🚨 CISA KEV 1[−]
24 Jul KEVMicrosoft’s incomplete SharePoint patch led to global exploits by China-linked hackersA July 8 patch for the SharePoint Server zero-day flaw, which resulted in a global attack on nearly 100 organizations over the weekend starting July 18, had failed to fully patch the flaw. The flaw was brought to Microsoft’s notice in May during a hacker competition and was short…CSOONLINE.COM
🐛 COMMON VULNERABILITIES AND EXPOSURES 6[−]
24 Jul KEVCISA Alerts on Google Chromium Input Validation Flaw Actively ExploitedThe Cybersecurity and Infrastructure Security Agency (CISA) has issued a critical alert regarding a severe input validation vulnerability in Google Chromium that is currently being actively exploited by threat actors. The vulnerability, designated as CVE-2025-6558, poses signific…GBHACKERS.COM
24 JulAWS Client VPN for Windows Vulnerability Could Allow Privilege EscalationAmazon Web Services has disclosed a critical security vulnerability in its Client VPN software for Windows that could allow non-administrative users to escalate their privileges to root-level access during the installation process. The vulnerability, tracked as CVE-2025-8069, aff…GBHACKERS.COM
24 JulTP-Link Network Video Recorder Vulnerability Enables Arbitrary Command ExecutionTP-Link has disclosed critical security vulnerabilities affecting two of its VIGI Network Video Recorder models, potentially allowing attackers to execute arbitrary commands on the underlying operating system. The vulnerabilities, identified as CVE-2025-7723 and CVE-2025-7724, im…GBHACKERS.COM
24 Jul KEVMetasploit Module Released to Exploit SharePoint 0-Day VulnerabilitiesSecurity researchers have released a Metasploit exploitation module targeting critical zero-day vulnerabilities in Microsoft SharePoint Server, marking a significant escalation in the threat landscape for enterprise collaboration platforms. The module exploits a chain of unauthen…GBHACKERS.COM
24 JulSplunk Guide to Detect, Mitigate, and Respond to the CitrixBleed 2 VulnerabilityThe cybersecurity landscape is grappling with CVE-2025-5777, informally known as “CitrixBleed 2,” an out-of-bounds memory read vulnerability affecting Citrix NetScaler ADC and Gateway devices. This flaw, echoing the notorious CVE-2023-4966 from 2023, enables unauthent…GBHACKERS.COM
24 JulSophos and SonicWall Patch Critical RCE Flaws Affecting Firewalls and SMA 100 DevicesSophos and SonicWall have alerted users of critical security flaws in Sophos Firewall and Secure Mobile Access (SMA) 100 Series appliances that could be exploited to achieve remote code execution. The two vulnerabilities impacting Sophos Firewall are listed below - CVE-2025…THEHACKERNEWS.COM
⚠️ VULNERABILITY DISCLOSURE 32[−]
24 JulA chit-chat between Llama 2 and ChatGPT for the automated creation of exploitssubmitted by Pro to cybersecurity 3 points | 0 comments https://www.sciencedirect.com/science/article/pii/S1389128625004682INFOSEC.PUB
24 JulHackers On A Train - PSW #883In the security news: * The train is leaving the station, or is it? * The hypervisor will protect you, maybe * The best thing about Flippers are the clones * Also, the Flipper Zero as an interrogation tool * Threats are commercial and open-source * Who is still down with FTP? * A…YOUTUBE.COM
24 Jul KEV7 Security-Praktiken zum AbgewöhnenAus der Zeit gefallen? Sergio Delle Vedove | shutterstock.com Schlechte Angewohnheiten abzustellen (oder bessere zu entwickeln), ist ein Prozess, der Geduld, Selbstbeherrschung und Entschlossenheit erfordert. Das gilt sowohl auf persönlicher als auch auf Security-technischer Eben…CSOONLINE.COM
24 JulKey Operator of World’s Largest XSS Dark Web Platform DetainedInternational law enforcement agencies have dismantled one of the world’s most influential Russian-speaking cybercrime platforms following the arrest of its suspected administrator in a coordinated operation spanning France, Ukraine, and broader European cooperation. The ta…GBHACKERS.COM
