Saturday, July 5, 2025

Security Threat Summary - July 5, 2025

Security Threat Summary - July 5, 2025

Critical Security Alert

  • Critical Sudo Vulnerabilities Let Local Users Gain Root Access on Linux, Impacting Major Distros — Two security flaws in Sudo could allow local attackers to escalate privileges to root. Read more

Threat Intelligence

  • NightEagle APT Exploits Microsoft Exchange Flaw to Target China's Military and Tech Sectors — A previously undocumented threat actor, NightEagle (APT-Q-95), is targeting Microsoft Exchange servers using a zero-day exploit chain. Read more
  • Hunters International ransomware group shuts down – but will it regroup under a new guise? — The ransomware-as-a-service operation has announced its closure and is offering free decryption tools. Read more

Security Breaches & Incidents

  • Catwatchful stalkerware app spills secrets of 62,000 users – including its own admin — Stalkerware app exposed details of its users and victims' devices. Read more
  • Technical difficulties or cyber attack? Ingram Micro's website goes down just in time for the holiday weekend — Ingram Micro's website outage raises questions about a potential cyberattack. Read more
  • Google Ordered to Pay $314M for Misusing Android Users' Cellular Data Without Permission — Google has been ordered to pay $314 million for misusing Android users' cellular data. Read more

Emerging Security Technologies

  • Your AI Agents Might Be Leaking Data — Watch this Webinar to Learn How to Stop It — AI agents and GenAI workflows are creating new ways for sensitive enterprise data to leak. Read more

Share: