Do Son SAP's July 2025 Patch Day fixes 27 vulnerabilities, including critical RCE (CVSS 10.0) in Live Auction Cockpit and multiple insecure deserialization flaws (CVSS 9.1) across NetWeaver components.
Isomorphic Labs (Google DeepMind's subsidiary) announced its first AI-designed drug is ready for clinical trials, marking a historic milestone in AI-driven pharmaceutical development.
The Free Software Foundation reports ongoing DDoS attacks since Aug 2024, with much traffic from AI company crawlers. Its small team is overwhelmed by the relentless web scraping.
Elon Musk will livestream the Grok 4 AI unveiling on July 9. The new model features multimodal input (text/image), 130K token context, enhanced reasoning, and Cursor editor integration for coding.
The FCC is reallocating part of the 6GHz Wi-Fi band to mobile carriers, shrinking Wi-Fi spectrum from 1200MHz to 500MHz. This threatens next-gen Wi-Fi speeds and innovation in the US.
Jack Dorsey launches "Bitchat," a new Bluetooth-based app for decentralized, P2P messaging without internet. It uses mesh networking and encryption for communication in restrictive environments.
Microsoft Edge's UI now loads in under 300ms (FCP), thanks to WebUI 2.0. This boosts responsiveness, making features like settings and split screen appear almost instantly.
iOS 26 Beta 3 refines the "Liquid Glass" UI, addressing readability issues by adjusting menu transparency in apps like Music and Safari, with a Public Beta expected soon.
Samsung's Galaxy Z Fold7 (4.2mm unfolded, 216g) and Flip7 (4.1-inch outer punch-hole) are leaked as its thinnest, lightest foldables yet, set to debut July 9 at Unpacked 2025.
Apple is appealing the EU's €500M DMA fine, calling the ruling "unprecedented." The company has revised App Store policies but will argue its case in court.
Samsung's new Galaxy S25 Edge has outsold all previous Plus-series models in Western Europe in its first week, potentially reshaping Samsung's flagship strategy.
MongoDB has patched two flaws: CVE-2025-6713 (CVSS 7.7) allows privilege escalation via $mergeCursors, and CVE-2025-6714 (CVSS 7.5) causes mongos DoS.
Cybereason exposes a deceptive malware campaign using compromised WordPress sites and the "ClickFix" technique to deliver weaponized NetSupport Manager RAT clients for remote access.
Trend Micro uncovers BERT ransomware (Water Pombero) deploying multi-threaded variants against Windows, Linux, and ESXi systems, showing code similarities to REvil's Linux variant.
Splunk exposes a campaign weaponizing Inno Setup installers to deploy RedLine Stealer, using obfuscated Pascal scripts and HijackLoader to steal browser/crypto data.
CERT@VDE warns of critical OS command injection flaws (CVE-2025-3626, CVE-2025-3705) in Frauscher railway systems, allowing remote admin compromise or physical attack via USB.
FortiGuard Labs exposes NordDragonScan, a new infostealer using weaponized HTA scripts in Ukrainian-themed phishing. It performs recon, steals browser profiles, and exfiltrates documents.
A phishing campaign impersonates HunCERT & WeTransfer, using LogoKit on AWS S3 with Cloudflare Turnstile to steal credentials. The active domain has zero VirusTotal detections.
XMRig cryptojacking is surging, leveraging LOLBAS techniques, PowerShell, and Scheduled Tasks to mine Monero undetected, with a 45% rally in XMR price driving the attacks.
JPCERT/CC warns of critical flaws in Nimesa Backup and Recovery (CVE-2025-48501, CVSS 9.8 RCE; CVE-2025-53473 SSRF). Unsupported versions pose severe risk to AWS data.
ASEC uncovers XwormRAT delivered via phishing emails using steganography, hiding sophisticated .NET malware within JPG images for stealthy execution and full system control.
A critical flaw (CVE-2025-41672, CVSS 10.0) in WAGO Device Sphere allows unauthenticated attackers full admin control via shared default JWT certificates. Update to v1.0.1 immediately!