SecurityWeek Briefing.

"SharePoint under attack:  Microsoft warns of Zero-Day exploited in the wild-No patch available."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 20 July 2025, 1954 UTC.

Content and Source provided by email subscription via https://feedly.com.

 https://feedly.com/i/subscription/feed%2Fhttp%3A%2F%2Ffeeds.feedburner.com%2FSecurityweek

Please check subscription link or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

SecurityWeek

89K followers36 articles per week

#security#tech

77

Today

SharePoint Under Attack: Microsoft Warns of Zero-Day Exploited in the Wild – No Patch Available

CVE-2025-53770

•

by Mike Lennon / 5h

Enterprises running SharePoint servers should not wait for a fix for CVE-2025-53770 and should commence threat hunting to search for compromise immediately. The post appeared first on SecurityWeek .

Jul 18, 2025

In Other News: Law Firm Hacked by China, Symantec Flaw, Meta AI Hack, FIDO Key Bypass

by SecurityWeek News / 2d

Noteworthy stories that might have slipped under the radar: powerful US law firm hacked by China, Symantec product flaw, $10,000 Meta AI hack, cryptocurrency thieves bypassing FIDO keys. The post appeared first on SecurityWeek .

Email Protection Startup StrongestLayer Emerges From Stealth Mode

by Ionut Arghire / 2d

AI-native email security firm StrongestLayer has emerged from stealth mode with $5.2 million in seed funding. The post appeared first on SecurityWeek .

Fortinet FortiWeb Flaw Exploited in the Wild After PoC Publication

by Ionut Arghire / 2d

Dozens of FortiWeb instances have been hacked after PoC targeting a recent critical vulnerability was shared publicly. The post appeared first on SecurityWeek .

1.4 Million Affected by Data Breach at Virginia Radiology Practice

Radiology Associates data breach affects 1.4

•

by Eduard Kovacs / 2d

Radiology Associates of Richmond has disclosed a data breach impacting protected health and personal information. The post appeared first on SecurityWeek .

Fraud: A Growth Industry Powered by Gen-AI

by Kevin Townsend / 2d

With generative AI enabling fraud-as-a-service at scale, legacy defenses are crumbling. The next wave of cybercrime is faster, smarter, and terrifyingly synthetic. The post appeared first on SecurityWeek .

CitrixBleed 2: 100 Organizations Hacked, Thousands of Instances Still Vulnerable

by Ionut Arghire / 2d

The CitrixBleed 2 vulnerability in NetScaler may expose organizations to compromise even if patches have been applied. The post appeared first on SecurityWeek .

Jul 17, 2025

Google Sues Operators of 10-Million-Device Badbox 2.0 Botnet

Google sues over BadBox 20 malware

•

by Ionut Arghire / 2d

Google has filed a lawsuit against the Badbox 2.0 botnet operators, after identifying over 10 million infected Android devices. The post appeared first on SecurityWeek .

Critical Nvidia Toolkit Flaw Exposes AI Cloud Services to Hacking

by Eduard Kovacs / 2d

Wiz researchers discovered NVIDIAScape, an Nvidia Container Toolkit flaw that can be exploited for full control of the host machine. The post appeared first on SecurityWeek .

Anne Arundel Dermatology Data Breach Impacts 1.9 Million People

Dermatology data breach affects thousands

•

by Eduard Kovacs / 2d

Anne Arundel Dermatology said hackers had access to its systems for three months and may have stolen personal and health information. The post appeared first on SecurityWeek .

Settlement Reached in Investors’ Lawsuit Against Meta CEO Mark Zuckerberg and Other Company Leaders

Zuckerberg settles $8 billion lawsuit

•

by Associated Press / 2d

A settlement has been reached in the class action brought by investors against Meta over the Cambridge Analytica incident, but details have not been shared. The post appeared first on SecurityWeek .

Empirical Security Raises $12 Million for AI-Driven Vulnerability Management

by Ionut Arghire / 3d

Cybersecurity startup Empirical Security has raised $12 million in seed funding for its vulnerability management platform. The post appeared first on SecurityWeek .

Armenian Man Extradited to US Over Ryuk Ransomware Attacks

by Eduard Kovacs / 3d

Karen Serobovich Vardanyan pleaded not guilty to charges related to his alleged role in the Ryuk ransomware operation. The post appeared first on SecurityWeek .

Mobile Forensics Tool Used by Chinese Law Enforcement Dissected

Chinese law enforcement mobile forensics

•

by Ionut Arghire / 3d

Deployed on mobile devices confiscated by Chinese law enforcement, Massistant can collect user information, files, and location. The post appeared first on SecurityWeek .

Trial Opens Against Meta CEO Mark Zuckerberg and Other Leaders Over Facebook Privacy Violations

Meta settles Facebook privacy lawsuit

•

by Associated Press / 3d

An $8 billion class action investors’ lawsuit against Meta stemming from the 2018 privacy scandal involving the Cambridge Analytica political consulting firm. The post appeared first on SecurityWeek .

Jul 16, 2025

VMware Flaws That Earned Hackers $340,000 at Pwn2Own Patched

2 TTPs

•

by Eduard Kovacs / 3d

Four CVEs disclosed at the Pwn2Own Berlin 2025 hacking competition have been patched in VMware products. The post appeared first on SecurityWeek .

