Tech News

1. Cybersecurity Threats:

   • Medusa ransomware uses a malicious driver, ABYSSWORKER, to disable anti-malware tools via a BYOVD attack. 👉 thehackernews.com
   • Two malicious VSCode Marketplace extensions were found deploying in-development ransomware. 👉 bleepingcomputer.com
   • Steam pulls a game demo, 'Sniper: Phantom's Resolution', after reports of it infecting systems with information-stealing malware. 👉 bleepingcomputer.com 👉 techcrunch.com
   • Fake Semrush ads were used in a phishing campaign targeting SEO professionals to steal their Google account credentials. 👉 bleepingcomputer.com
   • Ongoing attacks are exploiting critical vulnerabilities in the Cisco Smart Licensing Utility (CSLU), specifically CVE-2024-20439 and CVE-2024-20440. 👉 thehackernews.com
   • WordPress security plugin WP Ghost is vulnerable to a remote code execution bug. 👉 bleepingcomputer.com

2. Data Breaches and Privacy:

   • Oracle denies a data breach after a hacker claimed to be selling 6 million data records allegedly stolen from Oracle Cloud SSO login servers. 👉 bleepingcomputer.com
   • A student loan breach exposed 2.5 million records. 👉 threatpost.com
   • Meta settles a UK lawsuit by agreeing not to track the plaintiff, resolving a 'right to object to ad-tracking' claim. 👉 techcrunch.com

3. AI and Machine Learning:

   • Meta has revenue-sharing agreements with Llama AI model hosts. 👉 techcrunch.com
   • Tencent unveils Hunyuan T1, a new AI model that rivals DeepSeek's R1. 👉 scmp.com
   • Anthropic appears to be using Brave to power web search for its Claude chatbot. 👉 techcrunch.com
   • OpenAI, in partnership with MIT, releases its first study on how ChatGPT use affects emotional well-being. 👉 technologyreview.com
   • Microsoft is holding a special AI media event to celebrate 50 years. 👉 techmeme.com
   • A new unit in North Korea focuses on AI hacking, per report. 👉 techcrunch.com

4. Vulnerabilities and Exploits:

   • Veeam patched a critical RCE vulnerability, CVE-2025-23120, in its Backup & Replication software. 👉 bleepingcomputer.com 👉 thehackernews.com
   • CISA has warned U.S. federal agencies to secure their networks against attacks exploiting a high-severity vulnerability in NAKIVO's Backup & Replication software. 👉 bleepingcomputer.com
   • The compromise of GitHub Action tj-actions/changed-files has impacted 218 repositories exposing secrets due to the supply chain attack. 👉 bleepingcomputer.com
   • Hackers are ramping up attacks using year-old ServiceNow security bugs to break into unpatched systems. 👉 techcrunch.com
   • Firewall Bug Under Active Attack Triggers CISA Warning. 👉 threatpost.com

5. Economic and Financial News:

   • The crypto-lending industry is staging a comeback as Cantor Fitzgerald launches a $2B Bitcoin financing business. 👉 bloomberg.com^$
   • The U.S. Treasury Department has announced that it's removing sanctions against Tornado Cash. 👉 thehackernews.com
   • The agency charged with safety of cribs, carbon monoxide detectors etc. is unconstitutional . 👉 wapo.st

6. Government and Policy:

   • Democratic senators helping Trump's strongest Senate allies repeal Section 230 could give the Trump administration unprecedented power to control online speech. 👉 techdirt.com
   • HHS Secretary Robert F. Kennedy Jr. praises cell phone restrictions in schools, saying their electromagnetic radiation causes neurological and cellular damage. 👉 nbcnews.com
   • X suspends accounts belonging to opposition figures in Turkey, amid protests. 👉 politico.eu
   • The UK urges critical organizations to adopt quantum cryptography by 2035. 👉 bleepingcomputer.com

