July 2025

Cyber turbulence ahead as airlines strap in for a security crisis

Cyber turbulence ahead as airlines strap in for a security crisis 2025-07-21 at 07:35 By Sinisa Markovic Aircraft systems are getting more connected and ground operations increasingly integrated, and attackers are taking notice. They’re shifting from minor disruptions to targeting critical systems with serious intent. Any time an aircraft transmits data, whether it’s flight position

Cyber turbulence ahead as airlines strap in for a security crisis Read More »

Are your employees using Chinese GenAI tools at work?

Are your employees using Chinese GenAI tools at work? 2025-07-21 at 07:35 By Anamarija Pogorelec Nearly one in 12 employees are using Chinese-developed generative AI tools at work, and they’re exposing sensitive data in the process. That’s according to new research from Harmonic Security, which analyzed the behavior of roughly 14,000 end users in the

Are your employees using Chinese GenAI tools at work? Read More »

Microsoft Releases Urgent Patch for SharePoint RCE Flaw Exploited in Ongoing Cyber Attacks

Microsoft Releases Urgent Patch for SharePoint RCE Flaw Exploited in Ongoing Cyber Attacks 2025-07-21 at 07:35 By Microsoft on Sunday released security patches for an actively exploited security flaw in SharePoint and also released details of another vulnerability that it said has been addressed with “more robust protections.” The tech giant acknowledged it’s “aware of

Microsoft Releases Urgent Patch for SharePoint RCE Flaw Exploited in Ongoing Cyber Attacks Read More »

Hard-Coded Credentials Found in HPE Instant On Devices Allow Admin Access

Hard-Coded Credentials Found in HPE Instant On Devices Allow Admin Access 2025-07-21 at 07:35 By Hewlett-Packard Enterprise (HPE) has released security updates to address a critical security flaw affecting Instant On Access Points that could allow an attacker to bypass authentication and gain administrative access to susceptible systems. The vulnerability, tracked as CVE-2025-37103, carries a

Hard-Coded Credentials Found in HPE Instant On Devices Allow Admin Access Read More »

3,500 Websites Hijacked to Secretly Mine Crypto Using Stealth JavaScript and WebSocket Tactics

3,500 Websites Hijacked to Secretly Mine Crypto Using Stealth JavaScript and WebSocket Tactics 2025-07-21 at 07:35 By A new attack campaign has compromised more than 3,500 websites worldwide with JavaScript cryptocurrency miners, marking the return of browser-based cryptojacking attacks once popularized by the likes of CoinHive.  Although the service has since shuttered after browser makers

3,500 Websites Hijacked to Secretly Mine Crypto Using Stealth JavaScript and WebSocket Tactics Read More »

Fix incoming for MetaMask bug that’s slowly killing solid-state drives

Fix incoming for MetaMask bug that’s slowly killing solid-state drives 2025-07-21 at 06:20 By Cointelegraph by Stephen Katte Consensys says it’s aware of a small number of MetaMask users reporting “unusually high disk activity” and will be issuing a fix very soon. This article is an excerpt from Cointelegraph.com News View Original Source

Fix incoming for MetaMask bug that’s slowly killing solid-state drives Read More »

Vibe coding service Replit deleted user’s production database, faked data, told fibs galore

Vibe coding service Replit deleted user’s production database, faked data, told fibs galore 2025-07-21 at 06:20 By Simon Sharwood AI ignored instruction to freeze code, forgot it could roll back errors, and generally made a terrible hash of things The founder of SaaS business development outfit SaaStr has claimed AI coding tool Replit deleted a

Vibe coding service Replit deleted user’s production database, faked data, told fibs galore Read More »

3.5 Million Records Exposed in Australian Global Fashion Brand Data Breach

3.5 Million Records Exposed in Australian Global Fashion Brand Data Breach 2025-07-21 at 04:52 View original post at vpnMentor Cybersecurity Researcher, Jeremiah Fowler, discovered and reported to vpnMentor about an unencrypted and non-password-protected database that contained 3,587,960 records. The database, which presumably belongs to an Australian fashion brand, held invoices, shipping information, and return details.

3.5 Million Records Exposed in Australian Global Fashion Brand Data Breach Read More »

Microsoft SharePoint servers under attack via zero-day vulnerability with no patch (CVE-2025-53770)

Microsoft SharePoint servers under attack via zero-day vulnerability with no patch (CVE-2025-53770) 2025-07-21 at 00:02 By Zeljka Zorz Attackers are exploiting a zero-day variant (CVE-2025-53770) of a SharePoint remote code execution vulnerability (CVE-2025-49706) that Microsoft patched earlier this month, the company has confirmed on Saturday. CVE-2025-53770 is being leveraged to place a backdoor on vulnerable

Microsoft SharePoint servers under attack via zero-day vulnerability with no patch (CVE-2025-53770) Read More »

