Stay updated with the latest cybersecurity news! This daily roundup covers critical vulnerabilities, emerging threats, and significant data breaches to keep you informed and secure in the ever-evolving digital landscape.
1. Hackers Leverage Microsoft Teams to Spread Matanbuchus 3.0 Malware to Targeted Firms
Published: 2025-07-16
Cybersecurity researchers have identified a new variant of the Matanbuchus malware loader, which uses Microsoft Teams to enhance stealth and evade detection, targeting firms with hands-on social engineering.thehackernews.com
2. UNC6148 Backdoors Fully-Patched SonicWall SMA 100 Series Devices with OVERSTEP Rootkit
Published: 2025-07-16
A threat actor tracked as UNC6148 has been targeting fully-patched end-of-life SonicWall SMA 100 series appliances to deploy the OVERSTEP backdoor, using stolen credentials to regain access.thehackernews.com
3. Critical Golden dMSA Attack in Windows Server 2025 Enables Cross-Domain Attacks and Persistent Access
Published: 2025-07-16
Researchers disclosed a critical design flaw in Windows Server 2025’s delegated Managed Service Accounts, allowing cross-domain lateral movement and persistent access through password generation.thehackernews.com
4. AI Agents Act Like Employees With Root Access—Here’s How to Regain Control
Published: 2025-07-16
The article discusses the risks of AI agents behaving like employees with root access, emphasizing the need for identity-first security to manage deployment risks.thehackernews.com
5. New Konfety Malware Variant Evades Detection by Manipulating APKs and Dynamic Code
Published: 2025-07-16
A new variant of the Konfety Android malware uses the evil twin technique to share package names with benign apps, enabling ad fraud and evading detection.thehackernews.com
6. Deepfakes. Fake Recruiters. Cloned CFOs — Learn How to Stop AI-Driven Attacks in Real Time
Published: 2025-07-16
The article highlights AI-driven social engineering attacks using deepfakes and cloned identities, targeting employees and partners across multiple channels.thehackernews.com
7. Urgent: Google Releases Critical Chrome Update for CVE-2025-6558 Exploit Active in the Wild
Published: 2025-07-16
Google issued a critical update for Chrome to fix CVE-2025-6558, an exploited vulnerability in ANGLE and GPU components allowing potential sandbox escapes.thehackernews.com
8. Google AI “Big Sleep” Stops Exploitation of Critical SQLite Vulnerability Before Hackers Act
Published: 2025-07-16
Google’s AI agent Big Sleep discovered a critical SQLite vulnerability, CVE-2025-6965, preventing potential exploitation by threat actors.thehackernews.com
Stay Vigilant
Cyber threats are evolving rapidly. Subscribe to our newsletter for daily updates, and consider using tools like antivirus software and vulnerability scanners to monitor your systems for threats and automate security patches. Stay safe online!