ProPublica exposes Microsoft's risky "digital escort" program: Chinese engineers maintain US defense systems, supervised by low-skilled US staff. Experts warn of major cybersecurity and national security threats.#MicrosoftDigitalEscort

The Trump administration shifted $1 billion from defensive to offensive cyber operations, boosting Indo-Pacific Command but raising vulnerability concerns due to secrecy surrounding the specifics.#CyberShiftIndoPacific

Eight Chinese nationals, some Penn State students, were indicted for a computer hacking scam. The scheme defrauded victims, including elderly Pennsylvanians, of at least $4.4 million via fraudulent online representations and promises. The individuals are in the U.S. on student visas.

DC law firm Wiley Rein suffered a data breach, with suspected Chinese hackers accessing employee emails. Mandiant is investigating; clients and law enforcement notified. China denies involvement.#WileyReinDataBreach

Urgent: CISA mandates federal agencies patch Citrix NetScaler (Citrix Bleed 2) by July 12, 2025. Active exploitation confirmed; remote attackers can steal credentials.#CitrixBleed2PatchNow

The US secured the arrest of Xu Zewei in Milan on July 3rd, 2025. Accused of working for China's Ministry of State Security, he faces extradition to America for wire fraud, identity theft, and hacking. This marks a shift from previous US efforts to merely expose Chinese hackers.#XuZeweiArrest

Four teens (3 males, 1 female) arrested in England for M&S & Co-op cyberattacks causing £300m losses. Electronic devices seized. Suspects face computer misuse, blackmail, money laundering & organized crime charges.#M&SCooperCyberAttack

Teenage hacking group Scattered Spider targets US corporations with ransomware. Their methods (help desk impersonation, SIM swapping, ESXi attacks) remain effective, exposing corporate cybersecurity weaknesses. Decentralization and underage members hinder law enforcement.#ScatteredSpiderRansomware

Activision removed the Microsoft Store/Game Pass version of Call of Duty: WWII due to a PC-specific exploit enabling remote code execution (RCE) hacks. Players reported compromised computers. The flaw, present only in this version, allowed malware installation. Activision is working on a patch.

Xu Zewei, a 33-year-old Chinese national, was arrested in Milan for alleged ties to the Silk Typhoon hacking group. The group is accused of cyberespionage targeting US organizations and government agencies, including attacks on COVID-19 researchers in 2020. The US seeks extradition.

Cambodia accuses Thailand of a false cyberattack claim involving North Korean hackers, countering with accusations of Thai group "BlackEye-Thai" targeting Cambodian systems. This follows a deadly border clash and escalating tensions.#CambodiaThailandCyberWar

DragonForce and RansomHub's turf war doubles extortion risks for companies. DragonForce's expansion fuels this conflict, mirroring a UnitedHealth incident, exposing the volatile ransomware-as-a-service market.#RansomwareTurfWar

Two critical vulnerabilities (CVE-2025-32462, CVSS 2.8; CVE-2025-32463, CVSS 9.3) in Linux Sudo (versions before 1.9.17p1) allow local privilege escalation to root. CVE-2025-32463 requires no sudoers file entry. Patches are available. Immediate patching is advised.#SudoVulnerability

SK Telecom lost 800,000 subscribers following a 2021 data breach, despite compensation efforts. Continued losses threaten market dominance and forced a lowered sales forecast, as competitors actively recruit former customers.#SKTelecomDataBreachImpact

Qantas data breach exposes names, emails, phone numbers, and birthdates of up to 6 million customers via a third-party system. Financial and passport data unaffected. AFP investigating.#QantasDataBreach

Security researcher Eric Daigle found an SQL injection flaw in stalkerware "Catwatchful," exposing 62,000 user accounts' logins (including admin's). He worked with TechCrunch to shut it down, but it quickly reappeared.#CatwatchfulVulnerability

Ingram Micro's internal systems, including Xvantage and Impulse, were crippled by a July 5th ransomware attack (possibly via VPN). Microsoft 365 remains online, but the company hasn't confirmed the incident.#IngramMicroRansomwareAttack

