Friday Wrap Up: 25 July 2025
This week, it’s cyber whack-a-mole: one forum admin down, another mirror site up. Meanwhile, malware gets cuddly (hi, pandas 🐼), and brands like Microsoft remain prime phishing bait.
A dash of espionage, a pinch of legal drama, and a travel scam twist—because hackers need vacations too.
👇 Dive in for the full roundup before your inbox gets spoofed.
Major Cyberattacks & Incidents
Breaches, takedowns, and court battles highlight the ever-evolving cyber threat landscape.
🗃️ World Leaks claims 1.3 TB Dell breach with 400K+ internal files and data. (Published on 7/21/2025, Hackread). Read More
🖥️ Dell rebuts breach claim, says leaked data is synthetic from a demo environment. (Published on 7/22/2025, SecurityWeek). Read More
🧑⚖️ Clorox sues Cognizant for $380M, blaming them for 2023 hack that exposed credentials. (Published on 7/24/2025, SecurityWeek). Read More
🔁 XSS cybercrime forum resurfaces on dark web a day after admin arrest. (Published on 7/24/2025, Hackread). Read More
Malware & Vulnerabilities
A blend of newly patched, active zero-days and creatively concealed malware strains.
🚨 Microsoft pushes emergency fix for exploited SharePoint 'ToolShell' zero-day (CVE-2025-53770). (Published on 7/21/2025, Dark Reading). Read More
🐼 Koske malware hides in panda JPEGs to infect Linux systems via memory. (Published on 7/24/2025, BleepingComputer). Read More
🔓 Mitel patches critical auth bypass flaw in MiVoice MX-ONE communication platform. (Published on 7/25/2025, SecurityWeek). Read More
Espionage & Data Extraction
Privacy continues to erode as surveillance and infiltration tactics evolve globally.
🛰️ Surveillance firm bypasses SS7 protections to obtain user locations. (Published on 7/21/2025, SecurityWeek). Read More
👩💻 Arizona woman sentenced for aiding North Korean IT workers infiltrate 309 US firms. (Published on 7/25/2025, BleepingComputer). Read More
Ransomware & Infrastructure Threats
Ransomware continues to strain business continuity and critical infrastructure.
⚠️ CISA and FBI warn of escalating Interlock ransomware targeting key sectors. (Published on 7/22/2025, BleepingComputer). Read More
🏛️ Cyber resilience demands critical infrastructure security, not just prevention. (Published on 7/22/2025, Dark Reading). Read More
Cybercrime Economy & Fraud
Criminal innovation extends into unexpected markets—like travel bookings.
✈️ Hackers on the dark web now double as travel agents using stolen rewards. (Published on 7/23/2025, Dark Reading). Read More
Brand Exploitation & Phishing
Attackers continue impersonating trusted brands to deceive and compromise.
🎣 Microsoft topped the list of most impersonated brands in Q2 phishing scams. (Published on 7/23/2025, Hackread). Read More
Privacy Tools & Consumer Protection
A small win for privacy-conscious users in the browser wars.
🧭 Brave blocks Windows Recall from screenshotting browser content by default. (Published on 7/23/2025, BleepingComputer). Read More
Law Enforcement & Cybercrime Takedowns
Major arrests signal progress in dismantling long-standing threat actors.
🚓 Europol arrests XSS forum admin in Kyiv after 12 years of cybercrime activity. (Published on 7/24/2025, The Hacker News). Read More
Stay informed and secure in the tech and cybersecurity world. Have a great weekend, and remember to patch and protect your systems!