24 JulSonicWall SMA 100 Vulnerabilities Allow Remote Execution of Arbitrary JavaScriptCybersecurity vendor SonicWall issued a critical advisory highlighting three serious vulnerabilities affecting its Secure Mobile Access (SMA) 100 series appliances. Impacting SMA 210, SMA 410, and SMA 500v models running firmware version 10.2.1.15-81sv and earlier, the flaws coul…GBHACKERS.COM
24 JulSingapore’s cybersecurity paradox: Top firms rated A, yet all breachedAll of Singapore’s top companies have recently suffered cyberattacks through third-party breaches, despite achieving high cybersecurity ratings. According to a SecurityScorecard report, 91% of Singapore’s top 100 companies (by market capitalization) earned an A-grade rating, yet …CSOONLINE.COM
24 JulWeidmueller Industrial Routers Exposed to Remote Code Execution FlawsMultiple high-severity security vulnerabilities have been discovered in Weidmueller Industrial Routers, potentially allowing attackers to execute arbitrary code with root privileges on affected devices. The German industrial automation company has released security patches to add…GBHACKERS.COM
24 JulToolShell Attacks Hit 400+ SharePoint Servers, US Government Victims NamedMore information has emerged on the ToolShell SharePoint zero-day attacks, including impact, victims, and threat actors. The post ToolShell Attacks Hit 400+ SharePoint Servers, US Government Victims Named appeared first on SecurityWeek .SECURITYWEEK.COM
24 JulGoogle Introduces OSS Rebuild to Boost Security in Open-Source Package EcosystemsGoogle has unveiled OSS Rebuild, a pioneering project designed to enhance trust in package registries by independently reproducing upstream artifacts. This initiative targets the escalating threat of supply chain attacks on widely-used dependencies across Python’s PyPI, Jav…GBHACKERS.COM
24 JulChinese Hackers Launch Targeted Campaign to Infect Windows Systems with Ghost RAT and PhantomNet MalwareZscaler ThreatLabz, in collaboration with TibCERT, has uncovered two linked attack campaigns dubbed Operation GhostChat and Operation PhantomPrayers, attributed with high confidence to a China-nexus advanced persistent threat (APT) group. These operations targeted the Tibetan com…GBHACKERS.COM
24 JulMicrosoft: SharePoint servers also targeted in ransomware attacksA Chinese hacking group is deploying Warlock ransomware on Microsoft SharePoint servers vulnerable to widespread attacks targeting the recently patched ToolShell zero-day exploit chain. [...]BLEEPINGCOMPUTER.COM
24 JulSonicWall Patches Critical SMA 100 Vulnerability, Warns of Recent Malware AttackSonicWall advises organizations to patch SMA 100 appliances and look for IoCs associated with Overstep malware attacks. The post SonicWall Patches Critical SMA 100 Vulnerability, Warns of Recent Malware Attack appeared first on SecurityWeek .SECURITYWEEK.COM
24 JulStorm-2603 Exploits SharePoint Flaws to Deploy Warlock Ransomware on Unpatched SystemsMicrosoft has revealed that one of the threat actors behind the active exploitation of SharePoint flaws is deploying Warlock ransomware on targeted systems. The tech giant, in an update shared Wednesday, said the findings are based on an "expanded analysis and threat intelligence…THEHACKERNEWS.COM
24 JulResearchers Exploit Cursor Background Agents to Take Over Amazon EC2 InstanceSecurity researchers have successfully exploited vulnerabilities in Cursor’s Background Agents to gain unauthorized access to an Amazon EC2 instance, demonstrating critical risks associated with SaaS applications that integrate deeply with cloud infrastructure. The research…GBHACKERS.COM
24 JulHacker inserts destructive code in Amazon Q as update goes liveA hacker managed to insert destructive system commands into a version of Amazon’s AI-powered coding assistant, Q, which was later distributed to users through an official update, according to a media report. The unauthorized code instructed the AI agent to behave like a system cl…CSOONLINE.COM
24 JulSonicWall urges admins to patch critical RCE flaw in SMA 100 devicesSonicWall urges customers to patch SMA 100 series appliances against a critical authenticated arbitrary file upload vulnerability that can let attackers gain remote code execution. [...]BLEEPINGCOMPUTER.COM
