Tech News

1. H-1B Visa Changes:

   • The White House has clarified that the new $100,000 H-1B visa fee will only apply to new applicants, not renewals or existing visa holders re-entering the U.S. 👉 axios.com
   • Amazon, Google, and Microsoft are reportedly advising H-1B employees to return to the U.S. before the fee takes effect. 👉 techcrunch.com
   • VCs and founders are concerned the $100K fee will disproportionately impact startups and drive talent away from the U.S. 👉 geekwire.com
   • Trump's administration is implementing a $100,000 annual fee on H-1B visas, sparking debate and concerns about its impact on the tech industry and U.S. competitiveness. 👉 theguardian.com

2. Cyberattacks:

   • A cyberattack targeting check-in and boarding systems caused delays at several major European airports, with Brussels Airport experiencing significant disruptions. 👉 apnews.com 👉 reuters.com
   • Collins Aerospace confirmed a "cyber-related disruption" to its MUSE software at select airports. 👉 reuters.com
   • A cyberattack on a provider of check-in and boarding systems disrupted operations at major European airports, including London's Heathrow. 👉 cybersecuritynews.com
   • Fortra has issued a security patch for a critical vulnerability in GoAnywhere MFT's License Servlet. 👉 bleepingcomputer.com 👉 thehackernews.com
   • SonicWall is urging customers to reset credentials following a security breach that exposed firewall configuration backup files, affecting under 5% of its customers. 👉 bleepingcomputer.com 👉 thehackernews.com
   • Two teenagers linked to the August 2024 cyberattack on Transport for London (TfL) have been arrested in the U.K. 👉 bleepingcomputer.com 👉 thehackernews.com
   • A joint statement was released regarding the Jaguar Land Rover cyber incident. 👉 gov.uk

3. TikTok Deal:

   • Karoline Leavitt confirmed Oracle will handle TikTok's data and security, stating the US is "100% confident" that the deal is done and it "just needs to be signed". 👉 axios.com
   • The White House said Americans would hold six of the seven board seats for TikTok US and its algorithm would be U.S.-controlled. 👉 bloomberg.com^$
   • Trump appeared to suggest Xi Jinping approved a deal to divest TikTok's U.S. operations during a call. 👉 nytimes.com^$
   • Trump said that China's President XI approved Tik Tok deal. 👉 aninews.in
   • Trump suggests China approves TikTok deal, though app's fate still unclear. 👉 axios.com

4. Malware and Phishing:

   • Microsoft and Cloudflare disrupted the RaccoonO365 phishing service. 👉 bleepingcomputer.com
   • 17,500 phishing domains targeting 316 brands across 74 countries have been linked to the PhaaS offering known as Lighthouse and Lucid. (2 days ago) 👉 thehackernews.com
   • Microsoft seized 340 websites tied to the Raccoon0365 phishing operation. (3 days ago) 👉 cybernews.com
   • Google nuked 224 Android malware apps behind a massive ad fraud campaign. (3 days ago) 👉 bleepingcomputer.com
   • LastPass warns of fake repositories infecting macOS with Atomic Infostealer. 👉 thehackernews.com
   • CISA has exposed malware kits deployed in Ivanti EPMM attacks, which could result in code execution on compromised servers. (2 days ago) 👉 bleepingcomputer.com
   • A deep analysis of SystemBC malware turning infected VPS systems into a proxy highway. (3 days ago) 👉 bleepingcomputer.com 👉 thehackernews.com
   • The Python Software Foundation invalidated all PyPI tokens stolen in the GhostAction supply chain attack. (3 days ago) 👉 bleepingcomputer.com
   • Scattered Spider hackers arrested in UK (3 days ago) 👉 thehackernews.com
   • Two sets of malware exploiting Ivanti EPMM CVE-2025-4427 and CVE-2025-4428 have been detailed by CISA. (3 days ago) 👉 thehackernews.com
   • An ongoing, widespread information stealer campaign targeting Apple macOS users through fake GitHub repositories has been detailed. 👉 thehackernews.com

5. Artificial Intelligence and Security:

   • Researchers have uncovered the earliest example of GPT-4-powered MalTerminal malware creating ransomware and reverse shells. 👉 thehackernews.com
   • Radware researchers disclosed a zero-click flaw in OpenAI ChatGPT's Deep Research agent allowing sensitive Gmail data leaks via ShadowLeak. 👉 thehackernews.com
   • A profile of Anthropic CEO Dario Amodei. 👉 wsj.com^$
   • xAI launches Grok 4 Fast, a multimodal model, setting a new standard for cost-efficient intelligence, and is available for free on multiple platforms. 👉 x.ai 👉 engadget.com
   • Sherwood News: TikTok had 183M US MAUs on iOS and Android in August 2025, up 16% YoY, vs. Instagram's 169M, Facebook's 157M, Pinterest's 100M, and Snapchat's 70M. 👉 sherwood.news
   • Trump to impose $100,000 fee per year for H-1B visas, in likely blow to tech. 👉 cnbc.com

