Tech News

1. Data Breaches:

   • SaaS giant Workiva discloses a data breach following a Salesforce attack. 👉 bleepingcomputer.com
   • Financial services firm Wealthsimple discloses a data breach affecting an undisclosed number of customers. 👉 bleepingcomputer.com
   • Anuvu, an in-flight entertainment and connectivity service provider, has allegedly fallen victim to a hacker attack exposing Starlink users. 👉 cybernews.com
   • Texas sues PowerSchool over a massive data breach that exposed the personal information of 62 million students, including over 880,000 Texans. 👉 bleepingcomputer.com
   • Student loan breach exposes 2.5M records. 👉 threatpost.com (1 week ago)

2. Malware and Phishing Campaigns:

   • VirusTotal discovers a hidden malware phishing campaign in SVG files, which create convincing portals impersonating Colombia's judicial system to deliver malware. 👉 bleepingcomputer.com
   • AI-powered malware hit 2,180 GitHub accounts in an s1ngularity attack. 👉 bleepingcomputer.com
   • A new technique that cybercriminals have adopted to bypass social media platform X's malvertising protections and propagate malicious links using its artificial intelligence (AI) assistant Grok. 👉 thehackernews.com
   • Cybercriminals are selling access to Chinese surveillance cameras. 👉 threatpost.com (1 week ago)
   • iCloud Calendar invites are being abused to send callback phishing emails directly from Apple’s email servers. 👉 bleepingcomputer.com
   • Cybercriminals “trolling” devs by distributing malware via Ethereum smart contracts. 👉 cybernews.com
   • TAG-150 Develops CastleRAT in Python and C, Expanding CastleLoader Malware Operations. 👉 thehackernews.com
   • Threat actors have been exploiting a zero-day vulnerability in legacy Sitecore deployments to deploy WeepSteel reconnaissance malware. 👉 bleepingcomputer.com

3. Artificial Intelligence:

   • Google to make it easier to access AI Mode as default. 👉 bleepingcomputer.com
   • OpenAI reorganizes research team behind ChatGPT’s personality. 👉 techcrunch.com (2 days ago)
   • Microsoft now enforces MFA on Azure Portal sign-ins for all tenants. 👉 bleepingcomputer.com
   • OpenAI researchers argue that language models hallucinate because standard training and evaluation procedures reward guessing over admitting uncertainty. 👉 openai.com
   • Fastly survey finds senior developers are shipping more AI generated code. 👉 infoworld.com

4. Vulnerabilities and Patches:

   • CISA orders immediate patch of a critical Sitecore vulnerability that is under active exploitation. 👉 thehackernews.com
   • Microsoft fixes actively exploited Android flaws in September update. 👉 bleepingcomputer.com
   • Microsoft's August patch includes fix for CVE-2025-53786. 👉 krebsonsecurity.com (1 week ago)
   • Max severity Argo CD API flaw leaks repository credentials. 👉 bleepingcomputer.com
   • A critical SAP S/4HANA code injection vulnerability is being leveraged in attacks in the wild. 👉 bleepingcomputer.com
   • Firewall Bug Under Active Attack Triggers CISA Warning. 👉 threatpost.com (2 weeks ago)
   • iPhone Users Urged to Update to Patch 2 Zero-Days. 👉 threatpost.com (2 weeks ago)

5. Government and Legal:

   • The Czech Republic's National Cyber and Information Security Agency (NUKIB) is instructing critical infrastructure organizations in the country to avoid using Chinese technology. 👉 bleepingcomputer.com
   • EU fines Google $3.5 billion for anti-competitive ad practices. 👉 bleepingcomputer.com
   • Texas sues PowerSchool over breach exposing 62M students, 880k Texans. 👉 bleepingcomputer.com
   • U.S. Senate Bill GAIN AI Act Faces Opposition From Nvidia. 👉 reuters.com

6. Cybercrime and Threat Actors:

   • An ongoing fallout from a breach at AI Chatbot maker Salesloft. 👉 krebsonsecurity.com
   • An Oregon man is charged in Rapper Bot DDoS-for-hire service. 👉 krebsonsecurity.com (1 week ago)
   • SIM-swapper, Scattered Spider hacker, gets 10 years. 👉 krebsonsecurity.com (1 week ago)
   • Affiliates flock to a soulless scam gambling machine. 👉 krebsonsecurity.com (1 week ago)
   • Watering Hole Attacks Push ScanBox Keylogger. 👉 threatpost.com (1 week ago)
   • Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms. 👉 threatpost.com (1 week ago)
   • Staff Think Conti Group Is a Legit Employer – Podcast. 👉 threatpost.com (2 weeks ago)
   • The Winklevoss twins have become major GOP donors; a source says they've donated $32M+ since 2017. 👉 axios.com (3 days ago)

7. Cloud Security:

   • Microsoft says Azure affected after cables cut in the Red Sea. 👉 techcrunch.com
   • An in-depth look at AWS' underperformance in the GenAI era, as Microsoft Azure and Google Cloud gain ground. 👉 semianalysis.com (5 days ago)

8. Browser Security:

   • Firefox is adding Copilot chatbot support in its latest Nightly builds. 👉 omgubuntu.co.uk

9. The Business of Security:

   • Salesforce CEO Marc Benioff has made himself a cheerleader for AI's potential to disrupt work while also laying off staff. 👉 washingtonpost.com
   • OpenAI told investors that it projects its cash burn this year through 2029 will rise to a total of $115B. 👉 theinformation.com
   • Sources: ASML is committing €1.3B for Mistral's €1.7B Series C funding round, becoming the top shareholder. 👉 reuters.com
   • European VC deals are set to rise 3-4% YoY in 2025 to $57B. 👉 t.co (3 days ago)
   • VCs have invested $5B+ in humanoid robotics startups since the beginning of 2024. 👉 washingtonpost.com (3 days ago)

10. Emerging Technologies and Trends:

    • Finland inaugurated the world's largest sand battery for energy storage. 👉 the-independent.com (1 week ago)
    • Scientists are curtailing "mirror life" research due to biosecurity concerns. 👉 msn.com (2 days ago)
    • Study finds frequent AI use by students correlates with lower academic results in programming courses. 👉 phys.org (2 days ago)
    • VCs have invested $5B+ in humanoid robotics startups since the beginning of 2024. 👉 washingtonpost.com (3 days ago)

11. Web and Social Media:

    • USA Today reports on Business Insider and Wired retracting articles potentially written by AI. 👉 msn.com (2 days ago)
    • CBS News reports on schools increasingly using Yondr pouches to lock up student cellphones. 👉 cbsnews.com (2 days ago)
    • Axios reports Winklevoss twins have become major GOP donors. 👉 axios.com (3 days ago)
    • Spotify users are freaking out as song sharing exposes identities. 👉 cybernews.com
    • Nepal blocks citizens from accessing Facebook, X, YouTube, and dozens more. 👉 cybernews.com
    • The EU is fining Google for anti-competitive ad practices. 👉 bleepingcomputer.com

12. Humor and Technology:

    • Humor columnist Dave Barry is shutting down his blog and moving to Substack. 👉 blogs.herald.com (2 days ago)

1757290200000