24 JulUNC3944 Exploits VMware vSphere to Deploy Ransomware and Steal Data from OrganizationsThe Google Threat Intelligence Group has uncovered a highly advanced cyber operation orchestrated by the threat actor UNC3944, also linked to aliases such as “0ktapus,” “Octo Tempest,” and “Scattered Spider”. This financially motivated group ha…GBHACKERS.COM
24 JulElephant APT Group Exploits VLC Player and Encrypted Shellcode in Attacks on Defense SectorArctic Wolf Labs has uncovered a sophisticated cyber-espionage operation attributed to the Dropping Elephant advanced persistent threat (APT) group, also known as Patchwork or Quilted Tiger, focusing on Turkish defense contractors specializing in precision-guided missile systems.…GBHACKERS.COM
24 JulAI slop and fake reports are exhausting some security bug bounties"We're getting a lot of stuff that looks like gold, but it's actually just crap,” said the founder of one security testing firm. AI-generated security vulnerability reports are already having an effect on bug hunting, for better and worse.TECHCRUNCH.COM
24 JulMitel warns of critical MiVoice MX-ONE authentication bypass flawMitel Networks has released security updates to patch a critical-severity authentication bypass vulnerability impacting its MiVoice MX-ONE enterprise communications platform. [...]BLEEPINGCOMPUTER.COM
24 JulCISA Releases Six Industrial Control Systems AdvisoriesCISA released six Industrial Control Systems (ICS) advisories on July 24, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-205-01 Mitsubishi Electric CNC Series ICSA-25-205-02 Network Thermosta…CISA.GOV
24 JulCritical Mitel Flaw Lets Hackers Bypass Login, Gain Full Access to MiVoice MX-ONE SystemsMitel has released security updates to address a critical security flaw in MiVoice MX-ONE that could allow an attacker to bypass authentication protections. "An authentication bypass vulnerability has been identified in the Provisioning Manager component of Mitel MiVoice MX-ONE, …THEHACKERNEWS.COM
24 JulFire Ant Exploits VMware Flaws to Compromise ESXi Hosts and vCenter EnvironmentsVirtualization and networking infrastructure have been targeted by a threat actor codenamed Fire Ant as part of a prolonged cyber espionage campaign. The activity, observed this year, is primarily designed Now to infiltrate organizations' VMware ESXi and vCenter environments as w…THEHACKERNEWS.COM
24 JulSurge in Phishing Attacks Exploiting Spoofed SharePoint Domains and Sneaky 2FA TacticsCybersecurity researchers have observed a significant uptick in phishing campaigns that leverage domains designed to impersonate Microsoft SharePoint, employing highly structured naming conventions to evade detection. These malicious domains, which have proliferated since June 26…GBHACKERS.COM
24 JulStorm-2603 spotted deploying ransomware on exploited SharePoint servers - Help Net Securitysubmitted by kid to cybersecurity 1 points | 0 comments https://www.helpnetsecurity.com/2025/07/24/storm-2603-spotted-deploying-ransomware-on-exploited-sharepoint-servers/SH.ITJUST.WORKS
24 JulHive0156 Hackers Targeting Government and Military Organizations to Deploy REMCOS RATIBM X-Force researchers have identified ongoing cyber campaigns by Hive0156, a Russian-aligned threat actor, systematically targeting Ukrainian government and military personnel with sophisticated malware attacks. The group, which shows significant operational overlap with CERT-U…GBHACKERS.COM
24 JulCoyote in the Wild: First-Ever Malware That Abuses UI Automation | Akamaisubmitted by kid to cybersecurity 1 points | 0 comments https://www.akamai.com/blog/security-research/2025/jul/active-exploitation-coyote-malware-first-ui-automation-abuse-in-the-wildSH.ITJUST.WORKS
24 JulThe Lazy Way to Validate Vulnerabilities... Works?!While most cybersecurity pros burn hours manually checking vulnerabilities, Matthew Toussain reveals a smarter, faster way to validate threats like WannaCry using PowerShell — without jumping through hoops. Instead of logging into every machine, what if your vulnerability scanner…YOUTUBE.COM
