ICYMI: 2025-07-21
Latest Headlines
Iran-Linked DCHSpy Android Malware Masquerades as VPN Apps to Spy on Dissidents
China-Linked Hackers Launch Targeted Espionage Campaign on African IT Infrastructure
⚡ Weekly Recap: SharePoint 0-Day, Chrome Exploit, macOS Spyware, NVIDIA Toolkit RCE and More
PoisonSeed Hackers Bypass FIDO Keys Using QR Phishing and Cross-Device Sign-In Abuse
Microsoft Releases Urgent Patch for SharePoint RCE Flaw Exploited in Ongoing Cyber Attacks
Hard-Coded Credentials Found in HPE Instant On Devices Allow Admin Access
3,500 Websites Hijacked to Secretly Mine Crypto Using Stealth JavaScript and WebSocket Tactics
Iranian APT Targets Android Users With New Variants of DCHSpy Spyware
Marketing, Law Firms Say Data Breaches Impact Over 200,000 People
Surveillance Firm Bypasses SS7 Protections to Retrieve User Location
750,000 Impacted by Data Breach at The Alcohol & Drug Testing Service
Microsoft Patches ‘ToolShell’ Zero-Days Exploited to Hack SharePoint Servers
Exploited CrushFTP Zero-Day Provides Admin Access to Servers
NailaoLocker Ransomware Attacking Windows Systems Using Chinese SM2 Cryptographic Standard
Threat Actors Leverage Zoho WorkDrive Folder to Deliver Obfuscated PureRAT Malware
Microsoft’s AppLocker Flaw Allows Malicious Apps to Run and Bypass Restrictions
Weak Password Let Ransomware Gang Destroy 158-Year-Old Company
Surveillance Company Using SS7 Bypass Attack to Track the User’s Location Information
APT41 Hackers Leveraging Atexec and WmiExec Windows Modules to Deploy Malware
Dell Data Breach – Test Lab Platform Hacked by World Leaks Group
CISA Warns of Microsoft SharePoint Server 0-Day RCE Vulnerability Exploited in Wild
Lighthouse Studio RCE Vulnerability Let Attackers Gain Access to Hosting Servers
Intel announces end of Clear Linux OS project, archives GitHub repos
Veeam Recovery Orchestrator users locked out after MFA rollout
Dior begins sending data breach notifications to U.S. customers
Over 1,000 CrushFTP servers exposed to ongoing hijack attacks
Learn 14 Languages from Babbel with this exclusive StackSocial deal
Dell confirms breach of test lab platform by World Leaks extortion group
Microsoft releases emergency patches for SharePoint RCE flaws exploited in attacks
– MTZ