7. Business and Corporate News:

   • Amazon is pushing to cut bureaucracy by reducing management layers. 👉 businessinsider.com^$
   • The Bot Company, co-founded by ex-Cruise CEO Kyle Vogt, raised $150M at a $2B valuation. 👉 reuters.com
   • Yahoo CEO Jim Lanzone says the company is still in “building mode” on its 30th anniversary. 👉 wired.com
   • AMD vies for a bigger chunk of the AI market. 👉 cnbc.com
   • Intel reorganizes Intel Foundry leadership as EVP Ann Kelleher plans to retire later this year. 👉 tomshardware.com

8. Apple:

   • Apple's latest iOS 18.3.2 update is automatically re-enabling its Apple Intelligence feature. 👉 macrumors.com
   • Kuo: A20 chips in iPhone 18 models will be made using TSMC's 2nm process. 👉 macrumors.com

9. Israel Defense Tech:

   • Israel-based Kela, which develops tech for integrating AI, sensors, and edge devices into existing military systems, raised a $28M Series A and a $11M seed. 👉 en.globes.co.il

10. Cloud Security:

    • Cloudflare now blocks all unencrypted traffic to its API endpoints. 👉 bleepingcomputer.com
    • Amazon wants the Consumer Product Safety Commission deemed ‘unconstitutional’. 👉 engadget.com

11. Other Security News:

    • Microsoft Trust Signing service abused to code-sign malware. 👉 bleepingcomputer.com
    • Microsoft is investigating an Exchange Online bug mistakenly quarantining user emails. 👉 bleepingcomputer.com
    • New Betruger ‘multi-function’ backdoor linked to RansomHub operation. 👉 bleepingcomputer.com
    • UAT-5918 Targets Taiwan's Critical Infrastructure Using Web Shells and Open-Source Tools. 👉 thehackernews.com
    • Kaspersky Links Head Mare to Twelve, Targeting Russian Entities via Shared C2 Servers. 👉 thehackernews.com
    • The U.S. needs to investigate cyberweapons. 👉 threatpost.com
    • Palo Alto Networks’ PAN-OS is under active attack and needs to be patched ASAP. 👉 threatpost.com
    • Cybercriminals Are Selling Access to Chinese Surveillance Cameras. 👉 threatpost.com

12. Podcast:

    • Sexually explicit videos have appeared on Spotify's top podcast charts, violating the company's terms of use. 👉 bloomberg.com^$

13. General Tech Trends:

    • The 20 hottest open source startups of 2024. 👉 techcrunch.com
    • iNspiren, which provides workflow and staffing tech and AI-based fall detection for senior living facilities, raised a $35M Series A led by Avenir. 👉 fiercehealthcare.com

14. Cloud Security:

    • How to Protect Your Business from Cyber Threats: Mastering the Shared Responsibility Model. 👉 thehackernews.com

15. Cyber Espionage:

    • China-Linked APT Aquatic Panda: 10-Month Campaign, 7 Global Targets, 5 Malware Families. 👉 thehackernews.com

16. Application Security Posture Management (ASPM):

    • Unite Dev and Sec with ASPM. 👉 thehackernews.uk

17. Cyber Skills at SANS Security West 2025:

    • Cutting edge, expert-led training to boost your career. Train in-person to get a $3,240 cyber-pro pass! 👉 thehackernews.uk

18. DOGE and Social Security Administration:

    • Federal judge blocks DOGE’s access to Social Security Administration’s banks of personal information. 👉 techcrunch.com

19. Email Security Attacks:

    • Learn how email attacks are evolving in 2021. 👉 threatpost.com

20. Telecom Fraudsters:

    • Telegram Fraudsters Ramp Up Forged COVID-19 Vaccine Card Sales. 👉 threatpost.com

21. Newsmaker Interviews:

    • Apple security expert Patrick Wardle discusses how cybercriminals are stepping up their game in targeting Apple users with new techniques and cyberattacks. 👉 threatpost.com

22. Business Continuity:

    • Explore future-proofing business continuity with BCDR trends and challenges for 2025. 👉 thehackernews.com

1742688600000