor Storm-2603, with at least 11 …
- Flaw Allowing Website Takeover Found in WordPress Plugin With 400k Installations - SecurityWeek
The popular Post SMTP WordPress plugin, used by over 400,000 websites for email delivery, contains a critical vulnerability (CVE-2025-24000) that allows any …
- China-linked group Fire Ant exploits VMware and F5 flaws since early 2025
China-linked cyberespionage group Fire Ant has been exploiting VMware and F5 vulnerabilities since early 2025 to breach secure systems, according to Sygnia. …
- Scattered Spider Hijacks VMware ESXi to Deploy Ransomware on Critical U.S. Infrastructure
The Scattered Spider cybercrime group is conducting sophisticated attacks against VMware ESXi hypervisors in North America’s retail, airline, and …
- Critical Flaws in Niagara Framework Threaten Smart Buildings and Industrial Systems Worldwide
Cybersecurity researchers at Nozomi Networks Labs have identified over a dozen critical vulnerabilities in Tridium’s Niagara Framework, a widely-used building …
- Arizona Woman Jailed for Helping North Korea in $17M IT Job Scam
Christina Marie Chapman, a 50-year-old Arizona woman, was sentenced to 8.5 years in prison for orchestrating a sophisticated fraud scheme that helped North …
- Allianz Life data breach exposed the data of most of its 1.4M customers
On July 16, 2025, Allianz Life confirmed a significant data breach affecting the majority of its 1.4 million customers after a threat actor used social …
- State-Sponsored Exploits: The Microsoft SharePoint Breach and Its Fallout
A sophisticated cyberattack linked to Chinese nation-state actors has compromised multiple U.S. federal agencies, including the Department of Homeland Security …
- Understanding HTTP 451: Unavailable for Legal Reasons
In today’s digital landscape, where access to information is often taken for granted, some barriers are not technical glitches but legal imperatives. One such …
- AI-Powered Phishing: How Deepfakes And Gen AI Are Creating The Perfect Scam
AI-powered phishing, utilizing deepfakes and generative AI, is revolutionizing cybercrime. This new form of deception, exemplified by voice scams targeting …
- No Patch for Flaw Exposing Hundreds of LG Cameras to Remote Hacking - SecurityWeek
Hundreds of LG Innotek LNV5110R security cameras are vulnerable to remote hacking due to an authentication bypass vulnerability. The flaw, CVE-2025-7742, …
- Chinese Spies Target Networking and Virtualization Flaws to Breach Isolated Environments - SecurityWeek
A Chinese cyberespionage group, Fire Ant, is targeting VMware and F5 vulnerabilities to breach isolated environments. The group exploits vulnerabilities in …
- Overcoming Risks from Chinese GenAI Tool Usage
A recent study by Harmonic Security found that nearly 8% of employees in the US and UK are using generative AI tools developed in China, often without …
- Sophisticated Koske Linux Malware Developed With AI Aid - SecurityWeek
Cybercriminals used AI to develop the Koske Linux malware, designed for cryptocurrency mining. The malware, distributed through misconfigured JupyterLab …
- From Help Desk to Hypervisor: How UNC3944 Breached vSphere to Deliver Ransomware at Scale
Mandiant and Google Threat Intelligence have exposed a high-velocity cyberattack campaign led by UNC3944—a financially motivated threat group overlapping with …
- Hijacked NPM Package ‘is’ Exposes Millions in JavaScript Supply Chain Breach
A major open-source supply chain attack has compromised the NPM package is, which receives over 2.8 million weekly downloads, injecting malware that enables …
- ToolShell Fallout: Chinese Hackers Exploit Microsoft Zero-Day to Breach U.S. Nuclear Agency
A coordinated wave of cyberattacks leveraging a Microsoft SharePoint zero-day vulnerability, now tracked as the ToolShell exploit chain, has compromised over …
- Surging cyber threats: Comparative insights from 2025 reports
Reports from Cloudflare Radar, Imperva, Fastly, Akamai, Darktrace, Radware and Gcore highlight escalating cybersecurity risks in the first half of 2025, with …
- WhoFi: Researchers Use Wi-Fi Signal Distortions to Track People Without Devices
Researchers at La Sapienza University in Rome have developed a technique to track individuals using Wi-Fi signals, creating a unique biometric “fingerprint” …
- Healthcare Giant AMEOS Discloses Major Data Breach Impacting Patients and Staff Across Europe
The AMEOS Group, one of Central Europe’s largest private healthcare providers, disclosed a cybersecurity breach impacting its IT systems across Switzerland, …
- Phishing in Q2 2025: Microsoft Leads, Spotify Reemerges, and Booking.com Deception Surges
most trusted brands. Microsoft topped the list for the second quarter in a row, involved in 25 per cent of all brand phishing incidents, followed by Google (11 …
