SecurityWeek Briefing.

"Windows' infamous 'Blue Screen of Death' will soon turn black."

Views expressed in this cybesecurity, cyber crime update are those of the reporters and correspondens. Accessed on 29 June 2025, 2230 UTC.

Content and Source: Email subscription via https://feedly.com.

https://feedly.com/i/subscription/feed%2Fhttp%3A%2F%2Ffeeds.feedburner.com%2FSecurityweek

Please check mail link or scroll down to read your selections. Thanks for joining us today."

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

Jun 27, 2025

Windows’ Infamous ‘Blue Screen of Death’ Will Soon Turn Black

Microsoft replaces Blue Screen with Black

•

by Associated Press / 2d

After more than 40 years of being set against a very recognizable blue, the updated error message will soon be displayed across a black background. The post appeared first on SecurityWeek .

In Other News: Norway Dam Hacked, $177M Data Breach Settlement, UNFI Attack Update

by SecurityWeek News / 2d

Noteworthy stories that might have slipped under the radar: Norwegian dam hacked, AT&T agrees to $177 million data breach settlement, Whole Foods distributor restores systems after attack. The post appeared first on SecurityWeek .

Microsoft to Preview New Windows Endpoint Security Platform After CrowdStrike Outage

Microsoft enhances Windows resilience and recovery

•

by Eduard Kovacs / 2d

Microsoft is preparing a private preview of new Windows endpoint security platform capabilities to help antimalware vendors create solutions that run outside the kernel. The post appeared first on SecurityWeek .

RevEng.ai Raises $4.15 Million to Secure Software Supply Chain

by Ionut Arghire / 2d

RevEng.ai has raised $4.15 million in seed funding for an AI platform that automatically detects malicious code and vulnerabilities in software. The post appeared first on SecurityWeek .

Jun 26, 2025

Chinese Hackers Target Chinese Users With RAT, Rootkit

9 TTPs

•

by Ionut Arghire / 2d

China-linked Silver Fox hacking group is targeting Chinese users with fake installers carrying a RAT and a rootkit. The post appeared first on SecurityWeek .

Evidence Suggests Exploitation of CitrixBleed 2 Vulnerability

Initial Access (Enterprise TA0001)

•

by Eduard Kovacs / 2d

The Citrix NetScaler vulnerability tracked as CitrixBleed 2 and CVE-2025–5777 may be exploited in the wild for initial access. The post appeared first on SecurityWeek .

Vulnerability Exposed All Open VSX Repositories to Takeover

Open VSX vulnerability risks millions

•

by Ionut Arghire / 2d

A vulnerability in the extension publishing mechanism of Open VSX could have allowed attackers to tamper with any repository. The post appeared first on SecurityWeek .

Microsoft 365 Direct Send Abused for Phishing

9 TTPs

•

by Ionut Arghire / 2d

•

Microsoft 365 Direct Send exploited in phishing

Hackers are abusing the Microsoft 365 Direct Send feature to deliver phishing emails that bypass email security controls. The post appeared first on SecurityWeek .

Bipartisan Bill Aims to Block Chinese AI From Federal Agencies

US lawmakers propose ban on Chinese AI

•

by Associated Press / 3d

The proposal seeks to ban all use of the technology in the U.S. government, with exceptions for use in research and counterterrorism efforts. The post appeared first on SecurityWeek .

Man Who Hacked Organizations to Advertise Security Services Pleads Guilty

Kansas City man pleads guilty

•

by Eduard Kovacs / 3d

Nicholas Michael Kloster has pleaded guilty to computer hacking after targeting at least two organizations. The post appeared first on SecurityWeek .

Bonfy.AI Raises $9.5 Million for Adaptive Content Security Platform

BonfyAI secures funding for AI security

•

by Eduard Kovacs / 3d

Bonfy.AI has emerged from stealth mode to help organizations prevent cybersecurity, privacy and compliance risks. The post appeared first on SecurityWeek .

