Stay updated with the latest cybersecurity news! This daily roundup covers critical vulnerabilities, emerging threats, and significant data breaches to keep you informed and secure in the ever-evolving digital landscape.
1. Hackers Use Facebook Ads to Spread JSCEAL Malware via Fake Cryptocurrency Trading Apps
Published: 2025-07-30
Cybersecurity researchers have identified a campaign using malicious Facebook ads to distribute fake cryptocurrency trading apps that deploy JSCEAL malware, capturing credentials and wallet data. The ads redirect victims to counterfeit sites, leveraging stolen or new accounts to spread the infection.
2. Apple Patches Safari Vulnerability Also Exploited as Zero-Day in Google Chrome
Published: 2025-07-30
Apple released updates fixing a vulnerability, CVE-2025-6558, also exploited as a zero-day in Chrome, affecting WebKit and potentially allowing sandbox escape via crafted HTML. Google’s Threat Analysis Group discovered the issue, with no details on weaponization provided.
3. Critical Dahua Camera Flaws Enable Remote Hijack via ONVIF and File Upload Exploits
Published: 2025-07-30
Critical vulnerabilities, CVE-2025-31700 and CVE-2025-31701, in Dahua smart camera firmware could allow unauthenticated attackers to execute commands remotely via ONVIF and file upload exploits. The flaws affect devices with build timestamps before April 16, 2025, and have been patched.
4. Chinese Firms Linked to Silk Typhoon Filed 15+ Patents for Cyber Espionage Tools
Published: 2025-07-30
Chinese companies linked to the Silk Typhoon hacking group have filed over 15 patents for tools enabling encrypted endpoint data collection, Apple device forensics, and remote access to devices. This highlights the capabilities of the cyber contracting ecosystem associated with state-sponsored espionage.
5. ToxicPanda Android Banking Malware Infected 4500+ Devices to Steal Banking Credentials
Published: Not provided (recent)
A sophisticated Android banking trojan named ToxicPanda has infected over 4500 mobile devices across Europe, aiming to steal banking credentials. It represents one of the most significant mobile malware campaigns in the region.
6. Palo Alto Networks to Acquire CyberArk in $25 Billion Deal
Published: Not provided (recent)
Palo Alto Networks announced its agreement to acquire CyberArk, known for identity security, in a deal valued at about $25 billion. This acquisition aims to strengthen their cybersecurity offerings.
7. Lazarus Subgroup ‘TraderTraitor’ Attacking Cloud Platforms and Poisoning Supply Chains
Published: Not provided (recent)
The North Korean cyber espionage group TraderTraitor is targeting cloud platforms and poisoning supply chains, posing a major threat to the global cryptocurrency ecosystem. Their activities highlight sophisticated attack methods.
8. Microsoft Patches SharePoint Vulnerabilities Exploited in Attacks
Published: 2025-07-24
Microsoft released patches for two severe zero-day vulnerabilities in its SharePoint platform, which have already been exploited by different threat actors throughout July 2025. There were over 75 confirmed compromises spanning banks, universities, hospitals, and more, enabling unauthenticated remote code execution and administrative access.
Stay Vigilant
Cyber threats are evolving rapidly. Subscribe to our newsletter for daily updates, and consider using advanced security tools to monitor and protect your systems from vulnerabilities and attacks. Stay safe online!