Do Son Lookout uncovers an evolved DCHSpy Android spyware linked to Iran's MuddyWater APT, targeting high-value geopolitical entities with new Starlink and VPN lures.
cybernewswire
Menlo Park, United States, 22nd July 2025, CyberNewsWire
Austin, United States / TX, 22nd July 2025, CyberNewsWire
Cisco warns of active exploitation for three critical ISE flaws (CVSS 10.0), allowing unauthenticated RCE and full system control. Update ISE 3.3 and 3.4 immediately!
Firefox v141.0 rolls out with new AI-powered tab grouping that keeps your data local, significant memory optimizations for Linux, and WebGPU support for Windows users.
GitHub now allows users to sign in and create new accounts using their Google credentials, offering a streamlined login experience for developers.
Kubernetes warns of CVE-2025-7342 (CVSS 8.1) in Image Builder. Default credentials in Windows VM images (Nutanix/OVA) allow unauthenticated root access to clusters. Patch immediately!
The UK government has signed an MoU with OpenAI, focusing on AI infrastructure, safety research, and public sector integration to accelerate its national AI agenda.
Chrome for iOS now offers enhanced data separation for work and personal Google accounts, alongside new Enterprise controls like URL filtering and audit log streaming for IT.
OpenAI's ChatGPT now processes 2.5 billion requests daily, with 330 million from the US. This surge signals a rapid shift in AI adoption, challenging traditional search engines like Google.
Google's own store page subtly revealed the Pixel 10 design, showing a new color, a refined camera module with a telephoto lens, and hinting at a TSMC-made Tensor chip.
Microsoft is deprecating its UWP-based Microsoft 365 app. Functional updates end Oct 2025, security updates Dec 2026. Users must switch to Click-to-Run for continued support.
Xbox introduces "Cross-Device Play History" for Insiders, harmonizing gameplay across Xbox and Windows via cloud sync for a seamless, consistent gaming experience.
India aims to launch its first "Made in India" chip and open six fabs by late 2025 to boost domestic semiconductor manufacturing and reduce 90% import reliance.
Corning has settled an EU antitrust probe, agreeing to terminate exclusive supply deals for smartphone glass and avoid a substantial fine, ensuring fair competition.
Sophos patched five flaws in Sophos Firewall, including two critical RCEs (CVE-2025-6704, CVE-2025-7624) allowing remote attackers to take control under specific conditions.
Nokia's WaveSuite NOC platform has two severe command injection vulnerabilities (CVE-2025-24938, CVE-2025-24936) allowing remote code execution, even with low privileges.
Greedy Sponge, a financially motivated group, is back with an upgraded AllaKore RAT and SystemBC, targeting Mexican organizations for banking credentials and financial fraud.
Trustwave uncovers an Android malware cluster using fake Facebook & TikTok apps to lure victims via brand impersonation, abusing permissions for data collection and traffic monetization.
FortiGuard Labs unveils NailaoLocker, a new ransomware using Chinese SM2 encryption and a built-in, non-functional decryptor, suggesting a prototype or decoy.
wolfSSL 5.8.2 patches four vulnerabilities, including a critical Apple trust store bypass (CVE-2025-7395) and predictable randomness after fork(), impacting secure communications.
JPCERT/CC details a sophisticated, ongoing malware campaign exploiting Ivanti Connect Secure (CVE-2025-0282, -22457) using MDifyLoader, Cobalt Strike, vshell, and Fscan for stealthy persistent access.