Do Son A global e-commerce fraud campaign uses thousands of fake retail websites mimicking Apple, Nordstrom, and more, to steal credit card data, with roots tied to Chinese developers.
Cisco warns of two critical flaws (CVE-2025-20281, CVE-2025-20282, CVSS 10.0) in ISE and ISE-PIC allowing unauthenticated remote root code execution. Apply patches immediately.
North Korean APTs are using "NimDoor," a new Nim-based macOS malware, to target Web3/crypto startups via fake Zoom meetings, stealing browser, Keychain, and Telegram data with novel persistence.
A flaw (CVE-2025-6297, CVSS 8.2) in dpkg-deb allows DoS via disk quota exhaustion by leaving temporary files. Update immediately to prevent system instability.
Group-IB uncovers Qwizzserial, a new Android malware family stealing financial data from thousands in Uzbekistan by exploiting SMS-based 2FA via Telegram-distributed APKs.
ASEC uncovers attacks on Linux servers installing legitimate proxy software (TinyProxy, Sing-box) to hijack resources for covert operations, bypassing traditional malware detection.
Fortinet exposes a DCRat campaign impersonating a Colombian government agency, using obfuscated multi-stage infection, steganography, and AMSI bypass to deliver the RAT.
A new macOS information stealer, a potential AMOS variant, targets crypto users and Ledger Live accounts, stealing passwords and wallet data using stealthy daemonization and local admin prompt tactics.
Qantas Airways confirms a cyberattack on a third-party contact center platform exposed personal data of up to 6 million customers. No financial data or passwords compromised.
Microsoft is increasing prices for on-premises server products by 10% and CAL Suites by up to 20% starting July/August 2025, pushing enterprises towards cloud subscriptions.
Cloudflare launches "Pay Per Crawl," allowing websites to charge AI companies for content scraping. Publishers can set prices, aiming for a new economic model for the web.
Apple is suing former Vision Pro engineer Di Liu, accusing him of stealing thousands of confidential files and joining competitor Snap, raising concerns about trade secret exfiltration.
Microsoft silently updated a blog post, correcting Windows' active user count back to 1.4 billion after an initial "over one billion" implied a 400 million user drop in 3 years.
A California jury ordered Google to pay $314M in damages, ruling it secretly used Android users' cellular data for tracking without consent. Google will appeal.
Google launches "Offerwall" on Ad Manager, a new tool for publishers to monetize content via ads, surveys, or micropayments, as AI search features impact traditional revenue streams.
Cloudflare launched an AI Crawler Leaderboard ranking AI company web crawlers. ByteDance is last for ignoring robots.txt and lack of IP transparency, prompting new blocking defaults.
A critical RCE flaw (CVE-2025-47812, CVSS 10.0) in Wing FTP Server allows unauthenticated attackers to execute arbitrary Lua code via NULL byte injection, compromising the server
A critical flaw (CVE-2025-6463, CVSS 8.8) in Forminator WordPress plugin allows unauthenticated arbitrary file deletion, leading to site takeover.
A Chinese student was jailed in London for running a smishing campaign with an "SMS Blaster" hidden in his car, spoofing texts to steal data.
ANSSI exposes "Houken," a China-linked APT exploiting Ivanti CSA zero-days (CVE-2024-8190, CVE-2024-8963, CVE-2024-9380) and deploying Linux rootkits for cyber-espionage against strategic sectors.
OFAC sanctioned Russia's Aeza Group, a bulletproof hosting provider, and its executives for enabling ransomware, infostealers (Meduza, Lumma), and darknet drug trafficking operations globally.
The DOJ dismantled a North Korean scheme exploiting remote IT jobs at 100+ U.S. firms, using stolen identities and laundering millions to fund DPRK weapons programs.