Cisco Patches Another Critical ISE Vulnerability

3 TTPs

•

by Ionut Arghire / 3d

Cisco has released patches for multiple vulnerabilities, including a critical flaw in Cisco ISE that leads to remote code execution (RCE). The post appeared first on SecurityWeek .

Oracle Patches 200 Vulnerabilities With July 2025 CPU

by Ionut Arghire / 3d

Oracle’s July 2025 Critical Patch Update contains 309 security patches that address approximately 200 unique CVEs. The post appeared first on SecurityWeek .

Cambodia Makes 1,000 Arrests in Latest Crackdown on Cybercrime

Cambodia arrests over 1000 cybercriminals

•

by Associated Press / 3d

More than 1,000 suspects were arrested in raids in at least five provinces between Monday and Wednesday, according to Information Minister Neth Pheaktra and police. The post appeared first on SecurityWeek .

Europol-Coordinated Global Operation Takes Down Pro-Russian Cybercrime Network

International law dismantles NoName057 network

•

by Associated Press / 4d

Codenamed Eastwood, the operation targeted the so-called NoName057(16) group, which was identified as being behind a series of DDoS attacks on municipalities and organizations linked to a NATO summit. The post appeared first on SecurityWeek .

United Natural Foods Projects Up to $400M Sales Hit From June Cyberattack

by Mike Lennon / 4d

Cyberattack disrupted UNFI’s operations in June; company estimates $50–$60 million net income hit but anticipates insurance will cover most losses. The post appeared first on SecurityWeek .

SonicWall SMA Appliances Targeted With New ‘Overstep’ Malware

8 TTPs

•

by Eduard Kovacs / 4d

A threat actor that may be financially motivated is targeting SonicWall devices with a backdoor and user-mode rootkit. The post appeared first on SecurityWeek .

Compumedics Ransomware Attack Led to Data Breach Impacting 318,000

Impact (Enterprise TA0040)

•

by Eduard Kovacs / 4d

Compumedics has been targeted by the VanHelsing ransomware group, which stole files from the company’s systems. The post appeared first on SecurityWeek .

Cyber Intelligence Firm iCOUNTER Emerges From Stealth With $30 Million in Funding

by Eduard Kovacs / 4d

iCOUNTER, which helps organizations defend against targeted attacks, has launched under the helm of former Mandiant president and COO John Watters. The post appeared first on SecurityWeek .

Google Says AI Agent Thwarted Exploitation of Critical Vulnerability

2 TTPs

•

by Eduard Kovacs / 4d

Google refused to share any details on how its Big Sleep AI foiled efforts to exploit a SQLite vulnerability in the wild. The post appeared first on SecurityWeek .

Jul 15, 2025

China’s Salt Typhoon Hacked US National Guard

3 TTPs

•

by Ionut Arghire / 4d

Chinese hacking group Salt Typhoon targeted a National Guard unit’s network and tapped into communications with other units. The post appeared first on SecurityWeek .

Former US Soldier Who Hacked AT&T and Verizon Pleads Guilty

Soldier pleads guilty to hacking extortion

•

by Ionut Arghire / 4d

Cameron John Wagenius pleaded guilty to charges related to hacking into US telecommunications companies. The post appeared first on SecurityWeek .

IoT Security Firm Exein Raises $81 Million

Exein raises 70 million euros

•

by Ionut Arghire / 4d

Italian company Exein has raised €70 million (~$81 million) in a Series C funding round led by Balderton. The post appeared first on SecurityWeek .

Chrome Update Patches Fifth Zero-Day of 2025

by Ionut Arghire / 4d

Google has released a Chrome 138 security update that patches a zero-day, the fifth resolved in the browser this year. The post appeared first on SecurityWeek .

Watch on Demand: Cloud & Data Security Summit – Tackling Exposed Attack Surfaces in the Cloud

by SecurityWeek News / 5d

Virtual event brings together leading experts, practitioners, and innovators for a full day of insightful discussions and tactical guidance on evolving threats and real-world defense strategies in cloud security. The post appeared first on SecurityWeek .

Sesame Workshop Regains Control of Elmo’s Hacked X Account After Racist Posts

Valid Accounts (Enterprise T1078)

•

by Associated Press / 5d

•

Elmo's Twitter account hacked

The account was compromised over the weekend and Elmo’s 650,000 followers were given antisemitic threats and a reference to the Jeffrey Epstein investigation. The post appeared first on SecurityWeek .

Threat Actors Use SVG Smuggling for Browser-Native Redirection

12 TTPs

•

by Ionut Arghire / 5d

Obfuscated JavaScript code is embedded within SVG files for browser-native redirection to malicious pages. The post appeared first on SecurityWeek .

DDoS Attacks Blocked by Cloudflare in 2025 Already Surpass 2024 Total

by Eduard Kovacs / 5d

Cloudflare has published its quarterly DDoS threat report for Q2 2025 and the company says it has blocked millions of attacks. The post appeared first on SecurityWeek .

Data Breach at Debt Settlement Firm Impacts 160,000 People

Impact (Enterprise TA0040)

•

by Eduard Kovacs / 5d

Pennsylvania-based Century Support Services is disclosing a data breach after its systems were hacked in November 2024. The post appeared first on SecurityWeek .