Rey (HellCat) claims a May 30th Telefónica breach, stealing 106GB of data. A 5GB sample was leaked; Telefónica denies it. Full data release is threatened unless demands are met. A prior breach occurred in January.#TelefónicaDataBreach

SK Telecom faces penalties for a massive data breach. A South Korean investigation found negligence; hackers stole ~10GB of subscriber data due to insufficient security since August 2021. Expect fines and mandated security upgrades.#SKTelecomDataBreach

C&M Software, a Brazilian bank service provider, suffered a $140M heist. A compromised employee's credentials, sold for ~$2700, allowed hackers to steal from six institutions. $30-40M was laundered via Latin American crypto exchanges, exposing centralized system weaknesses.#CMSoftwareHeist

Former NSA hacker David Kennedy warned on Fox Business' Mornings with Maria about the hacking group "Scattered Spider" expanding its cyberattacks to target the airline industry. The segment aired July 3, 2025.#ScatteredSpiderAirlineThreat

Chinese hackers (Houken/UNC5174) exploited three zero-day vulnerabilities (CVE-2024-8963, CVE-2024-9380, CVE-2024-8190) in Ivanti CSA devices, targeting French government and telecoms, deploying web shells, rootkits, and GOREVERSE malware across various sectors.#IvantiCSAZeroDayExploit

A politically motivated cyberattack hit Columbia University on June 24th. Stolen student data and campus outages followed, with Trump's image displayed on monitors. The university is investigating the breach's extent and ties to administration disputes.#ColumbiaCyberattack

Iranian hackers threaten to leak stolen emails from Trump associates, including his chief of staff and Stormy Daniels. US officials deem it a smear campaign and promise prosecution, amid broader Iranian cyberattack warnings.#IranTrumpCyberAttack

Microsoft, DocuSign, and other brands are impersonated in PDF phishing campaigns. Victims are tricked into calling spoofed numbers (TOAD), enabling attackers to steal data or install malware via VoIP and social engineering. The FBI warns of this urgent threat.#PDFPhishingScam

Chrome's fourth 2023 zero-day (CVE-2025-6554), a V8 engine type confusion flaw, is patched. Exploited in the wild, it allows arbitrary code execution. Update your Windows, Mac, or Linux Chrome browser now.#ChromeZeroDayPatch

Qantas suffered a July 1, 2025 cyberattack affecting ~6 million customers via a third-party platform breach. Names, emails, phone numbers, and birthdates were compromised, but financial data and passwords were safe. Possible Scattered Spider group involvement. Authorities notified.

Qantas experienced a cyberattack affecting 6 million customers. Stolen data included names, emails, phone numbers, birthdates, and frequent flyer numbers, but not financial or passport details. Qantas is investigating, has notified authorities, and is contacting affected customers.

Federal suit against ex-Michigan coach Matt Weiss, alleging data breach of 11 female athletes, now includes Coach Harbaugh, President Ono, and AD Manuel. The university's alleged inaction and insufficient oversight are also cited. Weiss faces criminal charges.#MichiganDataBreachLawsuit

Cybercrime group Scattered Spider targets airlines (Hawaiian, WestJet) and transportation, using social engineering and extortion. Previous victims include UK retail, insurance, and tech firms. Data theft is a key tactic.#ScatteredSpiderCyberattacks

Scattered Spider (0ktapus/UNC3944) targets aviation/transportation after hitting retail/insurance. WestJet and possibly Hawaiian Airlines were victims. They exploit help desk weaknesses and MFA bypasses. Strengthen help desk security and MFA.#ScatteredSpiderThreat

Birdie Kingston (27), a former Western Sydney University student, faces 20 charges for hacking incidents since 2021. The breaches involved data theft, infrastructure compromise, and impacted hundreds. Alleged crimes include manipulating records and threatening dark web data sales (100+GB).

