🚨 SysAid flaw lets hackers hijack admin accounts — CISA confirms active attacks.

Attackers are exploiting two critical bugs (CVSS 9.3) to steal data & possibly execute code.

Patches are out. Deadline: Aug 12.

Full details → https://thehackernews.com/2025/07/cisa-warns-sysaid-flaws-under-active.html

🚨 Google just launched OSS Rebuild—a powerful weapon against open-source supply chain attacks.

It rebuilds & verifies packages independently, catching tampered code others miss.

No extra work for maintainers.

Full details ↓ https://thehackernews.com/2025/07/google-launches-oss-rebuild-to-expose.html

Insecure authentication due to missing brute-force protection and runtime manipulation in Two App Studio Journey v5.5.9 for iOS (CVE-2025-41459)
Journey is a journaling app for iOS that stores personal entries and media
https://cirosec.de/en/news/vulnerability-in-two-app-studio-journey/

🚨 Most “critical” CVEs aren’t even exploitable in your app.

Security teams are drowning in false positives—because most scanners ignore whether the vulnerable function actually runs.

Function-level runtime reachability changes everything.

Here’s what it gets right ↓ https://thehackernews.com/expert-insights/2025/07/everything-to-know-about-runtime.html

Overexposed to risk with public images?

Get ActiveState's free secure containers—rebuilt, scanned, and now on Docker Hub.

🛡️ Cut out CVEs and patching hassle. Just pull, trust, and deploy: https://thn.news/activestate-dockerhuby

Realme Narzo 80 Lite 4G arrives with a 90Hz display and a 6,300 mAh battery

https://ift.tt/sFphdwc

Redmi 15 5G specs leak: 6.9" 144Hz display, huge battery and a surprising chipset

https://ift.tt/0uQTMFh

AI groups spend to replace low-cost 'data labellers' with high-paid experts
Article, Comments

Brave blocks Microsoft Recall by default
Article, Comments

Cerebras Launches Qwen3-235B, Achieving 1,500 Tokens per Second
Article, Comments

🚨 This Windows trojan just became the first to weaponize Microsoft’s accessibility tools.

The Coyote malware is stealing banking and crypto logins from 75+ institutions—by reading what’s on your screen.

Here’s how it works → https://thehackernews.com/2025/07/new-coyote-malware-variant-exploits.html

🚨 Most Kerberoasting attacks still bypass detection—despite being a 10+ year-old threat.

Why? Legacy tools miss subtle, low-and-slow attacks.

@BeyondTrust just built a statistical model that spots what rules-based tools can’t—with fewer false positives.

How it works ↓ https://thehackernews.com/2025/07/kerberoasting-detections-new-approach.html

NPM stylus package contained malicious code and was removed from the registry
Article, Comments

Realme Note 70T listed on European retailer: 50+13MP cameras, 6,000mAh battery

https://ift.tt/mwIKaSM

📱❤️🖥 Microsoft is testing new features to make your Android phone work better with Windows PCs

New Phone Link features allow users to remotely lock and access their PC’s clipboard from their Android phone

More details👇

🔗 https://www.androidauthority.com/phone-link-clipboard-remote-lock-3580203/

TECNO Spark 40 Pro+ Review: Surprisingly Capable, Unapologetically Budget
https://www.gizchina.com/2025/07/23/tecno-spark-40-pro-review-surprisingly-capable-unapologetically-budget/

⚡️First eSIM Hack Hints at Phone Backdoors

A Polish security lab just hacked the eUICC—the chip that manages SIMs and stores carrier secrets. They targeted IoT devices running Kigen OS, which powers over 2 billion SIMs worldwide. By exploiting insecure Java applets, they gained access to protected memory, cloned SIMs, and exposed sensitive data that was supposed to stay locked away.

Read full article on Substack.

Even worse, Oracle shrugged off responsibility. Vulnerable Java Card setups could exist across major devices—Samsung, Apple, and possibly others.

This is why we built Above DataSIM. It skips phone numbers and SMS entirely, eliminating the usual attack surface. Pair it with Above Phone, which runs GrapheneOS out of the box, and a VPN, and you’ve got layered, resilient protection against emerging threats like this one.

🤖 Follow the show
👩‍💻 Get private phones, laptops, and tablets
📲 Learn more on our webinars
🏫 Sign up for our back to school webinar

Oppo Find X9 Pro's Dimensity 9500 SoC goes over an important threshold

https://ift.tt/WMB5RAv

Just no... Bad idea, but we've come to expect that.

https://www.xda-developers.com/microsoft-teams-mercedes-benz/

Cops say criminals use a Google Pixel with GrapheneOS – I say that's freedom
Article, Comments

20 years of Linux on the Desktop (part 4)
Article, Comments