24 JulProtecting G-Suite/MS365 and Security News - Abhishek Agrawal - PSW #884We chat with Material Security about protecting G Suite and MS365. How else are you monitoring the most commonly used cloud environments and applications? In the security news: * Google Sues Badbox operators * Authenticated or Unauthenticated, big difference and my struggle to ge…YOUTUBE.COM
24 JulBlackSuit ransomware leak sites seized in Operation CheckmateLaw enforcement has seized the dark web leak sites of the BlackSuit ransomware operation, which has targeted and breached the networks of hundreds of organizations worldwide over the past several years. [...]BLEEPINGCOMPUTER.COM
24 JulIf You Don't See It, Can You Secure It? Shadow IT Explained!A cybersecurity pro reveals a chilling truth: the biggest threats aren't always visible. In this short, Sheena Thomas breaks down the nightmare of Shadow IT—those hidden, unpatched servers under research desks running outdated operating systems, completely off the radar. With cri…YOUTUBE.COM
24 JulToolShell: An all-you-can-eat buffet for threat actorsESET Research has been monitoring attacks involving the recently discovered ToolShell zero-day vulnerabilitiesWELIVESECURITY.COM
📋 SECURITY BULLETINS 1[−]
24 JulGitLab Publishes Security Update Addressing Several Vulnerabilities in Community and Enterprise EditionGitLab has released critical security patches addressing six vulnerabilities across its Community Edition (CE) and Enterprise Edition (EE) platforms, with two high-severity cross-site scripting (XSS) flaws requiring immediate attention from self-managed installations. The securit…GBHACKERS.COM
📢 SECURITY ADVISORIES 7[−]
24 JulEuropol Arrests XSS Forum Admin in Kyiv After 12-Year Run Operating Cybercrime MarketplaceEuropol on Monday announced the arrest of the suspected administrator of XSS.is (formerly DaMaGeLaB), a notorious Russian-speaking cybercrime platform. The arrest, which took place in Kyiv, Ukraine, on July 222, 2025, was led by the French Police and Paris Prosecutor, in collabor…THEHACKERNEWS.COM
24 JulGRC Firm Vanta Raises $150 Million at $4.15 Billion ValuationRisk management and compliance solutions provider Vanta has raised more than $500 million since 2021. The post GRC Firm Vanta Raises $150 Million at $4.15 Billion Valuation appeared first on SecurityWeek .SECURITYWEEK.COM
24 JulNew York Seeking Public Opinion on Water Systems Cyber RegulationsThe proposed cyber regulations include the implementation of incident reporting, response plans, and cybersecurity controls, training, and certification of compliance. The post New York Seeking Public Opinion on Water Systems Cyber Regulations appeared first on SecurityWeek .SECURITYWEEK.COM
24 JulAPT28 Hackers Unveil First LLM-Powered Malware, Enhancing Attack Techniques with AIUkraine’s Computer Emergency Response Team (CERT-UA) has publicly reported the emergence of LAMEHUG, marking it as the inaugural malware to embed large language model (LLM) capabilities directly into its attack chain. This campaign targets Ukrainian government officials through p…GBHACKERS.COM
🔥 INCIDENT REPORTING 12[−]
24 JulNew Tool: ficheck.py, (Thu, Jul 24th)As I mention every time I teach FOR577 , I have been a big fan of file integrity monitoring tools (FIM) since Gene Kim first released Tripwire well over 30 years ago. I&#;x26;#;39;ve used quite a few of them over the years including tripwire, OSSEC, sa…ISC.SANS.EDU
24 JulFree decryptor for victims of Phobos ransomware releasedThere is good news for any organisation which has been hit by the Phobos ransomware. Japanese police have released a free decryptor capable of recovering files encrypted by both the notorious Phobos ransomware, and its offshoot 8Base. Read more in my article on the Fortra blog.FORTRA.COM
24 JulHigh-Value NPM Developers Compromised in New Phishing CampaignHackers have injected malware into popular NPM packages after compromising several developer accounts in a fresh phishing campaign. The post High-Value NPM Developers Compromised in New Phishing Campaign appeared first on SecurityWeek .SECURITYWEEK.COM