Saylor signals Bitcoin buy as Strategy’s stash climbs to over $71B

Saylor signals Bitcoin buy as Strategy’s stash climbs to over $71B 2025-07-20 at 21:09 By Cointelegraph by Vince Quill Strategy continues accumulating Bitcoin as it hits all-time highs in July, and the total crypto market cap breaches the $4 trillion mark. This article is an excerpt from Cointelegraph.com News View Original Source

Saylor signals Bitcoin buy as Strategy’s stash climbs to over $71B Read More »

EncryptHub Targets Web3 Developers Using Fake AI Platforms to Deploy Fickle Stealer Malware

EncryptHub Targets Web3 Developers Using Fake AI Platforms to Deploy Fickle Stealer Malware 2025-07-20 at 19:41 By The financially motivated threat actor known as EncryptHub (aka LARVA-208 and Water Gamayun) has been attributed to a new campaign that’s targeting Web3 developers to infect them with information stealer malware. “LARVA-208 has evolved its tactics, using fake

EncryptHub Targets Web3 Developers Using Fake AI Platforms to Deploy Fickle Stealer Malware Read More »

Bitcoin gets $125K target as trader sees ‘big move’ next, ETH hits $3750

Bitcoin gets $125K target as trader sees ‘big move’ next, ETH hits $3750 2025-07-20 at 19:07 By Cointelegraph by William Suberg Bitcoin and Ether traders are eyeing price milestones into the weekly close, with a resistance trend line keeping BTC bulls from heading to all-time highs. This article is an excerpt from Cointelegraph.com News View

Bitcoin gets $125K target as trader sees ‘big move’ next, ETH hits $3750 Read More »

Embedding human rights into crypto isn’t optional, it’s foundational

Embedding human rights into crypto isn’t optional, it’s foundational 2025-07-20 at 19:07 By Cointelegraph by Shady El Damaty Embedding human rights into crypto systems is a necessity. Self-custody, privacy-by-default, and censorship-resistant personhood must be core design principles for any technology. The future of digital freedom depends on it. This article is an excerpt from Cointelegraph.com

Embedding human rights into crypto isn’t optional, it’s foundational Read More »

US signals intention to rethink job H-1B lottery

US signals intention to rethink job H-1B lottery 2025-07-20 at 17:17 By Thomas Claburn Foreign worker program represents betrayal of US computer science students, advocacy group argues The US Department of Homeland Security (DHS) and the US Citizenship and Immigration Services (USCIS) intend to reevaluate how H-1B visas are issued, according to a regulatory filing.…

US signals intention to rethink job H-1B lottery Read More »

SharePoint Under Attack: Microsoft Warns of Zero-Day Exploited in the Wild – No Patch Available

SharePoint Under Attack: Microsoft Warns of Zero-Day Exploited in the Wild – No Patch Available 2025-07-20 at 17:16 By Mike Lennon Enterprises running SharePoint servers should not wait for a fix for CVE-2025-53770 and should commence threat hunting to search for compromise immediately. The post SharePoint Under Attack: Microsoft Warns of Zero-Day Exploited in the

SharePoint Under Attack: Microsoft Warns of Zero-Day Exploited in the Wild – No Patch Available Read More »

Experts say ‘just a starting point’ as Crypto Week ends on a high note

Experts say ‘just a starting point’ as Crypto Week ends on a high note 2025-07-20 at 15:03 By Cointelegraph by Amin Haqshanas The GENIUS Act marks a turning point for crypto regulation, but experts say true integration with finance and identity systems is only beginning. This article is an excerpt from Cointelegraph.com News View Original

Experts say ‘just a starting point’ as Crypto Week ends on a high note Read More »

UK uncovers novel Microsoft snooping malware, blames and sanctions GRU cyberspies

UK uncovers novel Microsoft snooping malware, blames and sanctions GRU cyberspies 2025-07-20 at 14:28 By Jessica Lyons Fancy Bear can’t keep its claws out of Outlook inboxes The UK government is warning that Russia’s APT28 (also known as Fancy Bear or Forest Blizzard) has been deploying previously unknown malware to harvest Microsoft email credentials and

UK uncovers novel Microsoft snooping malware, blames and sanctions GRU cyberspies Read More »

Critical Unpatched SharePoint Zero-Day Actively Exploited, Breaches 75+ Global Organizations

Critical Unpatched SharePoint Zero-Day Actively Exploited, Breaches 75+ Global Organizations 2025-07-20 at 13:17 By A critical security vulnerability in Microsoft SharePoint Server has been weaponized as part of an “active, large-scale” exploitation campaign. The zero-day flaw, tracked as CVE-2025-53770 (CVSS score: 9.8), has been described as a variant of CVE-2025-49706 (CVSS score: 6.3), a spoofing

Critical Unpatched SharePoint Zero-Day Actively Exploited, Breaches 75+ Global Organizations Read More »

Scroll to Top