- 3 China Nation-State Actors Target SharePoint Bugs
Three China-linked threat groups—Linen Typhoon, Violet Typhoon, and Storm-2603—exploited two SharePoint Server vulnerabilities as zero-days before Microsoft …
- Coyote Trojan First to Use Microsoft UI Automation in Bank Attacks
Akamai researchers have identified a new Coyote banking trojan variant that represents the first observed malware actively exploiting Microsoft’s UI Automation …
- China Introduces National Cyber ID Amid Privacy Concerns
China has launched a voluntary National Online Identity Authentication Public Service aimed at protecting citizens’ online privacy by centralizing digital …
- 68% of Organizations Experienced Data Leakage From Employee AI Usage | Security Magazine
A Metomic survey reveals significant AI-related data security challenges despite organizational confidence. While 90% of respondents expressed confidence in …
- Researchers Found Nearly 600 Incidents of AI Fraud | Security Magazine
Menlo Security’s annual browser security report reveals a significant escalation in browser-based attacks, driven primarily by generative AI technologies. …
- Google Launches OSS Rebuild to Expose Malicious Code in Widely Used Open-Source Packages
Google has launched OSS Rebuild, an initiative designed to strengthen open-source package security and prevent software supply chain attacks. The project …
- Lumma Stealer Malware Returns After Takedown Attempt - SecurityWeek
The Lumma Stealer malware has re-emerged following a coordinated takedown by Microsoft and international law enforcement in May 2024, according to Trend Micro …
- Chinese Hackers' Evolution from Vandals to Strategists
Research Links Chinese Cyber Operations to 1990s Hacking Collective A new study from ETH Zurich researcher Eugenio Benincasa traces recurring patterns in …
- Introducing Lumo, the AI where every conversation is confidential | Proton
Proton Launches Lumo, a Privacy-Focused AI Assistant Swiss privacy company Proton has introduced Lumo, an AI assistant designed with enhanced privacy …
- Sophos security advisory (AV25-443) - Canadian Centre for Cyber Security
Sophos published security advisories on July 21, 2025, addressing critical vulnerabilities in Sophos Firewall versions v21.0 GA and v21.5 GA. Users and …
- Dell Says Data Leaked by Hackers Is Fake - SecurityWeek
Dell confirmed a compromise of a demo environment containing synthetic data. The company stated the leaked information is either synthetic, publicly available, …
- Mozilla security advisory (AV25-442) - Canadian Centre for Cyber Security
Mozilla published security advisories on July 22, 2025, addressing vulnerabilities in Firefox for iOS, Firefox ESR, and Firefox. Users and administrators are …
- Joint Advisory Issued on Protecting Against Interlock Ransomware | CISA
A joint Cybersecurity Advisory was issued to protect against Interlock ransomware. It highlights indicators of compromise and tactics, techniques, and …
- Agentic AI: From automation to autonomous action
Agentic AI is the next evolution in business technology, where autonomous systems don’t just respond to commands but independently manage entire workflows to …
- Credential Theft and Remote Access Surge as AllaKore, PureRAT, and Hijack Loader Proliferate
Threat actors are targeting Mexican organizations with a modified version of AllaKore RAT and SystemBC, delivered through phishing or drive-by compromises. The …
- Cisco Confirms Active Exploits Targeting ISE Flaws Enabling Unauthenticated Root Access
Cisco confirmed active exploitation of critical vulnerabilities in Identity Services Engine (ISE) and ISE Passive Identity Connector (ISE-PIC). The …
- New U.S. Rule Mandates Cybersecurity Controls Across the Marine Transportation System
On January 17, 2025, the U.S. Coast Guard issued a final rule requiring vessels, Outer Continental Shelf (OCS) facilities, and Maritime Transportation Security …
- Shutdown season: the Q2 2025 Internet disruption summary
In Q2 2025, Cloudflare observed Internet shutdowns in Libya, Iran, Iraq, Syria, and Panama, primarily attributed to government actions and protests. A …
- Dior Says Personal Information Stolen in Cyberattack - SecurityWeek
Dior recently discovered unauthorized access to a database containing customer information, including names, addresses, and Social Security numbers. The breach …
- China-Backed APT41 Attack Surfaces in Africa
China-sponsored cyber-espionage group APT41 targeted an African IT company, a departure from their usual focus on Taiwanese and US organizations. The attack, …
- The CISO code of conduct: Ditch the ego, lead for real | CSO Online
The article highlights the need for a change in the CISO role, emphasizing the importance of integrity and accountability over influence and ego. It criticizes …
