Get ready, Digital Defenders! 🛡️

Your phone. Your code. Your dog’s collar. All fair game. From Chrome zero-days to crypto scams and credential theft, today’s threats strike fast… and hit home.

Get the full picture below, and don’t forget to answer our poll at the bottom: Is your pet a walking smart gadget?

Here’s what you need to know:

Zero-Day Download

Another Chrome Emergency: Zero-Day Exploit Hits Again

Google has issued an urgent fix for CVE-2025-5419, marking the third actively exploited Chrome zero-day of the year.

Source: LinkedIn

The high-severity flaw, discovered by Google’s own Threat Analysis Group, stems from an out-of-bounds read/write bug in Chrome's V8 JavaScript engine. Attackers are already exploiting the bug in the wild, potentially putting millions of users at risk of silent compromise through malicious web content.

If you haven’t updated Chrome yet, do it now. This patch closes an open door that's actively being used.

Spyware Vendors Are Weaponizing Qualcomm Zero-Days

Qualcomm has released security updates to fix three zero-day vulnerabilities in its Adreno GPU drivers, all of which have been exploited in limited, targeted attacks.

Discovered by Google’s Android Security team, the flaws include two high-severity authorization bugs, all of which can trigger memory corruption. These flaws echo past GPU-related vulnerabilities leveraged by spyware vendors, raising concerns about potential surveillance abuse.

Users should ensure their devices receive the latest security updates promptly and avoid installing apps from untrusted sources.

New Cryptojacking Campaign Hijacks Docker, Gitea, and HashiCorp Nomad

Researchers at Wiz have uncovered a stealthy cryptojacking operation, dubbed JINX-0132, that targets misconfigured DevOps tools—including Docker, Gitea, and HashiCorp Nomad—for illicit cryptocurrency mining.

In what is believed to be the first documented abuse of Nomad misconfigurations in the wild, attackers are leveraging public GitHub repositories to stage their payloads, thereby complicating attribution.

To mitigate risk, organizations should audit their DevOps environments for misconfigurations, apply security patches promptly, and restrict public access to sensitive services, such as Nomad and Docker.

Share this newsletter!

Snackable Bytes

🛡️ This section contains sponsored cybersecurity insights. Advertise with us!

Threat Tracker

The North Face Warns Customers of Data Breach After Credential Stuffing Attack

Outdoor apparel giant The North Face is warning customers that their personal information was compromised in a credential stuffing attack that targeted its website in April.

Source: tripwire.com.

The attack involved cybercriminals using previously leaked username and password combinations to break into accounts, a tactic made easier by password reuse.

The company has begun notifying affected customers and urges them to use multi-factor authentication to prevent future breaches.

Cartier Breach Exposes Customer Data in Targeted Cyber Attack

Luxury brand Cartier has disclosed a data breach after hackers gained temporary access to its systems and stole customer information, including names, email addresses, and country of residence. The incident was contained, and the company says it has since strengthened its security measures.

While Cartier assures that no passwords or financial data were compromised, it warns customers to stay alert for phishing attempts or suspicious messages. 

Russian Market Surges as Top Hub for Stolen Credentials After Genesis Takedown

The “Russian Market” cybercrime marketplace has become a go-to destination for buying and selling stolen credentials, filling the void left by the takedown of Genesis Market.

According to ReliaQuest, the platform has recently experienced a surge in popularity, offering infostealer logs that contain passwords, cookies, credit card data, and more, often for as little as $2. 

To protect against credential theft, users should enable multi-factor authentication, use a reputable password manager, and regularly scan their devices for infostealer malware.

Security Tip of the Day

Don’t Let Your Best Friend Become Your Biggest Cyber Threat

Not Mittens the cat. Not Bella the Goldie. The real risk? That smart collar or treat dispenser you bought them.

Source: reviewed.com.

Smart pet gadgets are everywhere. Approximately 83% of pet owners in North America and Europe own at least one. GPS collars, voice-activated feeders, treat-launching cameras—they promise convenience and peace of mind.

But every connected device is a potential entry point for cybercriminals. That cute camera or feeder? It could be serving up your network credentials.

Stay one step ahead with a few simple habits:

That shiny new gadget might be fun, but a hacked home is anything but. Lock it down.

Security Question of the Day

Is your pet a walking smart gadget?

Results from Yesterday's Security Question of the Day

What’s your take on AI-generated code?

Meet Our Writers:

Leon Yen

Leon Yen is a cybersecurity expert and seasoned tech journalist with over a decade of experience, including founding a cyber risk startup and leading industry-focused research and reporting.

Cybersecurity Insider is a TechnologyAdvice business

© 2025 TechnologyAdvice, LLC. All rights reserved.

TechnologyAdvice, 3343 Perimeter Hill Dr., Suite 100, Nashville, TN 37211, USA.

Want to change how you receive these emails? Update your preferences or unsubscribe here.