Tech News

1. Data Breaches:

   • Allianz Life data breach impacted 1.1 million people after hackers stole personal information in a Salesforce data theft attack in July. 👉 bleepingcomputer.com
   • The Business Council of New York State (BCNYS) disclosed a data breach affecting 47,000 people after attackers stole personal, financial, and health information. (1 day ago) 👉 bleepingcomputer.com
   • A student loan breach exposed 2.5 million records. (1 year ago) 👉 threatpost.com

2. Malware and Botnets:

   • An Oregon man was arrested for operating "Rapper Bot," a DDoS botnet that took X offline in March 2025. 👉 krebsonsecurity.com 👉 wsj.com^$
   • A new Android malware wave hits banking via NFC relay fraud, call hijacking, and root exploits. 👉 thehackernews.com
   • Cybercriminals are selling access to Chinese surveillance cameras due to unpatched vulnerabilities. (1 day ago) 👉 threatpost.com
   • XenoRAT malware campaign hits multiple embassies in South Korea via malicious GitHub repositories. (1 day ago) 👉 bleepingcomputer.com
   • Attackers are exploiting a flaw in Apache ActiveMQ to deploy DripDropper malware on Cloud Linux systems and patching the vulnerability to prevent exploitation by other adversaries. 👉 thehackernews.com
   • New GodRAT Trojan targets trading firms using steganography and Gh0st RAT code. 👉 thehackernews.com
   • Microsoft Windows vulnerability is being exploited to deploy PipeMagic RansomExx malware. 👉 thehackernews.com
   • Malicious PyPI and npm packages are exploiting dependencies in supply chain attacks. 👉 thehackernews.com
   • An analysis has been made into ERMAC V3.0 banking trojan source code leak that exposes full malware infrastructure. 👉 thehackernews.com

3. Vulnerabilities and Exploits:

   • A public exploit for chained SAP flaws (CVE-2025-31324 and CVE-2025-42999) exposes unpatched systems to remote code execution. 👉 thehackernews.com
   • US CISA warns of firewall bug under active attack. (1 year ago) 👉 threatpost.com
   • Over 800 N-able servers remain unpatched against critical flaws that are actively being exploited. (2 days ago) 👉 bleepingcomputer.com
   • An appeals court says NLRB structure unconstitutional, in a win for SpaceX. 👉 techcrunch.com

4. Microsoft Security Updates:

   • Microsoft released updates to fix over 100 security flaws in Windows and other software, including a critical Exchange Server flaw (CVE-2025-53786) and a Kerberos authentication weakness (CVE-2025-53779). 👉 krebsonsecurity.com
   • Microsoft shared a workaround for Teams "couldn't connect" error. 👉 bleepingcomputer.com
   • August security updates break Windows recovery, reset, according to Microsoft. (1 day ago) 👉 bleepingcomputer.com
   • Microsoft Windows 11 and Windows Server 2025 updates may fail to install via WUSA, according to Microsoft. (2 days ago) 👉 bleepingcomputer.com

5. AI and Security:

   • An MIT report finds that 95% of GenAI pilots at companies have little to no financial impact, due to a "learning gap." 👉 fortune.com
   • Attackers use GenAI to create even harder-to-detect phishing threats. 👉 cybernews.com
   • Bill Gates is funding a $1 million competition to spur the use of AI to find innovative treatments for Alzheimer's disease. 👉 ft.com^$
   • DeepSeek releases V3.1, adding a longer context window, with few other details; Chinese media blames CEO Liang Wenfeng's perfectionism and bugs for R2's delay. 👉 bloomberg.com^$
   • Microsoft rolls out a COPILOT function in Excel for users in the Beta Channel, letting them use text prompts to categorize data, summarize feedback, and more. 👉 windowscentral.com
   • The White House launches an official TikTok account, with the aim of communicating President Trump's policies. 👉 reuters.com
   • A new AI-powered voice translation feature is being rolled out to all users on Facebook and Instagram globally. 👉 techcrunch.com
   • Tim Sweeney says the UK's mobile app store regulation lags “well behind” other countries. (1 day ago) 👉 t.co

6. Cybercrime and Law Enforcement:

   • US FTC sues ticket reseller Key Investment Group for evading Taylor Swift's Eras tour ticket limits. 👉 reuters.com
   • A Nebraska man gets 1 year in prison for $3.5M cryptojacking scheme. (2 days ago) 👉 bleepingcomputer.com
   • A “serial hacker” of 3,000 sites in the UK was sentenced to 20 months in prison. (2 days ago) 👉 bleepingcomputer.com

7. Mobile Security:

   • Apple expands iPhone 17 production in India for US-bound new models. 👉 bloomberg.com^$
   • The U.K. government has agreed to withdraw its order requiring Apple to create backdoor access to encrypted iCloud data following intervention from the Trump administration. 👉 reuters.com
   • The White House launches an official TikTok account, with the aim of communicating President Trump's policies. 👉 reuters.com
   • Fake travel reservation links prey on weary travelers. (1 year ago) 👉 threatpost.com
   • iPhone users are urged to update to patch 2 zero-days under attack. (1 year ago) 👉 threatpost.com