24 JulClorox Sues Cognizant for $380 Million Over 2023 HackClorox is blaming Congnizat for the 2023 cyberattack, claiming that the IT provided handed over passwords to the hackers. The post Clorox Sues Cognizant for $380 Million Over 2023 Hack appeared first on SecurityWeek .SECURITYWEEK.COM
24 JulChina-Based APTs Deploy Fake Dalai Lama Apps to Spy on Tibetan CommunityThe Tibetan community has been targeted by a China-nexus cyber espionage group as part of two campaigns conducted last month ahead of the Dalai Lama's 90th birthday on July 6, 2025. The multi-stage attacks have been codenamed Operation GhostChat and Operation PhantomPrayers by Zs…THEHACKERNEWS.COM
24 Jul340K exposed after France Travail data breach | Cybernewssubmitted by kid to cybersecurity 1 points | 0 comments https://cybernews.com/privacy/france-travail-data-breach-thousands-exposed/SH.ITJUST.WORKS
24 JulDefence giant Naval Group hit with major breach | Cybernewssubmitted by kid to cybersecurity 1 points | 0 comments https://cybernews.com/security/naval-group-france-defense-data-breach/SH.ITJUST.WORKS
24 JulUS nuclear weapons agency hacked in Microsoft SharePoint attackssubmitted by kid to cybersecurity 1 points | 0 comments https://www.bleepingcomputer.com/news/security/us-nuclear-weapons-agency-hacked-in-microsoft-sharepoint-attacks/SH.ITJUST.WORKS
24 JulHackers breach Toptal GitHub account, publish malicious npm packagesHackers compromised Toptal's GitHub organization account and used their access to publish ten malicious packages on the Node Package Manager (NPM) index. [...]BLEEPINGCOMPUTER.COM
24 JulSophos captures multiple honors at SE Labs Awards 2025Sophos has been recognized for defending customers of all sizes against today’s complex cyberattacks, achieving four prestigious awards at the SE Labs Awards 2025.SOPHOS.COM
24 JulHacker sneaks infostealer malware into early access Steam gameA threat actor called EncryptHub has compromised a game on Steam to distribute info-stealing malware to unsuspecting users downloading the title. [...]BLEEPINGCOMPUTER.COM
24 JulAI-Powered Cyber Attacks Utilize ML Algorithms to Deploy Malware and Circumvent Traditional SecurityArtificial intelligence (AI) and machine learning (ML) are enabling hackers to plan extremely complex assaults that surpass conventional defenses in a threat landscape that is changing quickly. According to the Gigamon Hybrid Cloud Security Survey, which polled over 1,000 securit…GBHACKERS.COM
🕵️ THREAT INTELLIGENCE 22[−]
24 JulISC Stormcast For Thursday, July 24th, 2025 https://isc.sans.edu/podcastdetail/9540, (Thu, Jul 24th)(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.ISC.SANS.EDU
24 JulHackers Deploy Stealth Backdoor in WordPress Mu-Plugins to Maintain Admin AccessCybersecurity researchers have uncovered a new stealthy backdoor concealed within the "mu-plugins" directory in WordPress sites to grant threat actors persistent access and allow them to perform arbitrary actions. Must-use plugins (aka mu-plugins) are special plugins that are aut…THEHACKERNEWS.COM
24 JulMutmaßlicher Betreiber von großem Cybercrime-Forum geschnapptDer mutmaßliche Betreiber einer großen Plattform für Cyberkriminalität wurde festgenommen. Skrypnykov Dmytro – shutterstock.com Der mutmaßliche Betreiber einer großen russischsprachigen Plattform für Cyberkriminalität ist in der Ukraine festgenommen worden. Das Forum sei seit 201…CSOONLINE.COM
24 JulFrom Tech Podcasts to Policy: Trump’s New AI Plan Leans Heavily on Silicon Valley Industry IdeasPresident Donald Trump has unveiled a sweeping new plan for America’s “global dominance” in artificial intelligence. The post From Tech Podcasts to Policy: Trump’s New AI Plan Leans Heavily on Silicon Valley Industry Ideas appeared first on SecurityWeek .SECURITYWEEK.COM
24 JulAI-Driven Wi-Fi Biometrics WhoFi Tracks Humans Behind Walls with 95.5% AccuracyResearchers have introduced WhoFi, an AI-powered deep learning pipeline that leverages Wi-Fi Channel State Information (CSI) for person re-identification (Re-ID), achieving a remarkable 95.5% Rank-1 accuracy on the NTU-Fi dataset. Traditional visual Re-ID systems, reliant on conv…GBHACKERS.COM