- Microsoft ‘digital escorts’ reveal crucial US counterintelligence blind spot | CSO Online
The article describes a security risk discovered in Microsoft’s support practices for US government cloud systems. The article highlights that Microsoft …
- Data Shows 10% of Employees Account for 73% of Observed Cyber Risk Behaviours
A new data-driven analysis from the 2025 State of Human Risk Management Insight Report reveals that risky cybersecurity behaviour in enterprises is highly …
- Cursor’s Denylist Exposes The Risks Of Agentic AI
Cursor, an AI-based code editor, uses a denylist to prevent unauthorized commands from being executed by its AI agents. However, researchers found four ways to …
- Cybersecurity jobs available right now: July 22, 2025 - Help Net Security
A variety of cybersecurity jobs are available, including CISO, Cyber Security Engineer, and Cyber Security Incident Responder. These roles involve developing …
- UK blames Russia’s infamous ‘Fancy Bear’ group for Microsoft cloud hacks | CSO Online
The article describes the UK’s National Cyber Security Centre’s (NCSC) attribution of recent cyberattacks to the Russian Fancy Bear hacking group. The NCSC …
- ISC BIND security advisory (AV25-440) - Canadian Centre for Cyber Security
ISC published security advisories on July 16, 2025, addressing vulnerabilities in ISC BIND 9 versions 9.11.3-S1 to 9.21.9. Users and administrators are advised …
- Grafana security advisory (AV25-439) - Canadian Centre for Cyber Security
Grafana published a security advisory on July 17, 2025, addressing vulnerabilities in versions 12.0.x, 11.6.x, 11.5.x, 11.4.x, and 11.3.x. Users and …
- World Leaks Claims Dell Data Breach, Leaks 1.3 TB of Files
The article describes a data breach allegedly involving Dell Technologies Inc. The article claims that the data breach was carried out by the World Leaks …
- Red Hat security advisory (AV25-438) - Canadian Centre for Cyber Security
Red Hat published security advisories between July 14 and 20, 2025, addressing vulnerabilities in multiple products, including updates for the Linux kernel. …
- Dell security advisory (AV25-437) - Canadian Centre for Cyber Security
Dell published security advisories between July 14 and 20, 2025, addressing vulnerabilities in multiple products. Users and administrators are encouraged to …
- Iran-Linked DCHSpy Android Malware Masquerades as VPN Apps to Spy on Dissidents
Cybersecurity researchers discovered new Android spyware, DCHSpy, likely linked to the Iranian Ministry of Intelligence and Security. The malware, disguised as …
- Dark Web Listings Expose Fujitsu, Baxter Kelly, AGX Financeira, and Belgian IT Platform to Alleged Breaches and Access Sales
SOCRadar has uncovered multiple new dark web listings indicating unauthorized access sales and sensitive data breaches impacting organizations in Japan, the …
- [Control systems] CISA ICS security advisories (AV25–435) - Canadian Centre for Cyber Security
CISA published ICS advisories addressing vulnerabilities in ABB, Hitachi, LITEON, and Leviton products. Users are advised to review the advisories, apply …
- China-Linked Hackers Launch Targeted Espionage Campaign on African IT Infrastructure
China-linked cyber espionage group APT41 is targeting government IT services in Africa. The group uses a combination of custom and publicly available tools, …
- Ubuntu security advisory (AV25-434) - Canadian Centre for Cyber Security
Ubuntu published security notices to address vulnerabilities in the Linux kernel affecting Ubuntu 20.04 LTS, 18.04 LTS, 24.04 LTS, 25.04, and 22.04 LTS. Users …
- Poland investigates sabotage after air traffic control disruption delayed flights
Poland is investigating a potential act of sabotage after a sudden outage in its air traffic control system disrupted flights at several major airports, …
- Fitify user data leaked including private photos
A data leak from the fitness app Fitify exposed hundreds of thousands of user files, including body scans and progress photos, stored in a publicly accessible …
- TSA Warns All Smartphone Users—Do Not Use These Networks
The Transportation Security Administration (TSA) has issued warnings for smartphone and PC users traveling through airports. The warnings include avoiding …
- Microsoft server hack hit about 100 victims in U.S., Germany
A cyber espionage operation targeting Microsoft server software compromised about 100 organizations, including government agencies and businesses. The attack, …
- Surveillance Firm Bypasses SS7 Defences to Track Users via IMSI Manipulation
A surveillance company has been exploiting a previously undetected method to bypass Signaling System 7 (SS7) protocol protections and extract location data of …
- CVE‑2025‑37103: Remote Access Risk in Aruba Instant On Access Points Due to Hardcoded Passwords - SOCRadar® Cyber Intelligence Inc.
