CYBERSEC BULLETIN – ONE PLACE FOR YOUR NEWS

New Variants of DCHSpy Spyware Used by Iranian APT to Target Android Users

Security Week • 2025-07-21

Other

Go to source

⚡ Weekly Recap: SharePoint 0-Day, Chrome Exploit, macOS Spyware, NVIDIA Toolkit RCE and More

The Hacker News • 2025-07-21

Vulnerabilities

Go to source

Veeam Recovery Orchestrator users locked out after MFA rollout

BleepingComputer • 2025-07-21

Other

Go to source

Learn 14 Languages from Babbel with this exclusive StackSocial deal

BleepingComputer • 2025-07-21

Other

Go to source

PoisonSeed Hackers Bypass FIDO Keys Using QR Phishing and Cross-Device Sign-In Abuse

The Hacker News • 2025-07-21

Other

Go to source

Exploited CrushFTP Zero-Day Provides Admin Access to Servers

Security Week • 2025-07-21

Vulnerabilities

Go to source

Microsoft Patches ‘ToolShell’ Zero-Days Exploited to Hack SharePoint Servers

Security Week • 2025-07-21

Vulnerabilities

Go to source

Marketing, Law Firms Say Data Breaches Impact Over 200,000 People

Security Week • 2025-07-21

Breaches

Go to source

Critical Unpatched SharePoint Zero-Day Actively Exploited, Breaches 75+ Global Organizations

The Hacker News • 2025-07-20

Other

Go to source

Malware Injected into 6 npm Packages After Maintainer Tokens Stolen in Phishing Attack

The Hacker News • 2025-07-20

Breaches

Go to source

New Phobos ransomware decryptor lets victims recover files for free

BleepingComputer • 2025-07-18

Ransomware

Go to source

1.4 Million Affected by Data Breach at Virginia Radiology Practice

Security Week • 2025-07-18

Go to source

New CrushFTP zero-day exploited in attacks to hijack servers

BleepingComputer • 2025-07-18

Other

Go to source

CitrixBleed 2: 100 Organizations Hacked, Thousands of Instances Still Vulnerable

Security Week • 2025-07-18

Go to source

Russian alcohol retailer WineLab closes stores after ransomware attack

BleepingComputer • 2025-07-18

Ransomware

Go to source

Settlement Reached in Investors’ Lawsuit Against Meta CEO Mark Zuckerberg and Other Company Leaders

Security Week • 2025-07-18

Go to source

Empirical Security Raises $12 Million for AI-Driven Vulnerability Management

Security Week • 2025-07-17

Go to source

LameHug malware uses AI LLM to craft Windows data-theft commands in real-time

BleepingComputer • 2025-07-17

Breaches

Go to source

Microsoft Teams voice calls abused to push Matanbuchus malware

BleepingComputer • 2025-07-17

Breaches

Go to source

VMware fixes four ESXi zero-day bugs exploited at Pwn2Own Berlin

BleepingComputer • 2025-07-17

Other

Go to source

SonicWall SMA devices hacked with OVERSTEP rootkit tied to ransomware

BleepingComputer • 2025-07-16

Vulnerabilities

Go to source

U.S. Army soldier pleads guilty to extorting 10 tech, telecom firms

BleepingComputer • 2025-07-16

Other

Go to source

Co-op confirms data of 6.5 million members stolen in cyberattack

BleepingComputer • 2025-07-16

Breaches

Go to source

Chrome Update Patches Fifth Zero-Day of 2025

Security Week • 2025-07-16

Go to source

United Natural Foods Projects Up to $400M Sales Hit from June Cyberattack

Security Week • 2025-07-16

Go to source

Google AI "Big Sleep" Stops Exploitation of Critical SQLite Vulnerability Before Hackers Act

The Hacker News • 2025-07-16

Vulnerabilities

Go to source

Sesame Workshop Regains Control of Elmo’s Hacked X Account After Racist Posts

Security Week • 2025-07-15

Go to source

State-Backed HazyBeacon Malware Uses AWS Lambda to Steal Data from SE Asian Governments

The Hacker News • 2025-07-15

Breaches

Go to source

Hyper-Volumetric DDoS Attacks Reach Record 7.3 Tbps, Targeting Key Global Sectors

The Hacker News • 2025-07-15

Other

Go to source

MITRE Unveils AADAPT Framework to Tackle Cryptocurrency Threats

Security Week • 2025-07-15

Go to source

New PHP-Based Interlock RAT Variant Uses FileFix Delivery Mechanism to Target Multiple Industries