8. Business and Finance:

   • Databricks is finalizing a Series K at a $100B valuation. 👉 wsj.com^$
   • Bullish says it has received all $1.15B in capital raised from its IPO in stablecoins. 👉 coindesk.com
   • US Commerce Secretary Howard Lutnick says Intel must give the government an equity stake in the company in return for CHIPS Act funds. 👉 cnbc.com
   • SoftBank will make a $2 billion investment in Intel. 👉 cnbc.com
   • Austin-based Aalo Atomics, which is building a modular nuclear reactor and data center, set to finish construction in 2026, raised a $100M Series B led by Valor. 👉 businessinsider.com^$
   • Firecrawl, which offers an open-source web crawler for developers and AI agents, raised a $14.5M Series A led by Nexus Venture Partners. 👉 techcrunch.com
   • NYC-based Keychain, which makes AI-based software that helps manufacturers manage their product cycles, raised a $30M Series B led by Wellington Management and BoxGroup. 👉 techcrunch.com
   • Databricks, which offers AI and cloud solutions, will raise a Series K investment valuing the company at over $100 billion. 👉 cnbc.com

9. Cyber Espionage:

   • Threat actors are exploiting a nearly two-year-old security flaw in Apache ActiveMQ to gain persistent access to cloud Linux systems. 👉 thehackernews.com
   • Security researchers reveal details of the XenoRAT malware campaign targeting foreign embassies in South Korea to conduct espionage. (2 days ago) 👉 bleepingcomputer.com

10. Phishing and Social Engineering:

    • Mobile phishers target brokerage accounts in ramp-and-dump cashout scheme. 👉 krebsonsecurity.com
    • A former White House crypto policy executive has been hired as a strategic adviser by Tether. 👉 reuters.com
    • ""0ktapus"" Threat Group Victimizes 130 Firms. (1 year ago) 👉 threatpost.com
    • New Whitepaper on the Evolution of Phishing Attacks. 👉 pushsecurity.com
    • The Noodlophile malware campaign expands its global reach with copyright phishing lures. (2 days ago) 👉 thehackernews.com

11. Other Security News

    • Elastic rejects claims of a zero-day RCE flaw in Defend EDR. 👉 bleepingcomputer.com
    • Okta open-sources catalog of Auth0 rules for threat detection. 👉 bleepingcomputer.com
    • A new documentary series about cybercrime is airing next month on HBO Max, featuring an interview with KrebsOnSecurity.com. 👉 krebsonsecurity.com
    • EU's proposed Chatcontrol regulation threatens end-to-end encryption and privacy, raising concerns among digital rights advocates. (1 day ago)
    • Fake reservation links prey on weary travelers. (1 year ago) 👉 threatpost.com
    • New York court filing reveals that "The Trump administration is discussing a 10 percent stake in Intel." (1 day ago) 👉 cnbc.com
    • The US is exploring a stake in Intel to make it work "to drum up business," Treasury Secretary says. (1 day ago) 👉 businessinsider.com^$

12. Resources and Training:

    • A sponsored article that if you "build your Microsoft SQL skills before your next big project for $20 in this deal". (2 days ago) 👉 bleepingcomputer.com
    • Article to "get a head start in tech with this $30 course bundle deal". (2 days ago) 👉 bleepingcomputer.com
    • Experts welcome plans by the UK government to back down in Apple encryption battle but it's not quite over yet. (1 day ago) 👉 itpro.com
    • Experts welcome new UK government plans to back down in Apple encryption battle but it's not quite over yet. (1 day ago) 👉 the-independent.com

13. Cloud Security

    • The government may take a stake in Intel, but it's not about making money. (1 day ago) 👉 cnn.com
    • As more services move to the cloud, you need to take steps to ensure that your data is being protected. (1 year ago) 👉 kaspersky.com
    • In 2022 cloud security landscape, security researchers say you can expect to see data protection. (3 years ago) 👉 threatpost.com

14. Android Security

    • An overview and news that US spy chief says UK has dropped its Apple backdoor demand, that covers the security news related to android systems. (1 day ago) 👉 techcrunch.com
    • The world, from Google, on mobile data for Apple, also covers the android and encryption back door on the data and related systems. (1 day ago) 👉 cnet.com
    • Android data loss for over 92m fine, is shared as a result of court being upheld for these mobile systems. (1 day ago) 👉 pcmag.com

15. Google

    • Google is offering Play Store changes in the EU. 👉 bloomberg.com^$
    • Report: Nvidia H20-inspired chip in works for China. 👉 israelhayom.com
    • The government may take a stake in Intel, but it's not about making money. (1 day ago) 👉 cnn.com

1755648600000