HPE disclosed a critical vulnerability (CVE-2025-37103) in Aruba Instant On access points, allowing remote access through a hardcoded admin password. This …
- Startup Sells Stolen Data from 50 Million Devices to Debt Collectors, Lawyers, and Corporate Spies
404 Media article claims that : A private intelligence startup named Farnsworth Intelligence is drawing criticism for selling data harvested by infostealing …
- CrushFTP security advisory (AV25-432) - Canadian Centre for Cyber Security
CrushFTP published a security advisory on July 18, 2025, addressing a vulnerability in versions 10 prior to 10.8.5 and versions 11 prior to 11.3.4_23. The …
- Iranian APT Targets Android Users With New Variants of DCHSpy Spyware - SecurityWeek
Iranian APT MuddyWater has been deploying a new version of the DCHSpy Android spyware, disguised as VPNs or banking applications, since the start of the …
- Microsoft security advisory (AV25-433) - Canadian Centre for Cyber Security
Microsoft published a security advisory on July 19, 2025, addressing vulnerabilities in multiple products. Critical updates are available for SharePoint Server …
- Aflac Cyberattack Exposes Sensitive Customer Data in Wave of Insurance Industry Breaches
Aflac confirmed a cybersecurity incident on June 12, 2025, involving unauthorized access to its U.S. systems, potentially exposing personal data including …
- Chinese Malware Campaign Uses 2,800 Domains to Target Windows Users with Financially Motivated Attacks
A highly persistent Chinese threat actor has built a sprawling infrastructure of over 2,800 malicious domains since June 2023 to distribute Windows-specific …
- Huntress Uncovers ‘Crux’ Ransomware Variant Linked to BlackByte Group
According to a recent article by ITPro, cybersecurity researchers at Huntress have identified a new ransomware strain in active use, dubbed Crux, which appears …
- Dell Confirms Breach of Demo Platform by World Leaks Group; No Customer Data Affected
According to reporting by BleepingComputer and statements issued by Dell Technologies, the company has confirmed that its Customer Solution Centers platform was …
- Dutch Justice Department Severs Internet Access Following Citrix Exploit—May Stay Offline for Weeks
According to reporting by Dutch news outlet NOS, the Dutch Public Prosecution Service—part of the Netherlands' Department of Justice—disconnected from the …
- Louis Vuitton Investigated in Hong Kong Following Customer Data Leak Amid Global Cyber Incidents
Hong Kong’s privacy watchdog has launched an investigation into a data breach affecting approximately 419,000 Louis Vuitton customers. The leaked information …
- Jamie Siminoff’s Return to Ring Brings Back Police Video Requests—With a Twist
Jamie Siminoff, founder of Ring, returned to lead the company in April 2025 as a vice-president at Amazon. Upon his return, he reaffirmed the company’s original …
- Singapore Confirms Chinese State-Backed Hackers Targeting Critical Infrastructure
Singapore’s Coordinating Minister for National Security, K. Shanmugam, publicly confirmed that Chinese state-linked espionage group UNC3886 is actively …
- Popular JavaScript Libraries Compromised in Targeted Supply Chain Attack via Phishing
A targeted phishing attack led to the compromise of several widely used npm packages, including eslint-config-prettier—downloaded over 30 million times …
- Malicious AUR Packages Used to Spread CHAOS RAT on Arch Linux Systems
Three malicious packages uploaded to the Arch User Repository (AUR) — librewolf-fix-bin, firefox-patch-bin, and zen-browser-patched-bin — were found to install …
- Belgian Police Print Cybercrime Warnings on Bread Bags to Reach Offline Citizens
To combat rising internet crime, the Pajottenland police zone in Belgium has launched a creative awareness campaign by distributing 10,000 bread bags printed …
- China’s Expanding Cyber Offensive: Private Sector Partnerships and Persistent U.S. Espionage Campaigns
Despite recent U.S. indictments targeting Chinese cyberespionage, Chinese hacking campaigns are intensifying in scale, sophistication and persistence, targeting …
- Cloudflare Fends Off 7.3 Million DDoS Attacks in Q2 2025 Amid Surge in Hyper-Volumetric Threats
Cloudflare mitigated 7.3 million DDoS attacks in the second quarter of 2025, marking a steep drop from Q1 but revealing a troubling shift in attack …
- Critical Microsoft SharePoint Zero-Days Exploited in Global Attacks Despite Recent Patches
Critical zero-day vulnerabilities in Microsoft SharePoint (CVE-2025-53770 and CVE-2025-53771) are being actively exploited in the wild, bypassing earlier fixes …
- CoinDCX Hacked: Threat Actors Walk Away With $44 Million
Indian cryptocurrency exchange CoinDCX was hacked for $44 million due to a server breach compromising an internal account. The CEO stated that customer funds …
- Inquiry launched after identities of SAS soldiers leaked in fresh data breach | The Independent
inquiry has been launched after the identities of SAS soldiers were leaked in a data breach. Details of at least 20 special forces soldiers recruited from the …
- Nodejs security advisory (AV25-431) - Canadian Centre for Cyber Security
Node.js published security advisories for versions prior to v20.19.4, v22.17.1, and v24.4.1. Proof-of-concept exploit code is available for CVE-2025-27210.