The Hacker News • 2025-07-14

Other

Go to source

CitrixBleed 2 Flaw Poses Unacceptable Risk: CISA

Security Week • 2025-07-14

Go to source

Thirteen Romanians Arrested for Phishing the UK’s Tax Service

Security Week • 2025-07-14

Go to source

Windows 10 KB5062554 update breaks emoji panel search feature

BleepingComputer • 2025-07-13

Other

Go to source

NVIDIA shares guidance to defend GDDR6 GPUs against Rowhammer attacks

BleepingComputer • 2025-07-11

Other

Go to source

Cyberstarts Launches $300M Liquidity Fund to Help Startups Retain Top Talent

Security Week • 2025-07-11

Go to source

Rowhammer Attack Demonstrated Against Nvidia GPU

Security Week • 2025-07-11

Go to source

In Other News: Microsoft Finds AMD CPU Flaws, ZuRu macOS Malware, DoNot APT

Security Week • 2025-07-11

Go to source

Critical Wing FTP Server Vulnerability Exploited

Security Week • 2025-07-11

Go to source

Four Arrested in UK Over M&S, Co-op Cyberattacks

Security Week • 2025-07-10

Go to source

Bitcoin Depot breach exposes data of nearly 27,000 crypto users

BleepingComputer • 2025-07-09

Breaches

Go to source

Nippon Steel Subsidiary Blames Data Breach on Zero-Day Attack

Security Week • 2025-07-09

Go to source

How To Automate Ticket Creation, Device Identification and Threat Triage With Tines

The Hacker News • 2025-07-09

Other

Go to source

Unpatched Ruckus Vulnerabilities Allow Wireless Environment Hacking

Security Week • 2025-07-09

Go to source

Ruckus Networks leaves severe flaws unpatched in management devices

BleepingComputer • 2025-07-09

Other

Go to source

Overcoming Technical Barriers in Desktop and Application Virtualization

BleepingComputer • 2025-07-08

Other

Go to source

RondoDox Botnet Exploits Flaws in TBK DVRs and Four-Faith Routers to Launch DDoS Attacks

The Hacker News • 2025-07-08

Other

Go to source

Malicious Pull Request Targets 6,000+ Developers via Vulnerable Ethcode VS Code Extension

The Hacker News • 2025-07-08

Other

Go to source

Windows 10 KB5062554 cumulative update released with 13 changes, fixes

BleepingComputer • 2025-07-08

Other

Go to source

Malicious Chrome extensions with 1.7M installs found on Web Store

BleepingComputer • 2025-07-08

Other

Go to source

Exploits, Technical Details Released for CitrixBleed2 Vulnerability

Security Week • 2025-07-08

Go to source

Android malware Anatsa infiltrates Google Play to target US banks

BleepingComputer • 2025-07-08

Breaches

Go to source

CISA Adds Four Critical Vulnerabilities to KEV Catalog Due to Active Exploitation

The Hacker News • 2025-07-08

Other

Go to source

Researchers Uncover Batavia Windows Spyware Stealing Documents from Russian Firms

The Hacker News • 2025-07-08

Other

Go to source

SEO Poisoning Campaign Targets 8,500+ SMB Users with Malware Disguised as AI Tools

The Hacker News • 2025-07-07

Breaches

Go to source

TAG-140 Deploys DRAT V2 RAT, Targeting Indian Government, Defense, and Rail Sectors

The Hacker News • 2025-07-07

Other

Go to source

Ingram Micro outage caused by SafePay ransomware attack

BleepingComputer • 2025-07-05

Ransomware

Go to source

Taiwan NSB Alerts Public on Data Risks from TikTok, Weibo, and RedNote Over China Ties

The Hacker News • 2025-07-05

Other

Go to source

Police in Brazil Arrest a Suspect Over $100M Banking Hack

Security Week • 2025-07-05

Go to source

Google's AI video maker Veo 3 is now available via $20 Gemini

BleepingComputer • 2025-07-04

Other

Go to source

Hunters International ransomware shuts down after World Leaks rebrand

BleepingComputer • 2025-07-03

Ransomware

Go to source

Over 40 Malicious Firefox Extensions Target Cryptocurrency Wallets, Stealing User Assets

The Hacker News • 2025-07-03

Other

Go to source

Massive Android Fraud Operations Uncovered: IconAds, Kaleidoscope, SMS Malware, NFC Scams