24 JulNPM package ‘is’ with 2.8M weekly downloads infected devs with malwaresubmitted by kid to cybersecurity 2 points | 0 comments https://www.bleepingcomputer.com/news/security/npm-package-is-with-28m-weekly-downloads-infected-devs-with-malware/SH.ITJUST.WORKS
24 JulMassive data leak exposes Swedish citizens' lives | Cybernewssubmitted by kid to cybersecurity 2 points | 0 comments https://cybernews.com/security/risika-swedish-data-exposed/SH.ITJUST.WORKS
24 JulHeroDevs Raises $125 Million to Secure Deprecated OSSHeroDevs has received a $125 million strategic growth investment from PSG to secure enterprise security stacks. The post HeroDevs Raises $125 Million to Secure Deprecated OSS appeared first on SecurityWeek .SECURITYWEEK.COM
24 JulNoName057(16) Hackers Target 3,700 Unique Devices Over the Last 13 MonthsThe pro-Russian hacktivist collective NoName057(16) has been documented executing distributed denial-of-service (DDoS) attacks against over 3,700 unique hosts, predominantly targeting government and public-sector entities in European nations aligned against Russia’s invasio…GBHACKERS.COM
24 JulThreat Actors Using .hwp Files to Distribute RokRAT Malware and Evade Detection MechanismsThe AhnLab Security intelligence Center (ASEC) has identified a sophisticated campaign where threat actors are leveraging Hangul Word Processor (.hwp) documents to disseminate the RokRAT remote access trojan (RAT), marking a departure from traditional methods that relied on short…GBHACKERS.COM
24 JulWAF Just Got an Upgrade… Meet the AI Version!Cybersecurity just got a serious upgrade. In this short, Sandy Carielli from Forrester explains how traditional Web Application Firewalls (WAFs) are evolving into AI-powered defenders, built to stop sophisticated LLM-based attacks like prompt injection. As apps integrate more AI,…YOUTUBE.COM
24 JulThe Shocking Reason Gen Z May Fail in CybersecurityGen Z grew up with tech in their hands—but are they truly prepared for the AI revolution in cybersecurity? 👀 In this clip, cybersecurity pros break down why experience with past tech shifts gives Gen X a surprising advantage. From the PC boom to the internet age, Gen X has seen i…YOUTUBE.COM
24 JulMalware in official mouse software: Endgame Gears OP1w 4K V2 tool infected with Xred-RATsubmitted by commander to cybersecurity 3 points | 0 comments https://www.igorslab.de/en/malware-in-official-mouse-software-endgame-gears-op1w-4k-v2-tool-infected-with-xred-rat/SH.ITJUST.WORKS
24 JulIs AI Still Overhyped in Cybersecurity? 🤖🔥Cybersecurity pros are finally asking the big question—has the AI hype reached its limit? 🤯 In this short clip, experts unpack the reality of GenAI in security after 3 years of noise, fear, and promise. Are we seeing real impact, or is it still mostly smoke? This conversation div…YOUTUBE.COM
24 JulThe End of “Just Say No” in CybersecurityOnce upon a time, CISOs had one job: block threats and say “no.” But that era is over. In this short, cybersecurity veteran Ben Carr explains how the role of the CISO has completely evolved over the past decade—from gatekeeper to enabler. With users now demanding more autonomy an…YOUTUBE.COM
24 JulOperation Cargotalon: Ung0901 Targets Russian Aerospace Defense Using Eaglet Implantsubmitted by kid to cybersecurity 1 points | 0 comments https://www.seqrite.com/blog/operation-cargotalon-ung0901-targets-russian-aerospace-defense-sector-using-eaglet-implant/SH.ITJUST.WORKS
24 JulAuthorities in Ukraine nab alleged admin of Russian-language cybercrime forum | CyberScoopsubmitted by kid to cybersecurity 1 points | 0 comments https://cyberscoop.com/xss-cybercrime-forum-admin-arrest/SH.ITJUST.WORKS
24 JulTrump AI plan pushes critical infrastructure to use AI for cyber defense | CyberScoopsubmitted by kid to cybersecurity 4 points | 1 comments https://cyberscoop.com/trump-ai-action-plan-critical-infrastructure-cyber-defense/SH.ITJUST.WORKS