- Missouri Adopts New Data Breach Notice Law – DataBreaches.Net
Missouri Governor has signed House Bill 974, “The Insurance Data Security Act,” establishing comprehensive data security standards, breach investigation …
- Nearly 2,000 MCP Servers Possess No Security Whatsoever
Nearly 2,000 Model Context Protocol (MCP) servers exposed on the internet are operating without any authentication or access controls, creating significant …
- UNG0002 Group Hits China, Hong Kong, Pakistan Using LNK Files and RATs in Twin Campaigns
A sophisticated cyber espionage group designated UNG0002 has conducted targeted attacks across China, Hong Kong, and Pakistan through two major campaigns …
- Authorities released free decryptor for Phobos and 8base ransomware
Japanese authorities have released a free decryptor tool for Phobos and 8Base ransomware families, enabling victims to recover encrypted files without paying …
- Threat actors scanning for apps incorporating vulnerable Spring Boot tool | CSO Online
Critical Spring Boot vulnerability (CVE-2025-48927) continues to face active exploitation attempts two months after discovery, with over 1,000 IP addresses now …
- Hackers Exploit FIDO MFA With Novel Phishing Technique
A new phishing technique, used by the PoisonSeed cybercrime group, bypasses FIDO2 physical keys by exploiting a cross-device sign-in feature. The attack …
- Botnet Abuses GitHub Repositories to Spread Malware
Threat actors are using public GitHub repositories to host and distribute malware through the Amadey botnet. The campaign, observed in April, reveals how fake …
- Using AI to Combat Cryptocurrency Phishing: A Case Study
I recently received what appeared to be an urgent security alert from “Trezor” claiming a $70M breach by North Korean hackers and demanding immediate “mandatory …
- U.S. House bans WhatsApp over cybersecurity concerns
In a move that underscores the rising tension between consumer-grade convenience and enterprise-grade security, the U.S. House of Representatives has banned …
- Government info security news, training, education - GovInfoSecurity
Chinese state-aligned hackers have intensified espionage efforts against Taiwan’s semiconductor ecosystem through spear-phishing campaigns. Three distinct …
- Golden dMSA Flaw Exposes Firms to Major Credential Theft
A critical cryptographic flaw in Windows Server 2025’s delegated Managed Service Accounts (dMSAs) allows attackers to generate passwords for all managed …
- Dermatology, Imaging Hacks Expose 3.3 Million Patients' PHI
Anne Arundel Dermatology and Radiology Associates of Richmond reported separate hacking incidents affecting over 3.3 million patients. The breaches, involving …
- Google sues alleged operators of BadBox 2.0 botnet infecting 10 million Android devices
Google has filed a landmark lawsuit against 25 unnamed individuals based in China, alleging they orchestrated a global Android botnet operation—dubbed BadBox …
- GhostContainer backdoor targets Microsoft Exchange servers in stealth espionage campaign
A newly uncovered malware dubbed GhostContainer is targeting Microsoft Exchange servers at high-value organizations in Asia, enabling covert access and data …
- Matanbuchus 3.0 loader enables stealth ransomware attacks using Quick Assist and Teams lures
A newly upgraded malware loader known as Matanbuchus 3.0 is enabling cybercriminals to conduct highly targeted ransomware attacks, employing advanced evasion …
- Co-op breach exposes data of 6.5 million members; officials cite Scattered Spider group
The Co-op Group has confirmed a cyberattack that compromised the personal data of its 6.5 million members, raising alarms across the British retail sector and …
- Russian-backed malware uses AI to automate real-time data theft on Windows
A newly discovered malware family, dubbed LameHug, is using artificial intelligence to dynamically generate system commands for exfiltrating data from infected …
- Canada, U.K. launch $5.7M cyber fund to protect digital commons
On June 15, 2025, Prime Ministers Mark Carney and Sir Keir Starmer unveiled a significant bilateral initiative: the Joint Canada–U.K. Common Good Cyber Fund. …
- Russia’s Mandatory IMEI Registration: A Double-Edged Sword for Security and Privacy
On January 1, 2025, Russia implemented a sweeping policy mandating the registration of all International Mobile Equipment Identity (IMEI) numbers to telecom …
- Adoption agency leaks over a million records | Malwarebytes
A security researcher discovered a publicly accessible database containing over a million records from the Gladney Center for Adoption. The database, …
- North Korea Floods npm Registry with Malware - GovInfoSecurity
North Korean threat actors uploaded 67 new malicious packages to the npm Registry, targeting open-source JavaScript developers. The malware, part of the …
- GhostContainer backdoor for Exchange servers | Securelist
A sophisticated backdoor, GhostContainer, was discovered targeting Exchange servers in government environments. The malware, likely exploiting a known N-day …
- Oracle Patches 200 Vulnerabilities With July 2025 CPU - SecurityWeek