The Hacker News • 2025-07-03

Breaches

Go to source

Cisco Warns of Hardcoded Credentials in Enterprise Software

Security Week • 2025-07-03

Go to source

IdeaLab confirms data stolen in ransomware attack last year

BleepingComputer • 2025-07-03

Ransomware

Go to source

Forminator WordPress Plugin Vulnerability Exposes 400,000 Websites to Takeover

Security Week • 2025-07-02

Go to source

CISA Warns of Two Exploited TeleMessage Vulnerabilities

Security Week • 2025-07-02

Go to source

Kelly Benefits Data Breach Impacts 550,000 People

Security Week • 2025-07-02

Go to source

Kelly Benefits says 2024 data breach impacts 550,000 customers

BleepingComputer • 2025-07-01

Breaches

Go to source

LevelBlue to Acquire Trustwave to Create Major MSSP

Security Week • 2025-07-01

Go to source

Google Patches Critical Zero-Day Flaw in Chrome’s V8 Engine After Active Exploitation

The Hacker News • 2025-07-01

Other

Go to source

Microsoft Removes Password Management from Authenticator App Starting August 2025

The Hacker News • 2025-07-01

Other

Go to source

Cato Networks Raises $359 Million to Expand SASE Business

Security Week • 2025-06-30

Go to source

Microsoft warns of Windows update delays due to wrong timestamp

BleepingComputer • 2025-06-30

Other

Go to source

Canada Gives Hikvision the Boot on National Security Grounds

Security Week • 2025-06-30

Go to source

Switzerland says government data stolen in ransomware attack

BleepingComputer • 2025-06-30

Ransomware

Go to source

⚡ Weekly Recap: Airline Hacks, Citrix 0-Day, Outlook Malware, Banking Trojans and more

The Hacker News • 2025-06-30

Breaches

Go to source

Microsoft to Preview New Windows Endpoint Security Platform After CrowdStrike Outage

Security Week • 2025-06-27

Go to source

In Other News: Norway Dam Hacked, $177M Data Breach Settlement, UNFI Attack Update

Security Week • 2025-06-27

Go to source

Russia’s throttling of Cloudflare makes sites inaccessible

BleepingComputer • 2025-06-27

Other

Go to source

Cyber Criminals Exploit Open-Source Tools to Compromise Financial Institutions Across Africa

The Hacker News • 2025-06-26

Vulnerabilities

Go to source

Ex-student charged over hacking university for cheap parking, data breaches

BleepingComputer • 2025-06-26

Other

Go to source

Critical Citrix NetScaler Flaw Exploited as Zero-Day

Security Week • 2025-06-26

Go to source

FTC approves $126 million in Fortnite refunds over ‘dark patterns’

BleepingComputer • 2025-06-26

Other

Go to source

CISA Adds 3 Flaws to KEV Catalog, Impacting AMI MegaRAC, D-Link, Fortinet

The Hacker News • 2025-06-26

Other

Go to source

Bipartisan Bill Aims to Block Chinese AI From Federal Agencies

Security Week • 2025-06-26

Go to source

Pro-Iranian Hacktivist Group Leaks Personal Records from the 2024 Saudi Games

The Hacker News • 2025-06-25

Other

Go to source

Code Execution Vulnerability Patched in GitHub Enterprise Server

Security Week • 2025-06-25

Go to source

Citrix Bleed 2 Flaw Enables Token Theft; SAP GUI Flaws Risk Sensitive Data Exposure

The Hacker News • 2025-06-25

Other

Go to source

FileFix attack weaponizes Windows File Explorer for stealthy commands

BleepingComputer • 2025-06-24

Other

Go to source

Identity Is the New Perimeter: Why Proofing and Verification Are Business Imperatives

Security Week • 2025-06-24

Go to source

APT28 Uses Signal Chat to Deploy BEARDSHELL Malware and COVENANT in Ukraine

The Hacker News • 2025-06-24

Breaches

Go to source

US House bans WhatsApp on staff devices over security concerns

BleepingComputer • 2025-06-24

Other

Go to source

Revil ransomware members released after time served on carding charges

BleepingComputer • 2025-06-23

Ransomware

Go to source

743,000 Impacted by McLaren Health Care Data Breach

Security Week • 2025-06-23

Go to source

How AI-Enabled Workflow Automation Can Help SOCs Reduce Burnout

The Hacker News • 2025-06-23

Other

Go to source

US Homeland Security warns of escalating Iranian cyberattack risks

BleepingComputer • 2025-06-23

Breaches

Go to source

WordPress Motors theme flaw mass-exploited to hijack admin accounts

BleepingComputer • 2025-06-21

Other

Go to source

OpenAI’s Sam Altman discusses GPT-5 release date

BleepingComputer • 2025-06-19

Other

Go to source

Microsoft 365 to block file access via legacy auth protocols by default

BleepingComputer • 2025-06-18

Other

Go to source

Last updated: Mon, 21 Jul 2025 23:01:38 GMT