Tech News

1. Data Breaches:

   • Adidas warns of a data breach after a customer service provider was hacked, with attackers gaining access to customer contact information but not payment details or passwords. 👉 bleepingcomputer.com
   • Major Jordanian and Kuwaiti bank has had it's data stolen, hackers claim. 👉 cybernews.com
   • A student loan breach has exposed 2.5 million records. 👉 threatpost.com
   • A US consumer trust organization breach exposed thousands of credit cards. 👉 cybernews.com
   • Marlboro-Chesterfield data breach impacts 235,000 patients. 👉 cybernews.com
   • New Jersey hospital hack exposes patients’ personal details. 👉 cybernews.com

2. Malware and Ransomware:

   • DragonForce ransomware operation abuses SimpleHelp in a managed service provider (MSP) supply chain attack, stealing data and deploying encryptors on downstream customer systems. 👉 bleepingcomputer.com
   • An Iranian national pleaded guilty to participating in the RobbinHood ransomware operation, which was used to breach the networks, steal data, and encrypt devices of U.S. cities and organizations in an attempt to extort millions of dollars over a five-year span, and now faces 30 years. 👉 bleepingcomputer.com 👉 cybernews.com
   • MathWorks, a MATLAB developer, confirms a ransomware attack as the cause behind their ongoing service outage. 👉 bleepingcomputer.com
   • A previously unknown Russian-backed cyberespionage group now tracked as Laundry Bear has been linked to a September 2024 Dutch police security breach. 👉 bleepingcomputer.com
   • A fake website advertising antivirus software from Bitdefender is being used to trick victims into downloading a remote access trojan called Venom RAT. 👉 thehackernews.com
   • Hackers have been using fake VPN and browser NSIS installers to deliver Winos 4.0 malware. 👉 thehackernews.com
   • Hackers are using TikTok videos to distribute Vidar and StealC Malware via ClickFix Technique. 👉 thehackernews.com
   • Cybercriminals are selling access to Chinese surveillance cameras. 👉 threatpost.com
   • Bumblebee malware SEO poisoning campaign is using more typosquatting domains mimicking other popular open-source projects to infect devices used by IT staff. 👉 bleepingcomputer.com

3. Government and Espionage:

   • Microsoft reveals Russian hackers breached 20+ NGOs using Evilginx phishing via fake Microsoft Entra pages. 👉 thehackernews.com
   • Russian Hackers Target Tajikistan Government with Weaponized Word Documents. 👉 thehackernews.com
   • Trump administration pauses all student visas, considers vetting new applicants' social media. 👉 townhall.com

4. Vulnerability and Patch Management:

   • Microsoft released software updates to fix 78 vulnerabilities, including five zero-day flaws under active exploitation. 👉 krebsonsecurity.com
   • Germany has raised alarm over a Windows Server 2025 flaw rated 9.9/10. 👉 cybernews.com
   • CISA has issued a warning regarding a firewall bug under active attack. 👉 threatpost.com
   • Windows Server emergency update fixes Hyper-V VM freezes, restart issues. 👉 bleepingcomputer.com

5. Data Misuse and Privacy Issues:

   • A Texas law will require Apple and Google app stores to verify users' ages. 👉 bloomberg.com^$ 👉 cybernews.com
   • Texas is poised to enforce age verification on Apple, Google app stores. 👉 reuters.com
   • State Department orders embassies to pause new student visa appointments as it moves to expand social media vetting. 👉 cnn.com
   • Meta wants to use your content to train its AI, and no GDPR will stop it. 👉 cybernews.com

6. Artificial Intelligence (AI) and Security:

   • AI may already be shrinking entry-level jobs in tech, new research suggests. 👉 techcrunch.com
   • Meta is reportedly splitting its AI team to build products faster. 👉 techcrunch.com
   • Anthropic launches a voice mode for Claude. 👉 techcrunch.com
   • OpenAI plans to ship an interesting ChatGPT product by 2026. 👉 bleepingcomputer.com
   • A Vibe coding company says Claude 4 reduced syntax errors by 25%. 👉 bleepingcomputer.com
   • Leak suggests xAI is getting ready to ship Grok 3.5. 👉 bleepingcomputer.com
   • ChatGPT Deep Research can now pull data from Dropbox and Box. 👉 bleepingcomputer.com
   • Researchers claim ChatGPT o3 bypassed shutdown in controlled test. 👉 bleepingcomputer.com
   • OpenAI may soon let you ‘sign in with ChatGPT’ for other apps. 👉 techcrunch.com
   • Google claims users find ads in AI search 'helpful'. 👉 bleepingcomputer.com
   • Mistral launches an API for agents, which can run code, make images, access docs, search the web, and “hand off” to other agents, similar to OpenAI's offerings. 👉 simonwillison.net
   • Is this the plan to use AI instead of humans? Cybercriminals target social media accounts with malware. 👉 threatpost.com
   • Zscaler agrees to acquire Red Canary, a provider of managed detection and response services, for an undisclosed sum; the deal is expected to close in August. 👉 cyberscoop.com
   • EU is investigating Pornhub, Stripchat, XNXX, and XVideos for potential child safety DSA violations “as a matter of priority”. 👉 wsj.com^$