Oracle released 309 security patches in its July 2025 Critical Patch Update, addressing approximately 200 unique CVEs. The patches include fixes for remotely …
- Episource Breach Exposes Health Data Of 5.4 Million Americans
Episource, a medical billing company, suffered a data breach affecting over 5.4 million individuals. The breach, which lasted a week, exposed sensitive patient …
- Chinese Hackers Breached U.S. National Guard Network For Nine Months
A Chinese state-backed hacking group, Salt Typhoon, infiltrated a U.S. Army National Guard network for nine months in 2024, exfiltrating sensitive data and …
- Cambodia Makes 1,000 Arrests in Latest Crackdown on Cybercrime - SecurityWeek
Cambodia arrested over 1,000 suspects in a crackdown on cybercrime operations, including foreign criminal groups involved in online scams. The arrests, …
- 14 Arrested in Romania for £47 Million UK Tax Phishing Scam
Fourteen individuals were arrested in Romania and the UK for a £47 million tax phishing scam. The scam involved tricking individuals into revealing personal …
- Leaked Shellter Elite Tool Now Enabling Infostealer Attacks Worldwide
The article describes how a leaked version of the Shellter Elite tool is being used by cybercriminals to carry out infostealer attacks. The leaked tool, …
- Iranian hack leaks data on Israeli soldiers, drone operators
Iranian hackers leaked a database containing thousands of resumes of Israelis who served in the Israeli military, including those in intelligence and elite …
- Turkey bans 8 global eSIM providers, curbing access for travelers - Turkish Minute
Article claims : Turkey’s Information and Communication Technologies Authority (BTK) blocked access to eight international eSIM providers, forcing travelers to …
- Black Yak faces 1.391 billion won penalty after massive data breach - CHOSUNBIZ
Black Yak, a mountaineering equipment company, was fined 1.391 billion won for a data breach involving 340,000 customer records. The breach occurred due to a …
- Paddy Power data breach: Everything you need to know | The Standard
A data breach at Paddy Power and Betfair, owned by Flutter Entertainment, affected up to 800,000 customers in Britain and Ireland. The breach involved …
- Canadian media giant Rogers named as victim of Chinese telecom hackers - Nextgov/FCW
Salt Typhoon, a Chinese threat group, has reportedly targeted Rogers Communications, Canada’s largest wireless provider, as part of a global cyber-espionage …
- AiLock ransomware: What you need to know | Fortra
AiLock is a ransomware-as-a-service operation that threatens to expose data breaches to regulators and competitors if victims do not pay the ransom within 72 …
- Threat Actor Targeting Indian Defense Sector | Security Magazine
APT36, a Pakistan-based threat actor, has launched a sophisticated cyber-espionage campaign targeting India’s defence sector, with a notable shift toward …
- ServiceNow security advisory (AV25-410) - Canadian Centre for Cyber Security
ServiceNow published a Security Advisory on July 8, 2025, addressing a vulnerability in the Now Platform. The Cyber Centre recommends reviewing the advisory …
- Citrix security advisory (AV25-411) - Canadian Centre for Cyber Security
Citrix published a security advisory on July 8, 2025, addressing a vulnerability in Citrix Virtual Apps and Desktops versions prior to 2503 and 2402 LTSR CU2. …
- GitLab security advisory (AV25-412) - Canadian Centre for Cyber Security
GitLab published a security advisory on July 9, 2025, addressing vulnerabilities in GitLab Community Edition and Enterprise Edition versions prior to 18.1.2, …
- Jenkins security advisory (AV25-413) - Canadian Centre for Cyber Security
Jenkins published a security advisory on July 9, 2025, addressing vulnerabilities in multiple plugins. The Cyber Centre recommends reviewing the advisory and …
- New AI Malware PoC Reliably Evades Microsoft Defender
A new AI malware PoC, trained using reinforcement learning, can reliably evade Microsoft Defender for Endpoint. The model, built on a general-purpose …
- Palo Alto Networks security advisory (AV25-414) - Canadian Centre for Cyber Security
Palo Alto Networks published security advisories on July 9, 2025, addressing vulnerabilities in multiple products. Updates are available for various versions …
- Serious Flaws Patched in Model Context Protocol Tools
Two critical vulnerabilities were discovered in tools related to the Model Context Protocol (MCP), a standard for connecting AI tools to external systems. The …
- Customer Names, Addresses & Device IDs Leaked in Paddy Power, Betfair Data Breach - CasinoBeats
Flutter Entertainment, the parent company of Paddy Power and Betfair, suffered a cyberattack compromising customer data. The breach involved usernames, email …
- Avantic Medical Lab hacked; patient data leaked by Everest Group – DataBreaches.Net
Avantic Medical Lab in Edison, NJ was hacked by Everest Group, who leaked 31GB of patient data on July 3rd. The leaked data included sensitive patient …
- Nearly 250,000 records leaked in major tax consultancy breach - here’s what we know | TechRadar
A Texas-based tax credit consulting agency, Rockerbox, inadvertently exposed sensitive data on thousands of customers through an open database. The database, …