Iranian-linked hackers are targeting specific industries with cyberattacks amid escalating conflict. The targeted industries and the potential impact on businesses are being analyzed by WRAL Investigates and cybersecurity specialists. More details available in the linked report.#IranCyberattacks

Hackers injected keyloggers into over 70 Microsoft Exchange servers, exploiting ProxyShell/ProxyLogon. Two keyloggers sent stolen data locally or externally (Telegram/DNS). Victims included government & financial institutions across 26 countries.#ProxyShellExchangeHack

Iranian hackers used fake Google Meet invites, impersonating figures like Caroline Glick, to target Israeli journalists. The phishing campaign aimed to steal Google account data. Israeli forces stopped 85 similar attacks this year.#IsraelCyberAttack

Salt Typhoon, a Chinese state-sponsored group, exploited unpatched Cisco IOS XE vulnerability CVE-2023-20198 in February 2025, breaching a Canadian telecom provider. Admin access & network traffic were stolen. Further attacks are expected.#SaltTyphoonCiscoExploit

313 Team, Iranian-backed hackers, claimed a DDoS attack on Truth Social after Trump's post about Iranian nuclear strikes. Brief outages and errors followed. Claims are corroborated.#313TeamDDoS

US strikes on Iranian nuclear sites prompt DHS warning of potential Iranian cyberattacks. Expect attacks ranging from minor disruptions to major intrusions by state-sponsored actors targeting US networks and infrastructure. Past actions demonstrate Iran's capabilities.#IranCyberThreat

The hacking group Tapandegan claims to have compromised 73 million Iranian bank accounts. They publicized this breach on social media, warning the public about the compromised security of the Iranian banking system and urging citizens to withdraw their funds.#TapandeganIranBankHack

Scattered Spider's April 2025 attacks on Marks & Spencer and Co-op caused $363M-$592M in damages (Category 2). Social engineering targeted IT help desks. Google warns US insurers are next.#ScatteredSpiderM&SAttack

On June 22, 2025, Iranian cyber activists breached the Israel Antiquities Authority's X/Twitter account. The hackers posted a message threatening Israeli commanders with consequences for "war crimes," alongside an image of a missile and Ayatollah Khamenei.#IranIsraelCyberAttack

Sophisticated Chinese cyberattacks target US government, political, tech, and journalistic entities via vulnerable smartphones and apps. Weak mobile security, user error, and Chinese telecom infrastructure aided real-time interception of calls and texts.#ChinaCyberThreat

Iranian hackers, allegedly linked to the Revolutionary Guard, cyberattacked Tirana, impacting municipal services and potentially exposing 800,000 residents' data. This retaliation for Albania hosting Iranian dissidents follows years of similar attacks.#IranCyberattackAlbania

Russian hackers (UNC6293) bypassed Gmail MFA via social engineering, impersonating US officials to steal app-specific passwords (April-June 2025). Targets: academics & Russia critics. Use Google's Advanced Protection Program.#UNC6293GmailHack

Iranian cyberattacks targeted Israeli security cameras. The goal was to improve the accuracy of Iranian missile systems by gathering real-time intelligence on Israeli infrastructure and military deployments. The attacks leveraged vulnerabilities in camera systems to gain unauthorized access.

North Korean hackers exploit weak operational security in decentralized protocols, targeting human error & poor key management. Oak Security finds widespread vulnerabilities beyond smart contracts. Web3 needs stronger OPSEC, mimicking TradFi's layered security.#Web3OPSEC

Cybernews reports a massive data breach exposing 16 billion passwords from 30 databases, impacting Apple, Google, Meta, and numerous other platforms. This is considered one of history's largest breaches. Experts recommend enabling two-factor authentication and using password managers.

China's state-sponsored hackers targeted Russia's military since the Ukraine war, despite a "no-limits" partnership. Leaked FSB documents reveal Russia's concerns, highlighting deep mutual distrust.#ChinaRussiaCyberWar

Scattered Spider cyberattacks hit Aflac, Erie, and Philadelphia Insurance, potentially exposing customer data. Aflac's breach is the largest. The FBI is investigating.#CyberattackInsuranceBreach

CERT-In issued a cybersecurity alert regarding critical vulnerabilities in Google Chrome. Users are urged to immediately update to the latest version to mitigate these security flaws. The alert highlights unspecified zero-day vulnerabilities.#ChromeZeroDayAlert