Tech News

1. Microsoft Security Updates:

   • Microsoft released updates to fix 172 security holes in Windows, including two zero-day vulnerabilities: a third-party modem driver (CVE-2025-24990) and an elevation of privilege vulnerability in Windows Remote Access Connection Manager (CVE-2025-59230). 👉 krebsonsecurity.com
   • Microsoft quietly announced that Microsoft Word will automatically save documents to OneDrive, a setting that can be changed. 👉 zdnet.com
   • Microsoft patched a vulnerability flagged with the "highest ever" severity rating received by an ASP.NET Core security flaw. 👉 bleepingcomputer.com
   • Microsoft fixed a Windows bug breaking localhost HTTP connections after installing recent Windows security updates. 👉 bleepingcomputer.com
   • Microsoft disrupted ransomware attacks targeting Teams users. 👉 bleepingcomputer.com

2. Data Breaches and Extortion:

   • ShinyHunters are extorting Salesforce customers after a voice phishing attack, threatening to publish stolen data, as well as claimed responsibility for a recent breach involving Discord user data, and for stealing terabytes of sensitive files from thousands of customers of the enterprise software maker Red Hat. 👉 krebsonsecurity.com
   • Auction house Sotheby’s is notifying individuals of a data breach where sensitive information, including financial details, was stolen. 👉 bleepingcomputer.com
   • Financial services company Prosper suffered a data breach impacting 17.6 million accounts. 👉 bleepingcomputer.com
   • American Airlines subsidiary Envoy confirms Oracle data was compromised after the Clop extortion gang listed American Airlines on its data leak site. 👉 bleepingcomputer.com

3. Linux Rootkits and Vulnerabilities:

   • A new GNU/Linux rootkit called LinkPro was discovered exploiting an exposed Jenkins server (CVE-2024-23897) and using eBPF to hide itself and activate via magic TCP packets. 👉 thehackernews.com
   • Hackers are exploiting a Cisco SNMP flaw (CVE-2025-20352) to deploy Linux rootkits in 'Zero Disco' attacks. 👉 thehackernews.com
   • ConnectWise fixed a bug in Automate that allowed AiTM update attacks. 👉 bleepingcomputer.com

4. VPN and Firewall Security:

   • Researchers uncovered a WatchGuard VPN bug that could let attackers take over devices (CVE-2025-9242). 👉 thehackernews.com
   • Over 266,000 F5 BIG-IP instances are exposed to remote attacks. 👉 bleepingcomputer.com

5. AI and Security:

   • AI is being used by cybercriminals to automate phishing, scale social engineering, create synthetic media and create malware. 👉 blogs.microsoft.com^$
   • Microsoft's annual digital threats report finds operations expanding even more through AI, with cybercriminals "accelerating malware development and creating more realistic synthetic content, enhancing the efficiency of activities such as phishing and ransomware attacks." 👉 microsoft.com^$

6. Malware and Phishing Campaigns:

   • TikTok videos continue to be used to spread infostealers in ClickFix attacks, disguising them as free activation guides for popular software. 👉 bleepingcomputer.com
   • A new malicious campaign targets macOS developers with fake Homebrew, LogMeIn, and TradingView platforms that deliver infostealing malware. 👉 bleepingcomputer.com
   • North Korean hackers are combining BeaverTail and OtterCookie into advanced JS malware. 👉 thehackernews.com
   • North Korean hackers use EtherHiding to hide malware inside blockchain smart contracts. (4 days ago) 👉 thehackernews.com
   • Silver Fox expands Winos 4.0 attacks to Japan and Malaysia via HoldingHands RAT. (2 days ago) 👉 thehackernews.com

7. Blockchain and Cryptocurrency Threats:

   • Hackers abuse blockchain smart contracts to spread malware via infected WordPress sites. 👉 thehackernews.com

8. SIM Swapping and Fraud:

   • Europol dismantled a SIM box operation renting numbers for cybercrime that enabled 3,200 fraud cases and caused at least 4.5 million euros in losses. 👉 bleepingcomputer.com 👉 thehackernews.com

9. Satellite Data Leaks:

   • Communications from cellphone carriers, retailers, banks, and even militaries are being broadcast unencrypted through geostationary satellites. (6 days ago) 👉 gizmodo.com 👉 techcrunch.com

10. Other Security News:

    • A new .NET CAPI Backdoor is targeting Russian auto and e-commerce firms via phishing ZIPs. (2 days ago) 👉 thehackernews.com
    • A cybercriminal group abused Zendesk to flood email inboxes with messages from various corporate customers. (1 week ago) 👉 krebsonsecurity.com
    • Microsoft revoked over 200 fraudulent certificates used in the Rhysida ransomware campaign. (2 days ago) 👉 thehackernews.com
    • A college student was sentenced to four years for a PowerSchool cyberattack. 👉 cybernews.com

11. Cloud Security:

    • A financially motivated threat actor codenamed UNC5142 has been observed abusing blockchain smart contracts as a way to facilitate the distribution of information stealers targeting both Windows and Apple macOS systems. (4 days ago) 👉 thehackernews.com

12. Venture Capital and Startups:

    • A top VC has bet close to 20% of his fund on teenagers. 👉 techcrunch.com

13. Social Media and AI:

    • Facebook is rolling out a new AI-powered feature that suggests edits to your photos. 👉 cybernews.com 👉 techcrunch.com
    • Facebook is rolling out new parental controls over teens’ chats with AI characters. 👉 cybernews.com

14. Government and Policy:

    • Beijing alleges "irrefutable evidence" linking the US to a major cyberattack on a Chinese agency. 👉 cybernews.com
    • South Korea has imposed a travel ban to parts of Cambodia amid a surge in kidnappings related to employment scams. 👉 cybernews.com

15. Consumer Products and Recalls:

    • NordicTrack home rowing machines are being recalled due to a fire hazard. 👉 cybernews.com
    • Kohler unveils a camera for your toilet. 👉 techcrunch.com

16. Cybercrime and Law Enforcement:

    • A couple robbed over 3,000 people in a £28m holiday scam. 👉 cybernews.com
    • London police are looking for thousands of victims as suspected crypto fraudsters are caught. 👉 cybernews.com

17. AI Vulnerabilities:

    • Cybernews tricked Snapchat’s AI, and it told them too much. 👉 cybernews.com

18. Data Broker Doxing:

    • Data brokers are constantly doxing us, and we can’t do anything about it. 👉 cybernews.com

19. DNS servers

    • DNS servers vanished after shifting its Domain Name Service (DNS) servers from DDoS-Guard to Cloudflare. (4 days ago) 👉 krebsonsecurity.com

20. Bulletproof Hosting

    • The book Inside Cyber Warfare by Jeffrey Carr, Innovation IT Solutions Corp. was responsible for hosting StopGeorgia[.]ru. 👉 krebsonsecurity.com

21. Email Issues:

    • GOP cries censorship over spam filters that work. 👉 krebsonsecurity.com

22. JavaScript Hacked

    • A developer involved in maintaining the projects was phished. (1 month ago) 👉 krebsonsecurity.com

23. Electric truck

    • Slate Auto’s electric truck: See it first at TechCrunch Disrupt 2025. (1 week ago) 👉 techcrunch.com

1760919000000