Welcome back, Digital Defenders! 🛡️

Cyber threats don’t play favorites—macOS, Windows, and Linux are all fair game. In today’s news, we’ve got critical patches for Apple and VMware, fresh malware threats targeting Microsoft and Linux users, and if you’re rocking a Dior bag with an AirTag, brace yourself for a privacy double whammy.

Here’s what you need to know:

Zero-Day Download

Apple Releases macOS Sequoia 15.5 to Fix Critical Privacy Vulnerabilities

Apple has rolled out macOS Sequoia 15.5, a critical security update that addresses eight significant vulnerabilities affecting key system components such as Core Bluetooth, Finder, and the TCC privacy framework.

These flaws could allow malicious apps to bypass privacy controls and access sensitive user data.

Source: 9to5mac.com.

While Apple remains tight-lipped until patches are available, users are strongly advised to update their devices immediately to protect their data.

VMware Tools Vulnerability Allows Malicious File Manipulation in Virtual Machines

A flaw in VMware Tools (CVE-2025-22247) enables attackers with limited access to manipulate files and trigger insecure operations within virtual machines. The issue affects versions 11.x.x and 12.x.x on Windows and Linux, while macOS remains unaffected.

With no available workarounds, VMware urges users to apply patches promptly to prevent a potential system compromise.

ASUS Patches Critical DriverHub Flaws Allowing Potential Remote Code Execution

ASUS has issued security updates to address critical vulnerabilities in its DriverHub utility that could allow attackers to execute remote code on affected systems.

DriverHub, which identifies motherboard models and fetches necessary driver updates via driverhub.asus.com, was found to have flaws that could allow malicious actors to hijack the software's functionality.

If you own an ASUS motherboard or have ever relied on DriverHub, updating now is essential to protect your system from remote attacks.

Share this newsletter!

Threat Tracker

Microsoft Uncovers Cyber Espionage Campaign Exploiting Output Messenger Zero-Day

Microsoft Threat Intelligence has uncovered a cyber espionage campaign by Marbled Dust. Since April 2024, the group has been exploiting a zero-day flaw in Output Messenger.

Source: microsoft.com.

The attackers have used the vulnerability to steal sensitive data and deploy malicious payloads, specifically targeting Kurdish military organizations in Iraq.

Output Messenger users should apply security updates immediately and monitor for unusual activity.

ClickFix Malware Campaign Expands to Target Windows, Linux Systems

A new ClickFix campaign is tricking users on both Windows and Linux into running malicious console commands through fake errors and prompts. Previously aimed at Windows via PowerShell, the attacks now include Linux-specific instructions.

Users should avoid running unverified commands and be cautious of suspicious pop-ups or website messages.

Christian Dior Confirms Data Breach Exposing Customer Information

Christian Dior has notified its customers in China of a data breach involving unauthorized access to personal information such as names, contact details, purchase history, and shopping preferences. While no financial data was compromised, the breach affects a broad range of customer data collected by the brand.

Dior advises affected customers who have been contacted to stay alert for suspicious communications.

Snackable Bytes

🛡️ This section contains sponsored cybersecurity insights.

Security Tip of the Day

Is There an AirTag in Your Bag? Check Now

Apple’s legal setback over AirTag misuse has reignited fears about the darker potential of these tiny trackers. They may be handy for finding lost items, but they’ve also been used for stalking and covert surveillance. And at just $29, AirTags have become a cheap, go-to tool for stalkers and privacy abusers.

Source: bitdefender.com.

The good news? Both iPhone and Android users have tools to detect unwanted tracking.

Here are some quick, actionable tips for spotting rogue AirTags:

iPhone:

Android:

If you’re concerned about being tracked by an AirTag (or want to stay one step ahead), these simple actions can help you control your privacy.

The Cybersecurity event of the year is back! Zenith Live is the premier learning conference where experts converge to share the latest in zero trust networking and security to protect and enable organizations to thrive.

Mozilla VPN Faces Challenges Despite Strong Performance and Design

Launched in 2020, Mozilla VPN offers fast speeds and an intuitive desktop interface, but it still faces challenges as a newcomer on the VPN market. 

Source: www.mozilla.org.

With a limited server network and a lack of standout security features, the solution leaves much room for improvement, despite its solid performance and the trusted Mozilla brand.

Read our full review of Mozilla VPN to explore its key features, pricing, and security capabilities.

Navigating Cybersecurity Challenges in the Banking Sector

Cybersecurity has become a top priority for banks as they work to protect billions in assets and sensitive customer data. What are the biggest threats they face—and how are they safeguarding your financial future?

This article examines the most significant threats facing the banking sector and highlights the best practices and solutions that are shaping the future of secure banking.

Meet Our Writers:

Leon Yen

Leon Yen is a cybersecurity expert and seasoned tech journalist with over a decade of experience, including founding a cyber risk startup and leading industry-focused research and reporting.

Liz Ticong

Liz Ticong is a tech writer specializing in AI and software tools, known for turning complex topics into clear, actionable insights through hands-on testing and analysis.

Cybersecurity Insider is a TechnologyAdvice business

© 2025 TechnologyAdvice, LLC. All rights reserved.

TechnologyAdvice, 3343 Perimeter Hill Dr., Suite 100, Nashville, TN 37211, USA.

Want to change how you receive these emails? Update your preferences or unsubscribe here.