- ‘This Is Scary’: Iranian Hack Leaks Data on Thousands of Israelis With Military Ties - National Security & Cyber - Haaretz.com
A database leak exposed CVs of Israelis with military ties, including classified roles, potentially endangering them as targets. The leak highlights the risks …
- 6 free onboarding checklists to set new hires up for success (+ extra tips) | Proton
A structured onboarding process, guided by a checklist, is crucial for new hire success and retention. The checklist should cover preboarding, first day …
- Italian police arrested a Chinese national suspected of cyberespionage on a U.S. warrant
Italian police arrested Zewei Xu, a Chinese national, at Milan’s Malpensa Airport on a U.S. warrant for cyberespionage. Xu is accused of being part of the …
- Phishing Scams Can Deceive Large Language Models | Security Magazine
Netcraft researchers found that large language models (LLMs) provide incorrect login URLs one-third of the time, with 30% leading to unregistered domains and …
- SAP security advisory – July 2025 monthly rollup (AV25-402) - Canadian Centre for Cyber Security
SAP published security advisories on July 8, 2025, addressing vulnerabilities in multiple products. The Cyber Centre recommends reviewing the provided web …
- Hackers ‘Shellter’ Infostealers in Red Team Tool
Threat actors are abusing a commercial AV/EDR evasion framework, Shellter, to distribute infostealer malware. The framework, typically used by red teamers, …
- Malicious Pull Request Targets 6,000+ Developers via Vulnerable Ethcode VS Code Extension
A supply chain attack targeted the Ethcode Visual Studio Code extension, compromising over 6,000 developers. The attack involved a malicious pull request that …
- CitrixBleed 2 exploitation started mid-June — how to spot it | by Kevin Beaumont | Jul, 2025 | DoublePulsar
CitrixBleed 2, a vulnerability in Citrix Netscaler, has been actively exploited since mid-June, allowing attackers to hijack sessions and bypass MFA. The …
- Stolen Identities Now The Biggest Threat In Cybersecurity
Identity-driven cyber threats have surged by 156% between 2023 and 2025, now accounting for 59% of all confirmed incidents. Phishing-as-a-Service (PhaaS) …
- End of life for Microsoft Office puts malicious macros in the security spotlight | CSO Online
The upcoming end-of-life deadlines for Microsoft Office 2016 and 2019, along with Exchange 2016 and 2019, highlight the importance of macro policies for …
- Pakistan’s Transparent Tribe Hits Indian Defence with Linux Malware
Pakistan’s APT36 Transparent Tribe is targeting Indian defense personnel and organizations using phishing and Linux malware. The malware, designed for BOSS …
- Ransomware negotiator investigated over criminal gang kickbacks | Malwarebytes
A former employee of ransomware negotiation company Digital Mint is under investigation for allegedly working with ransomware criminals and profiting from …
- Deconstructing RACF in z/OS and uncovering security issues | Securelist
This article delves into the Resource Access Control Facility (RACF) security package for IBM z/OS mainframes. It explores RACF’s internal architecture, …
- Infostealers-as-a-Service Push Identity Hacks to Record Highs
Identity-based cyberattacks have surged by 156% due to the availability of Phishing-as-a-Service (PhaaS) platforms and infostealer malware. These attacks, …
- Exploits, Technical Details Released for CitrixBleed2 Vulnerability - SecurityWeek
Technical details and exploit code for the CitrixBleed2 vulnerability (CVE-2025-5777) have been released. The vulnerability, impacting Citrix NetScaler, allows …
- SAP Patches Critical Flaws That Could Allow Remote Code Execution, Full System Takeover - SecurityWeek
SAP released 31 security notes, including six critical vulnerabilities. The most critical, CVE-2025-30012, allows unauthenticated attackers to execute …
- Hijacking Ollama’s Signed Installer for Code Execution | Imperva
A command injection vulnerability in Ollama’s signed installer allows attackers to execute malicious code. The vulnerability, coupled with a logic flaw in …
- CSIS issues espionage alert about suspect seeking sensitive information for Chinese intelligence - National | Globalnews.ca
The Canadian Security Intelligence Service (CSIS) has issued an espionage advisory to federal departments and universities warning about an individual …
- A Threat Actor Claimed McDonald’s Data Leak on the Dark Web - TechNadu
A threat actor claims to have leaked 300,000 McDonald’s login credentials, including email addresses and plaintext passwords, from multiple country-specific …
- Brazil’s central bank service provider hacked, $140M stolen – DataBreaches.Net
C&M Software, a Brazilian bank software vendor, was hacked after an employee sold login credentials for $2,700. The hackers stole $140 million from six …
- NightEagle APT Exploits Microsoft Exchange Flaw to Target China’s Military and Tech Sectors
A previously undocumented threat actor, NightEagle, has been targeting Microsoft Exchange servers in China’s government, defense, and technology sectors. The …
