Stay updated with the latest cybersecurity news! This weekly roundup covers critical vulnerabilities, emerging threats, and significant data breaches to keep you informed and secure in the ever-evolving digital landscape.
1. Microsoft Releases Urgent Guidance on Actively Exploited SharePoint Vulnerabilities
Published: 2025-07-22
Microsoft has provided detailed guidance on a chain of vulnerabilities in SharePoint Server, including CVE-2025-53770 for remote code execution, which is being actively exploited to breach on-premise servers and access sensitive content.cisa.gov
2. Critical Zero-Day Flaw in Microsoft SharePoint Actively Exploited in Mass Attacks
Published: 2025-07-19
A severe deserialization vulnerability (CVE-2025-53770) in Microsoft SharePoint Server is under active exploitation, affecting over 85 servers across 29 organizations, allowing unauthorized code execution without authentication.thehackernews.com
3. China-Backed Nation-State Hackers Targeting SharePoint Servers
Published: 2025-07-22
Microsoft has identified at least two China-backed nation-state groups exploiting SharePoint vulnerabilities, urging immediate application of security updates amid escalating attacks.cybersecuritydive.com
4. CISA Issues Advisory on Interlock Ransomware Targeting Critical Infrastructure
Published: 2025-07-22
The FBI, CISA, HHS, and MS-ISAC released a joint advisory on Interlock ransomware, detailing tactics like drive-by downloads, social engineering, and double extortion affecting North America and Europe since late 2024.cisa.gov
5. Surge in Android Spyware Apps Masquerading as VPNs
Published: 2025-07-21
Researchers have uncovered four new Android spyware apps posing as VPNs, linked to Iran’s Ministry of Intelligence and the MuddyWater group, highlighting increased mobile cyber threats.social.cyware.com
6. Greedy Sponge Malware Campaign Targets Mexican Organizations
Published: 2025-07-22
The Greedy Sponge campaign is deploying Remote Access Trojans and proxy malware to steal credentials and exfiltrate data from organizations in Mexico.social.cyware.com
7. Google Gemini Flaw Allows Phishing Via Email Summaries
Published: 2025-07-21
A vulnerability in Google Gemini for Workspace enables attackers to create deceptive email summaries that lead users to phishing sites without using links or attachments; Google is addressing the issue.linkedin.com
8. UK Arrests Four Linked to Cyberattacks on Major Retailers
Published: 2025-07-21
The UK National Crime Agency arrested four individuals allegedly connected to the Scattered Spider group for cyberattacks on retailers like Marks & Spencer, Co-op, and Harrods.linkedin.com
Stay Vigilant
Cyber threats are evolving rapidly. Subscribe to our newsletter for weekly updates, and consider using tools like WP Umbrella to monitor your WordPress site for vulnerabilities and automate security patches. Stay safe online!