Stay updated with the latest cybersecurity news! This daily roundup covers critical vulnerabilities, emerging threats, and significant data breaches to keep you informed and secure in the ever-evolving digital landscape.
1. China’s Massistant Tool Secretly Extracts SMS, GPS Data, and Images From Confiscated Phones
Published: 2025-07-18
Cybersecurity researchers revealed a mobile forensics tool called Massistant, used by Chinese law enforcement to gather information from seized devices, including GPS location data, SMS messages, and images, developed by SDIC Intelligence Xiamen Information Co., Ltd. It works with desktop software and maintains partnerships with law enforcement for surveillance and training.thehackernews.com
2. Ivanti Zero-Days Exploited to Drop MDifyLoader and Launch In-Memory Cobalt Strike Attacks
Published: 2025-07-18
Researchers disclosed MDifyLoader malware used in attacks exploiting Ivanti Connect Secure flaws CVE-2025-0282 and CVE-2025-22457, observed between December 2024 and July 2025, to launch Cobalt Strike in memory, with vulnerabilities patched in early 2025.thehackernews.com
3. Critical NVIDIA Container Toolkit Flaw Allows Privilege Escalation on AI Cloud Services
Published: 2025-07-18
A critical vulnerability, CVE-2025-23266, in NVIDIA Container Toolkit, with a CVSS score of 9.0, could allow privilege escalation and was addressed in versions 1.17.8 and 25.3.1, posing risks to managed AI cloud services.thehackernews.com
4. CERT-UA Discovers LAMEHUG Malware Linked to APT28, Using LLM for Phishing Campaign
Published: 2025-07-18
CERT-UA disclosed a phishing campaign delivering LAMEHUG malware, using large language models to generate commands, attributed to Russian group APT28, targeting Ukrainian government officials with emails containing malicious ZIP archives reported on July 10, 2025.thehackernews.com
5. Google Sues Operators of 10-Million-Device Badbox 2.0 Botnet
Published: 2025-07-18
Google has taken legal action against the operators of the Badbox 2.0 botnet, which has infected over 10 million Android devices.securityweek.com
6. Critical Nvidia Toolkit Flaw Exposes AI Cloud Services to Hacking
Published: 2025-07-18
Wiz researchers identified NVIDIAScape, a flaw in Nvidia’s Container Toolkit that could allow attackers to gain full control of the host machine. This vulnerability poses risks to AI and cloud services.securityweek.com
7. Oracle Patches 200 Vulnerabilities With July 2025 CPU
Published: 2025-07-16
Oracle released its July 2025 Critical Patch Update, addressing around 200 unique vulnerabilities with 309 security patches.securityweek.com
8. Phishing Attack on a County Administration in Germany
Published: 2025-07-10
A phishing attack targeted Landratsamt Odenwaldkreis in Hesse, Germany.konbriefing.com
Stay Vigilant
Cyber threats are evolving rapidly. Subscribe to our newsletter for daily updates, and consider using tools like advanced threat detection software to monitor your systems for vulnerabilities and automate security patches. Stay safe online!