Cybersecurity researchers have identified a dangerous new twist to the notorious ClickFix malware tactic. The evolved variant—called FileFix—is now being weaponized in active ransomware campaigns, further advancing the threat landscape. ClickFix typically lures users by showing them a bogus…
Ransomware Attacks Surge in 2025, With Smaller Businesses and Manufacturers Most Affected
Ransomware threats are rising fast in 2025, with the first half of the year already showing a sharp increase in attacks. New research shows that U.S.-based companies, small and medium-sized businesses, and firms in the manufacturing sector are currently…
Security Affairs newsletter Round 533 by Pierluigi Paganini – INTERNATIONAL EDITION
A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. Fortinet…
UK uncovers novel Microsoft snooping malware, blames and sanctions GRU cyberspies
Fancy Bear can’t keep its claws out of Outlook inboxes The UK government is warning that Russia’s APT28 (also known as Fancy Bear or Forest Blizzard) has been deploying previously unknown malware to harvest Microsoft email credentials and steal access…
IT Security News Hourly Summary 2025-07-20 12h : 2 posts
2 posts were published in the last hour 9:34 : Hackers Exploit Critical CrushFTP Flaw to Gain Admin Access on Unpatched Servers 9:7 : This Apple Watch model is my favorite and I use it daily – right now, it’s…
Malware Injected into 6 npm Packages After Maintainer Tokens Stolen in Phishing Attack
Cybersecurity researchers have alerted to a supply chain attack that has targeted popular npm packages via a phishing campaign designed to steal the project maintainers’ npm tokens. The captured tokens were then used to publish malicious versions of the packages…
Critical Unpatched SharePoint Zero-Day Actively Exploited, Breaches 75+ Global Organizations
A critical security vulnerability in Microsoft SharePoint Server has been weaponized as part of an “active, large-scale” exploitation campaign. The zero-day flaw, tracked as CVE-2025-53770 (CVSS score: 9.8), has been described as a variant of CVE-2025-49706 (CVSS score: 6.3), a…
Hackers Exploit Critical CrushFTP Flaw to Gain Admin Access on Unpatched Servers
A newly disclosed critical security flaw in CrushFTP has come under active exploitation in the wild. Assigned the CVE identifier CVE-2025-54309, the vulnerability carries a CVSS score of 9.0. “CrushFTP 10 before 10.8.5 and 11 before 11.3.4_23, when the DMZ…
This Apple Watch model is my favorite and I use it daily – right now, it’s over 30% off
I love the Apple Watch SE (2nd Gen) for its basic features and fair price, and it’s currently on sale at Walmart. This article has been indexed from Latest news Read the original article: This Apple Watch model is my…
Radiology Associates of Richmond data breach impacts 1.4 million people
A data breach at Radiology Associates of Richmond has exposed the personal and health information of over 1.4 million individuals. Radiology Associates of Richmond has disclosed a data breach that impacted personal and health information of over 1.4 million individuals.…
Grafana Vulnerabilities Allow User Redirection to Malicious Sites and Code Execution in Dashboards
Two significant Grafana vulnerabilities that could allow attackers to redirect users to malicious websites and execute arbitrary JavaScript code. The vulnerabilities, identified as CVE-2025-6023 and CVE-2025-6197, affect multiple versions of Grafana, including 12.0.x, 11.6.x, 11.5.x, 11.4.x, and 11.3.x branches. Both…
Week in review: Google fixes zero-day vulnerability in Chrome, critical SQL injection flaw in FortiWeb
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Update Google Chrome to fix actively exploited zero-day (CVE-2025-6558) For the fifth time this year, Google has patched a Chrome zero-day vulnerability (CVE-2025-6558) exploited by…
IT Security News Hourly Summary 2025-07-20 09h : 2 posts
2 posts were published in the last hour 7:2 : Apple’s latest iPad hit a new low price at Walmart – and it’s available in every color 6:35 : SharePoint 0-Day RCE Vulnerability Actively Exploited in the Wild to Gain…
Apple’s latest iPad hit a new low price at Walmart – and it’s available in every color
Apple’s 11th-generation iPad is available for $50 off. This deal applies to every color and storage size option. This article has been indexed from Latest news Read the original article: Apple’s latest iPad hit a new low price at Walmart…
SharePoint 0-Day RCE Vulnerability Actively Exploited in the Wild to Gain Full Server Access
A sophisticated cyberattack campaign targeting Microsoft SharePoint servers has been discovered exploiting a newly weaponized vulnerability chain dubbed “ToolShell,” enabling attackers to gain complete remote control over vulnerable systems without authentication. Eye Security, a Dutch cybersecurity firm, identified the active…
IT Security News Hourly Summary 2025-07-20 03h : 1 posts
1 posts were published in the last hour 1:4 : New EU AI Act Compliance Guide – Just Weeks Before August Deadline
Customer guidance for SharePoint vulnerability CVE-2025-53770
Summary Microsoft is aware of active attacks targeting on-premises SharePoint Server customers. The attacks are exploiting a variant of CVE-2025-49706. This vulnerability has been assigned CVE-2025-53770. SharePoint Online in Microsoft 365 is not impacted. A patch is currently not available for…
New EU AI Act Compliance Guide – Just Weeks Before August Deadline
The EU has released a guide for how large AI makers can comply with the AI Act’s newly instituted rules to prevent systemic risks. This article has been indexed from Security | TechRepublic Read the original article: New EU AI…
IT Security News Hourly Summary 2025-07-20 00h : 2 posts
2 posts were published in the last hour 22:55 : IT Security News Daily Summary 2025-07-19 22:2 : Microsoft says it will no longer use engineers in China for Department of Defense work
IT Security News Daily Summary 2025-07-19
38 posts were published in the last hour 17:34 : Fortinet FortiWeb flaw CVE-2025-25257 exploited hours after PoC release 17:5 : IT Security News Hourly Summary 2025-07-19 18h : 1 posts 16:32 : Linux Distribution Designed for Seamless Anonymous Browsing…
Microsoft says it will no longer use engineers in China for Department of Defense work
Following a Pro Publica report that Microsoft was using engineers in China to help maintain cloud computing systems for the U.S. Department of Defense, the company said it’s made changes to ensure this will no longer happen. This article has…
Fortinet FortiWeb flaw CVE-2025-25257 exploited hours after PoC release
Hackers exploited a Fortinet FortiWeb flaw the same day a PoC was published, compromising dozens of systems. Hackers began exploiting a critical Fortinet FortiWeb flaw, tracked as CVE-2025-25257 (CVSS score of 9.6), on the same day a proof-of-concept (PoC) exploit…
IT Security News Hourly Summary 2025-07-19 18h : 1 posts
1 posts were published in the last hour 16:2 : At Least 750 US Hospitals Faced Disruptions During Last Year’s CrowdStrike Outage, Study Finds
Linux Distribution Designed for Seamless Anonymous Browsing
Despite the fact that operating systems like Windows and macOS continue to dominate the global market, Linux has gained a steady following among users who value privacy and security as well as cybersecurity professionals, thanks to its foundational principles: transparency,…