6. Cyber Espionage:

   • UNC1549, an Iranian cyber espionage group, targeted European telecommunications companies using LinkedIn job lures and MINIBIKE malware. 👉 thehackernews.com
   • Evidence suggests Russian hacking groups Gamaredon and Turla collaborated to deploy the Kazuar backdoor in Ukraine. 👉 thehackernews.com

7. Bulletproof Hosting:

   • Bulletproof host Stark Industries Solutions evades EU sanctions. 👉 krebsonsecurity.com
   • A large U.S.-made bomb left over from World War II was discovered at a construction site in Quarry Bay, Hong Kong. 👉 apnews.com 👉 cbsnews.com

8. Cybercrime and Law Enforcement:

   • The Royal Canadian Mounted Police shut down the TradeOgre cryptocurrency exchange and seized over $40 million believed to originate from criminal activities. 👉 bleepingcomputer.com
   • The FBI warned of cybercriminals using fake FBI crime reporting portals. (2 days ago) 👉 bleepingcomputer.com

9. Ransomware Attacks:

   • Report: Ransomware remains a destructive threat as defenses keep failing. Prevention dropped to 62%, while data exfiltration prevention collapsed to just 3%. (3 days ago) 👉 bleepingcomputer.com
   • The article notes that the new AI stack creates a highly dynamic attack surface, and traditional controls aren't keeping up. 👉 f5.com

10. Cloud Security:

    • The importance of protecting cloud applications data. 👉 idrive.com

11. NPM Supply Chain Attack:

    • Self-replicating worm hits hundreds of npm packages (5 days ago) 👉 koi.security 👉 sysdig.com 👉 tomshardware.com
    • 20 popular npm Packages With 2 Billion Weekly Downloads Compromised in Supply Chain Attack. 👉 thehackernews.com
    • Details on the Shai-Hulud malware campaign that impacted hundreds of npm packages and designed to steal developer credentials and persist in repositories. (5 days ago) 👉 koi.security
    • A novel self-replicating worm, Shai-Hulud, infected hundreds of npm packages and the Sysdig Threat Research Team has been monitoring its progress. (5 days ago) 👉 sysdig.com
    • Shai-Hulud malware campaign dubbed the largest and most dangerous npm supply chain compromise in history. (5 days ago) 👉 tomshardware.com
    • A lesson from NPM hacks: It’s time to remove the human factor from authentication factors. 👉 cybernews.com

12. Meta's Smart Glasses Demo Failures:

    • Meta CTO explains the cause of its embarrassing smart glasses demo failures. 👉 engadget.com
    • Meta CTO attributes technical issues during live demos of its new smart glasses to a self-inflicted DDoS attack and a bug that put Zuckerberg's glasses to sleep. 👉 theverge.com

13. DeepSeek AI Model:

    • China's DeepSeek says its hit AI model cost just $294,000 to train. 👉 cybernews.com

14. Microsoft: WMIC to be removed after Windows 11 25H2 upgrade:

    • WMIC will be removed after Windows 11 25H2 upgrade. 👉 bleepingcomputer.com

15. Fraudulent Activities:

    • Scammers unleash flood of slick online gaming sites 👉 krebsonsecurity.com
    • Cybercriminals are selling access to Chinese surveillance cameras. (27 days ago) 👉 threatpost.com
    • The Trump administration unveiled a new crackdown (1 week ago) 👉 msn.com

16. Science and Space:

    • Scientists predict black hole fireworks that could unlock the universe’s secrets. 👉 cybernews.com
    • Space.com reports that a doomed cannibal star could soon explode in a supernova so bright it would be visible during the day. (4 days ago) 👉 space.com

17. Other:

    • Library Freedom Project survey found patrons increasingly trust AI chatbots over human librarians and become defensive when told their AI-recommended titles are fictional. (4 days ago) 👉 404media.co
    • The High Seas Treaty was ratified by a 60th nation, Morocco. (4 days ago) 👉 nytimes.com^$
    • Africa's only permanently stationed cable repair ship, the Leon Thevenin, maintains over 60,000 kilometers of undersea internet infrastructure. (4 days ago) 👉 restofworld.org
    • A U.S. Senate panel probed the decline in K-12 national reading, math, science scores. (4 days ago) 👉 newhampshirebulletin.com
    • Memos: Amazon, which has the most H-1B staff at 14K+, Google, and Microsoft tell H-1B visa holders to return to the US before September 21 and avoid travel. 👉 cnbc.com
    • The high seas, the vast waters beyond any one country's jurisdiction, cover nearly half the planet. (4 days ago) 👉 nytimes.com^$

1758413400000