24 JulPhishers Target Aviation Execs to Scam Customerssubmitted by Pro to cybersecurity 2 points | 0 comments https://krebsonsecurity.com/2025/07/phishers-target-aviation-execs-to-scam-customers/INFOSEC.PUB
24 JulGranular Permissions + Ephemeral Tokens = Hacker NightmareModern dev teams are ditching static secrets for ephemeral tokens with strict time-limited access. In this short, they reveal how developers now get unique, short-lived tokens and granular permission to only the fields or tables they need—nothing more. It's a new era of secure ac…YOUTUBE.COM
24 JulSecurity by Design — UX and AI in Modern CybersecurityNelson Lee reveals how thoughtful design and emerging AI technologies are reshaping cybersecurity operations from the ground up. The post Security by Design — UX and AI in Modern Cybersecurity appeared first on Palo Alto Networks Blog .PALOALTONETWORKS.COM
24 JulRogue CAPTCHAs: Look out for phony verification pages spreading malwareBefore rushing to prove that you're not a robot, be wary of deceptive human verification pages as an increasingly popular vector for delivering malwareWELIVESECURITY.COM
🌐 CYBER THREAT LANDSCAPE 2[−]
24 JulCastleLoader Malware Infects 469 Devices Using Fake GitHub Repos and ClickFix PhishingCybersecurity researchers have shed light on a new versatile malware loader called CastleLoader that has been put to use in campaigns distributing various information stealers and remote access trojans (RATs). The activity employs Cloudflare-themed ClickFix phishing attacks and f…THEHACKERNEWS.COM
24 JulNew Koske Linux malware hides in cute panda imagesA new Linux malware named Koske may have been developed with artificial intelligence and is using seemingly benign JPEG images of panda bears to deploy malware directly into system memory. [...]BLEEPINGCOMPUTER.COM
📡 INFOSEC NEWS 8[−]
24 JulHow to protect yourself from Google Forms scams | Kaspersky official blogWe're sharing a recent example of a scam using Google Forms and a way to completely avoid it.KASPERSKY.COM
24 JulHow Solid Protocol Restores Digital AgencyThe current state of digital identity is a mess. Your personal information is scattered across hundreds of locations: social media companies, IoT companies, government agencies, websites you have accounts on, and data brokers you’ve never heard of. These entities collect, s…SCHNEIER.COM
24 JulWatch This Webinar to Uncover Hidden Flaws in Login, AI, and Digital Trust — and Fix ThemIs Managing Customer Logins and Data Giving You Headaches? You're Not Alone! Today, we all expect super-fast, secure, and personalized online experiences. But let's be honest, we're also more careful about how our data is used. If something feels off, trust can vanish in an insta…THEHACKERNEWS.COM
24 JulPentests once a year? Nope. It’s time to build an offensive SOCYou wouldn’t run your blue team once a year, so why accept this substandard schedule for your offensive side? Your cybersecurity teams are under intense pressure to be proactive and to find your network’s weaknesses before adversaries do. But in many organizations, offensive secu…THEHACKERNEWS.COM
24 JulCybercrime forum Leak Zone publicly exposed its users’ IP addressesExclusive: The popular "leaking and cracking" forum left one of its databases exposed to the internet without a password, exposing the IP addresses of its users logging in.TECHCRUNCH.COM
24 JulPhishers Target Aviation Execs to Scam CustomersKrebsOnSecurity recently heard from a reader whose boss's email account got phished and was used to trick one of the company's customers into sending a large payment to scammers. An investigation into the attacker's infrastructure points to a long-running Nigerian cybercrime grou…KREBSONSECURITY.COM
24 JulOpenAI confirms ChatGPT Agent is now rolling out for $20 Plus usersChatGPT Agent is now rolling out to users with $20 Plus subscription, but OpenAI warns that it will take a few days for the rollout to finish. [...]BLEEPINGCOMPUTER.COM
24 JulProactive Email Security: The Power of AILead with AI-powered email security to stay ahead of attackers and personalize user interaction at every touchpoint, bridging technology and behavior with precision.TRENDMICRO.COM