7. DDoS Attacks and Botnets:

   • KrebsOnSecurity was hit with a near-record DDoS attack that clocked in at more than 6.3 terabits of data per second, appearing to be a test run for a massive new IoT botnet. 👉 krebsonsecurity.com
   • There is self-spreading malware Infects Docker Containers to Mine Dero Cryptocurrency. 👉 thehackernews.com

8. Online Scams and Fraud:

   • There are fake reservation Links Preying on Weary Travelers. 👉 threatpost.com
   • Employees Searching Payroll Portals on Google Tricked Into Sending Paychecks to Hackers. 👉 thehackernews.com
   • Hackers Are Calling Your Office: FBI Alerts Law Firms to Luna Moth's Stealth Phishing Campaign. 👉 thehackernews.com
   • A Texas firm recently charged with conspiring to distribute synthetic opioids in the United States is at the center of a vast network of companies in the U.S. and Pakistan. 👉 krebsonsecurity.com

9. Executive Departures at CISA:

   • Virtually all of the top officials at the Cybersecurity and Infrastructure Security Agency (CISA) have departed the agency or will do so this month, according to an email obtained by Cybersecurity Dive. 👉 cybersecuritydive.com

10. Financial News:

    • Stablecoin issuer Circle aims to raise up to $624M in its US IPO, offering 24M shares at $24-$26 each, valuing it at ~$5.65B, or ~$6.7B fully diluted, at the top of the range. 👉 bloomberg.com^$
    • European industrial groups Schneider, Siemens, ABB, and Legrand collectively added €151B in market value due to AI demand after ChatGPT's November 2022 launch. 👉 t.co
    • Salesforce agrees to acquire cloud data management company Informatica for ~$8B, set to close in its FY 2027, one year after an earlier deal fell through. 👉 bloomberg.com^$
    • Trump Media & Technology Group plans to sell ~$1.5B in stock and $1B in 0% convertible notes to buy bitcoin for its treasury, following Strategy's model. 👉 bloomberg.com^$
    • Xiaomi reports Q1 revenue up ~50% YoY to ~$15.5B, above ~$15.17B est., as it invests heavily in autonomous EVs and growing its smartphone business. 👉 bloomberg.com^$
    • Block plans to roll out bitcoin payments on Square in H2 2025; the system runs on the Lightning Network and lets merchants accept bitcoin via Square's hardware. 👉 cnbc.com

11. Telecoms:

    • The UK, which launched open banking in 2018, is seeing its fintech sector struggle to make open banking-powered payments a viable alternative to card payments. 👉 t.co

12. Quantum Computing:

    • Researcher: factoring 2048 bit RSA integers could be done with ~20x fewer noisy qubits than previously estimated, though still far beyond current quantum tech. 👉 decrypt.co

13. Cybercrime and Law Enforcement:

    • The 22-year-old former administrator of the cybercrime community Breachforums will forfeit nearly $700,000 to settle a civil lawsuit from a health insurance company whose customer data was posted for sale on the forum in 2023. 👉 krebsonsecurity.com
    • A 23-year-old Scottish man believed to be a member of the prolific Scattered Spider cybercrime group was extradited last week from Spain to the United States, where he is facing charges of wire fraud, conspiracy and identity theft. 👉 krebsonsecurity.com

14. Apple:

    • Apple is planning a dedicated app for video games on its devices, seeking to sell gamers and developers on the idea that it's a leader in the market. 👉 bloomberg.com^$
    • Apple acquires RAC7, the two-person studio behind the popular Apple Arcade game Sneaky Sasquatch, marking its first acquisition of a video game studio. 👉 digitaltrends.com
    • Meta launches a dedicated iPadOS app for WhatsApp, about 15 years after the messaging service and the first iPad launched. 👉 theverge.com
    • Sources on how Apple declined a deal from Elon Musk to use SpaceX instead of Globalstar for its iOS SOS feature and its 2015 plans to build satellite internet. 👉 theinformation.com
    • Apple says its App Store blocked $9B+ in fraudulent transactions over the past five years, with $2B in just 2024, and rejected ~2M risky app submissions in 2024. 👉 techcrunch.com

15. US Actions:

    • The US FTC's antitrust trial against Meta ends; Judge James Boasberg, who is presiding over the case, says he will work “expeditiously” to issue an opinion. 👉 nytimes.com^$
    • US stops scheduling visa interviews for foreign students while it expands social media vetting. 👉 apnews.com

16. CPUs:

    • Researchers expose new Intel CPU Flaws Enabling Memory Leaks and Spectre v2 Attacks. 👉 thehackernews.com

17. Web Browsers:

    • The Browser Company says it is pivoting away from its Arc browser to build AI-native browser Dia, citing Arc's complexity and limited mass-market appeal. 👉 browsercompany.substack.com
    • New Chrome Vulnerability Enables Cross-Origin Data Leak via Loader Referrer Policy. 👉 thehackernews.com
    • Google Chrome's Built-in Manager Lets Users Update Breached Passwords with One Click. 👉 thehackernews.com

1748391000000