As attacks on software supply chains and third parties increase, more data on critical software and infrastructure services is being advertised and sold on the Dark Web.

The Hunters International ransomware group is rebranding and switching tactics

Deloitte's new blueprint looks to bridge the gap between the massive push for AI adoption and a lack of preparedness among leaders and employees.

As attacks on software supply chains and third parties increase, more data on critical software and infrastructure services is being advertised and sold on the Dark Web.

The Anti-Phishing Working Group observed how attackers are increasingly abusing QR codes to conduct phishing attacks or to trick users into downloading malware.

Malicious extensions can be engineered to bypass verification checks for popular integrated development environments, according to research from OX Security.

Microsoft, PayPal, Docusign, and others are among the trusted brands threat actors use in socially engineered scams that try to get victims to call adversary-controlled phone numbers.

Taiwan warned that popular Chinese-owned apps, including TikTok and Weibo, are harvesting personal data and sending it back to servers in China

The EU’s Quantum Strategy includes plans to develop secure quantum communication infrastructure across the region

A severe flaw identified in the Forminator WordPress plugin allows arbitrary file deletion and potential site takeover

A critical Azure Machine Learning flaw allows privilege escalation, risking subscription compromise

The CVE Board has launched a Consumer Working Group and a Researcher Working Group, allowing new stakeholders to shape the future of the CVE Program

ReliaQuest warns that initial access vulnerability exploitation is driving successful ransomware attacks

SentinelLabs observed North Korean actors deploying novel TTPs to target crypto firms, including a mix of programming languages and signal-based persistence

Some admins of Hunters International are now part of the encryption-less cyber extortion group World Leaks

Cyble highlights high-risk IT vulnerabilities from June 2025, including zero-days in Chrome, Cisco, WinRAR, and threats to ICS and UPS systems.