⚠️ VULNERABILITY DISCLOSURE 5[−]
26 JulArizona Woman Sentenced for Aiding North Korean IT Workers in Cyber OperationsChristina Marie Chapman, a 50-year-old Arizona woman, has been sentenced to 102 months in prison for her role in an elaborate fraud scheme that helped North Korean IT workers pose as U.S. citizens to obtain remote positions at over 300 American companies. The scheme generated mor…GBHACKERS.COM
26 JulMicrosoft Investigates Leak in Early Warning System Used by Chinese Hackers to Exploit SharePoint VulnerabilitiesChinese laws requiring vulnerability disclosure to the government create transparency issues and potential conflicts for international cybersecurity efforts. Microsoft is probing whether a leak from its confidential early warning system enabled Chinese state-sponsored hackers to …GBHACKERS.COM
26 JulHackers Exploit Official Gaming Mouse Software to Spread Windows-based Xred MalwareGaming peripheral manufacturer Endgame Gear has disclosed a security incident involving malware-infected software distributed through their official website, affecting users who downloaded the OP1w 4k v2 mouse configuration tool between June 26 and July 9, 2025. The company has i…GBHACKERS.COM
26 JulIf You Can’t Find Your Data… You Can’t Protect It 😬In this short but powerful cybersecurity moment, Melina Scotto drops a truth bomb that hits every cyber pro hard: if you don’t know where your data lives, you can’t protect it. Jessica Hoffman questions the often-overlooked practice of data classification — revealing just how ess…YOUTUBE.COM
26 Jul10,000 Vulns. 1 Mistake. Your Fault.When cybersecurity pro Matthew Toussain dropped this truth bomb on vulnerability management, jaws dropped. With over 10,000 vulnerabilities to handle, teams often skip the most crucial step—validation. In this short, Matthew breaks down how relying solely on authenticated scans c…YOUTUBE.COM
📢 SECURITY ADVISORIES 1[−]
26 JulPost SMTP plugin flaw exposes 200K WordPress sites to hijacking attacksMore than 200,000 WordPress websites are using a vulnerable version of the Post SMTP plugin that allows hackers to take control of the administrator account. [...]BLEEPINGCOMPUTER.COM
🔥 INCIDENT REPORTING 4[−]
26 JulThe Evolution and Defense Against Advanced Phishing AttacksThis is repeat of a broadcast from last October, still relevant, especially in the light of so many current breaches which have begun not with technical weaknesses but with phishing and social engineering. In this deeper dive episode of 'Cybersecurity Today,' hosts Jim Love and D…CYBERSECURITYTODAY.LIBSYN.COM
26 JulAllianz Life says ‘majority’ of customers’ personal data stolen in cyberattackExclusive: Allianz Life said the "majority" of its customers and employees had data stolen in the July cyberattack. The insurance giant has more than 125 million customers worldwide.TECHCRUNCH.COM
26 JulDating safety app Tea breached, exposing 72,000 user imagesTea, an app that allows women to post anonymous comments about men they’ve supposedly dated, announced Friday that it has suffered a data breach, with hackers gaining access to 72,000 images.TECHCRUNCH.COM
26 JulAllianz Life confirms data breach impacts majority of 1.4 million customersInsurance company Allianz Life has confirmed that the personal information for the "majority" of its 1.4 million customers was exposed in a data breach that occurred earlier this month. [...]BLEEPINGCOMPUTER.COM
🕵️ THREAT INTELLIGENCE 11[−]
26 JulUNC3944 Attacking VMware vSphere and Enabling SSH on ESXi Hosts to Reset 'root' Passwordssubmitted by cm0002 to cybersecurity 1 points | 0 comments https://cybersecuritynews.com/unc3944-attacking-vmware-vsphere/INFOSEC.PUB
26 JulMuddled Libra: From Social Engineering to Enterprise-Scale DisruptionUnit 42's latest research reveals how Muddled Libra (AKA Scattered Spider) has transformed into teams that pose risks to organizations worldwide. The post Muddled Libra: From Social Engineering to Enterprise-Scale Disruption appeared first on Palo Alto Networks Blog .PALOALTONETWORKS.COM
26 JulWhat Happens If You Clone a Voice Without Consent? 😳When it comes to AI and cybersecurity, one question changes everything: What happens if a company clones your voice without asking? In this short clip, Martin Tschammer shares how his team built a governance model around Consent, Control, and Collaboration to protect identity in …YOUTUBE.COM
26 JulDDoS, Bots, APIs… Modern WAFs Handle It AllWeb application firewalls have come a long way—this short breaks down how today’s WAFs do way more than just filter traffic. Sandy Carielli from Forrester shares how top vendors are stacking up in bot management, API protection, DDoS defense, and more. If your last look at WAFs w…YOUTUBE.COM
26 JulSecurity Tip: Don’t Let Hype Decide Your AI StackWhen it comes to AI in cybersecurity, not every solution needs to be cutting-edge. In this short, Pravallika Devineni shares a powerful insight from the utilities industry—where traditional AI outperforms LLMs for narrow, well-defined problems with clean data. It’s a reminder tha…YOUTUBE.COM
26 JulDNS security is important but DNSSEC may be a failed experimentsubmitted by cm0002 to cybersecurity 1 points | 0 comments https://www.theregister.com/2025/07/25/systems_approach_column_dns_security/INFOSEC.PUB
26 JulIs “Powered By AI” Just Corporate Lipstick?Boards are now pressuring CIOs to slap “AI-powered” labels on every tech project—whether it makes sense or not. In this short, cybersecurity experts reveal how companies are turning AI into a meaningless checkbox just to meet boardroom KPIs. Is it innovation or just marketing flu…YOUTUBE.COM
26 JulMicrosoft Copilot Rooted to Gain Unauthorized Root Access to its Backend Systemsubmitted by cm0002 to cybersecurity 7 points | 0 comments https://cybersecuritynews.com/microsoft-copilot-rooted/INFOSEC.PUB
26 JulInstant Approval, Maximum Security — Too Good to Be True?When Bob tries to install a printer without admin rights, ThreatLocker steps in—blocking the executable instantly. But here’s the twist: with just one tap, IT grants temporary access remotely, letting Bob finish the job securely. No passwords. No hassle. Just streamlined cybersec…YOUTUBE.COM
26 JulThe DARK Side of Secrets in Cybersecurity 🌒Most developers think secrets are just static API tokens... but that’s only scratching the surface. In this short, Vlad breaks down the real dangers behind secrets—like ephemeral credentials, certificates, encryption keys, and the messy lifecycle behind machine authentication. Th…YOUTUBE.COM
26 JulIf You’re Not Reading the SLA, You’re in Trouble 😬Sheena Thomas, a cybersecurity expert, shares a chilling reminder for anyone trusting cloud service providers: read the fine print or risk everything. In this short clip, she breaks down why due diligence and understanding SLAs (Service Level Agreements) are non-negotiable in the…YOUTUBE.COM