- Technical difficulties or cyber attack? Ingram Micro’s website goes down just in time for the holiday weekend • Graham Cluley
Article claims : Ingram Micro’s website has been down since Thursday morning, with the company citing technical difficulties. There is speculation that the …
- Critical Sudo bugs expose major Linux distros to local Root exploits
Two critical vulnerabilities in the Sudo command-line utility for Linux and Unix-like operating systems allow local users to escalate privileges to root. The …
- Faster Not Bigger: New R1T2 LLM Combines DeepSeek Versions
TNG Technology Consulting released DeepSeek-TNG R1T2 Chimera, a new large language model combining three previous DeepSeek releases. The model, designed for …
- Louis Vuitton Korea suffers cyberattack as customer data leaked – DataBreaches.Net
Louis Vuitton Korea suffered a cyberattack on June 8, compromising customer data. The breach, discovered this week, is the third LVMH brand attack in recent …
- Hacker leaks Telefónica data allegedly stolen in a new breach
A hacker is threatening to leak 106GB of data allegedly stolen from Telefónica in a breach the company denies. The hacker, part of the Hellcat Ransomware …
- Hunters International Ransomware Shuts Down, Offers Free Decryptors to Victims
Hunters International, a ransomware group known for targeting large enterprises, has announced its closure and is offering free decryption tools to all …
- Columbia University student data stolen by politically motivated hacker, university says | AP News
A politically motivated hacker breached Columbia University’s data systems, stealing student documents and causing network outages. The attack, which occurred …
- Toronto businesses lose thousands of dollars following POS thefts
Thieves are targeting Toronto businesses’ point-of-sale (POS) terminals, exploiting vulnerabilities in the machines to issue themselves large refunds. Security …
- Ontario health agency begins informing patients about months-old data breach | Globalnews.ca
A data breach at Ontario Health atHome, a provincial agency handling home and palliative care, compromised the data of 200,000 patients in March. The breach …
- Second espionage-linked cyberattack hits ICC, exposing persistent threats to global justice systems | CSO Online
The International Criminal Court (ICC) experienced a sophisticated cyberattack, the second in two years, during a NATO summit. The attack, which the ICC …
- Kelly Benefits data breach has impacted 550,000 people
Kelly Benefits, a benefits and payroll solutions firm, experienced a data breach impacting 550,000 individuals. The breach, which occurred in December 2024, …
- Europol shuts down Archetyp Market, longest-running dark web drug marketplace
Europol and Eurojust collaborated with six countries to shut down Archetyp Market, the longest-running dark web drug marketplace. The operation resulted in the …
- N Korean Hackers Drop NimDoor macOS Malware Via Fake Zoom Updates
North Korean hackers are targeting Web3 and cryptocurrency companies with a new macOS malware called NimDoor. The malware, delivered through fake Zoom updates, …
- Cisco Warns of Hardcoded Credentials in Enterprise Software - SecurityWeek
Cisco released patches for a critical vulnerability in its Unified CM and Unified CM SME communication management software. The issue, CVE-2025-20309, allows …
- Undetectable Android Spyware Backfires, Leaks 62,000 User Logins - SecurityWeek
A vulnerability in Catwatchful, an Android spyware posing as parental control software, exposed the credentials of over 62,000 customer accounts. The spyware, …
- Chinese Hackers Exploited Ivanti Flaw in France
A Chinese hacking operation exploited Ivanti flaws to target French government, defense, and media entities. The French National Agency for Information Systems …
- Iran’s ‘Robert’ Hack Targets Trump - and Tests US Cyber Gaps
Iranian-linked hackers, known as “Robert,” claim to have stolen 100GB of emails from Trump’s inner circle, including Susie Wiles, Lindsey Halligan, Roger …
- Brave New Kernel: Microsoft Previews Safer Windows Ecosystem
Microsoft is revamping Windows 11 to enhance system resilience, particularly in response to the July 2024 CrowdStrike outage. The changes include allowing …
- DEVMAN Ransomware: Analysis of New DragonForce Variant - ANY.RUN’s Cybersecurity Blog
A new ransomware variant, DEVMAN, appears to be a modified version of DragonForce, utilizing its codebase but with unique traits and identifiers. The DEVMAN …
- Qantas discloses cyberattack amid Scattered Spider aviation breaches
Qantas, Australia’s largest airline, disclosed a cyberattack that compromised a third-party customer servicing platform, potentially exposing data of 6 million …
- Australia’s Qantas says 6 million customer accounts accessed in cyber hack | Reuters
Qantas reported a cyber breach affecting six million customer accounts, including names, email addresses, phone numbers, birth dates, and frequent flyer …
- Iran Threatens To Release 100GB of Trump Aides' Emails: What To Know - Newsweek
An Iran-linked hacking group has threatened to release approximately 100 gigabytes of stolen emails from President Donald Trump’s longtime aides, including …