CISA Warns AMI BMC Vulnerability Exploited in the Wild

2 TTPs

•

by Ionut Arghire / 3d

CISA is urging federal agencies to patch a recent AMI BMC vulnerability and a half-a-decade-old bug in FortiOS by July 17. The post appeared first on SecurityWeek .

Jun 25, 2025

Central Kentucky Radiology Data Breach Impacts 167,000

3 TTPs

•

by Ionut Arghire / 3d

The personal information of 167,000 individuals was compromised in an October 2024 data breach at Central Kentucky Radiology. The post appeared first on SecurityWeek .

Critical Cisco ISE Vulnerabilities Allow Remote Code Execution

5 TTPs

•

by Ionut Arghire / 3d

•

Cisco ISE critical RCE vulnerabilities

Two critical vulnerabilities in Cisco ISE could allow remote attackers to execute arbitrary code with root privileges. The post appeared first on SecurityWeek .

British Man Suspected of Being the Hacker IntelBroker Arrested, Charged

British hacker charged with data theft

•

by Eduard Kovacs / 3d

25-year-old Kai West, believed to be the hacker IntelBroker, was arrested in France and charged by the United States. The post appeared first on SecurityWeek .

Critical Citrix NetScaler Flaw Exploited as Zero-Day

3 TTPs

•

by Ionut Arghire / 3d

Citrix has released patches for a critical vulnerability in NetScaler ADC and NetScaler Gateway exploited as a zero-day. The post appeared first on SecurityWeek .

Thousands of SaaS Apps Could Still Be Susceptible to nOAuth

by Kevin Townsend / 4d

New research suggests more than 10,000 SaaS apps could remain vulnerable to a nOAuth variant despite the basic issue being disclosed in June 2023. The post appeared first on SecurityWeek .

Microsoft Offers Free Windows 10 Extended Security Update Options as EOS Nears

Windows 10 free security updates available

•

by Eduard Kovacs / 4d

With end of support scheduled for October 2025, Windows 10 users will be able to continue receiving important security updates. The post appeared first on SecurityWeek .

Hackers Abuse ConnectWise to Hide Malware

5 TTPs

•

by Ionut Arghire / 4d

•

ConnectWise exploited for signed malware

G Data has observed a surge in malware infections originating from ConnectWise applications with modified certificate tables. The post appeared first on SecurityWeek .

SonicWall Warns of Trojanized NetExtender Stealing User Information

4 TTPs

•

by Ionut Arghire / 4d

•

Fake SonicWall app steals credentials

SonicWall says a modified version of the legitimate NetExtender application contains information-stealing code. The post appeared first on SecurityWeek .

New Vulnerabilities Expose Millions of Brother Printers to Hacking

CVE-2024-51978 & 7 others

•

by Eduard Kovacs / 4d

Rapid7 has found several serious vulnerabilities affecting over 700 printer models from Brother and other vendors. The post appeared first on SecurityWeek .

Why Sincerity Is a Strategic Asset in Cybersecurity

by Joshua Goldfarb / 4d

Strong security doesn’t just rely on tools—it starts with trust, clarity, and sincerity from the top down. The post appeared first on SecurityWeek .

Code Execution Vulnerability Patched in GitHub Enterprise Server

3 TTPs

•

by Ionut Arghire / 4d

A high-severity vulnerability in GitHub Enterprise Server could have allowed remote attackers to execute arbitrary code. The post appeared first on SecurityWeek .

Chrome 138, Firefox 140 Patch Multiple Vulnerabilities

4 TTPs

•

by Ionut Arghire / 4d

Chrome 138 and Firefox 140 are rolling out with fixes for two dozen vulnerabilities, including high-severity memory safety issues. The post appeared first on SecurityWeek .

Jun 24, 2025

Mainline Health, Select Medical Each Disclose Data Breaches Impacting 100,000 People

2 TTPs

•

by Eduard Kovacs / 4d

•

Mainline Health Systems data breach

Mainline Health and Select Medical Holdings have suffered data breaches that affect more than 100,000 individuals. The post appeared first on SecurityWeek .

Russian APT Hits Ukrainian Government With New Malware via Signal

10 TTPs

•

by Ionut Arghire / 4d

•

APT28 uses Signal for malware attacks

Russia-linked APT28 deployed new malware against Ukrainian government targets through malicious documents sent via Signal chats. The post appeared first on SecurityWeek .

Siemens Notifies Customers of Microsoft Defender Antivirus Issue

by Eduard Kovacs / 5d

Siemens is working with Microsoft to address a Defender Antivirus problem that can lead to no malware alerts or plant disruptions. The post appeared first on SecurityWeek .

Identity Is the New Perimeter: Why Proofing and Verification Are Business Imperatives

by Torsten George / 5d

The future of secure digital engagement depends on continuous identity verification and proofing that can scale with risk. The post appeared first on SecurityWeek .

Prometei Botnet Activity Spikes

20 TTPs

•

by Ionut Arghire / 5d

•

Prometei botnet resurfaces with enhancements

Palo Alto Networks has observed a spike in Prometei activity since March 2025, pointing to a resurgence of the botnet. The post appeared first on SecurityWeek .

Jun 23, 2025

Chinese APT Hacking Routers to Build Espionage Infrastructure

by Ionut Arghire / 5d

A Chinese APT has been infecting SOHO routers with the ShortLeash backdoor to build stealthy espionage infrastructure. The post appeared first on SecurityWeek .

Photo-Stealing Spyware Sneaks Into Apple App Store, Google Play

Command and Control (Enterprise TA0011)

•

by Ionut Arghire / 5d

•

Malware steals private photos smartphones

Newly discovered spyware has sneaked into Apple’s App Store and Google Play to steal images from users’ mobile devices. The post appeared first on SecurityWeek .

Apple, Netflix, Microsoft Sites ‘Hacked’ for Tech Support Scams

by Eduard Kovacs / 5d

Tech support scammers are using sponsored ads and search parameter injection to trick users into calling them. The post appeared first on SecurityWeek .

North Korean Hackers Take Over Victims’ Systems Using Zoom Meeting

10 TTPs

•

by Ionut Arghire / 6d

•

North Korean hackers use deepfakes

North Korean hackers employ social engineering to trick Zoom Meeting participants into executing system-takeover commands. The post appeared first on SecurityWeek .

China’s Salt Typhoon Hackers Target Canadian Telecom Firms

Discovery (Enterprise TA0007)

•

by Eduard Kovacs / 6d

Canada’s Centre for Cyber Security and the FBI warn of Chinese hackers targeting telecommunications and other companies in Canada. The post appeared first on SecurityWeek .

New AI Jailbreak Bypasses Guardrails With Ease

by Kevin Townsend / 6d

New "Echo Chamber" attack bypasses advanced LLM safeguards by subtly manipulating conversational context, proving highly effective across leading AI models. The post appeared first on SecurityWeek .

Critical Authentication Bypass Flaw Patched in Teleport

3 TTPs

•

by Ionut Arghire / 6d

A critical-severity vulnerability in Teleport could allow remote attackers to bypass SSH authentication and access managed systems. The post appeared first on SecurityWeek .

743,000 Impacted by McLaren Health Care Data Breach

2 TTPs

•

by Ionut Arghire / 6d

The personal information of 743,000 individuals was compromised in a 2024 ransomware attack on McLaren Health Care. The post appeared first on SecurityWeek .

US Braces for Cyberattacks After Bombing Iranian Nuclear Sites

2 TTPs

•

22by Eduard Kovacs / 6d

•

US Israel airstrikes won't change cyber threats

Iranian hackers are expected to intensify cyberattacks against the US after the recent air strikes on Iran’s nuclear sites. The post appeared first on SecurityWeek .

Jun 22, 2025

Steelmaker Nucor Says Hackers Stole Data in Recent Attack

2 TTPs

•

by Eduard Kovacs / 6d

Nucor has shared an update on the impact of the recent cyberattack and confirmed that some data has been taken from its IT systems. The post appeared first on SecurityWeek .

Hawaii Cybersecurity Journal