Stay on your toes, Digital Defenders! 🛡️

Today’s updates bring a stealthy malware campaign, a major retail disruption, and a blocked breach with global fallout. Oh, and AI just got a new security stress test.

Plus, don’t forget to check out our poll at the bottom: How locked down are your social media accounts?

Here’s what you need to know:

Zero-Day Download

Patch Tuesday: Microsoft Fixes Zero-Day Bug Exploited in Attacks

Microsoft’s June 2025 Patch Tuesday addressed 66 bugs, including a zero-day flaw that attackers were already exploiting. The most serious issue, CVE-2025-30400, could let hackers take full control of a system through the Desktop Window Manager.

Eight remote code execution flaws were also patched.

Source: Lansweeper

With 10 critical issues total, this patch cycle is one to prioritize.

If you haven’t hit “update” yet, now’s the time. Attackers move fast, and unpatched systems are their favorite target.

New AI Test Aims to Make Cybersecurity Smarter

Researchers at the Rochester Institute of Technology have developed CTIBench, a tool that evaluates the performance of AI models in cybersecurity tasks. It’s already being used by teams at Google to check how large language models perform when analyzing cyber threats.

The goal? Ensure that AI tools aren’t only fast but also accurate and trustworthy in detecting risks. As AI becomes more common in security work, tools like CTIBench help raise the bar.

You wouldn’t trust a lock that hasn’t been tested. The same goes for AI. CTIBench is a step toward making sure these tools are ready for the front lines.

Retail Giant M&S Reboots Online Shopping After Cyber Hit

Marks & Spencer has restarted online clothing orders after a cyberattack shut down its digital services for over six weeks. The April attack disrupted payments, app access, and click-and-collect services just as the Easter rush hit. Standard home delivery is now live again in most of the UK, with other services set to return soon.

The breach was traced back to a third-party contractor and is expected to cost M&S up to £300 million in operating profit this year. The company hopes to recover half through insurance and cost-saving moves.

Supply chain threats don’t just hit warehouses; they hit wallets, too. M&S is the latest reminder that strong vendor security is just as critical as your own.

Share this newsletter!

Snackable Bytes

🛡️ This section contains sponsored cybersecurity insights. Advertise with us!

Threat Tracker

SentinelOne Stops China-Linked Hack, Uncovers Global Breach Trail

SentinelOne blocked an attempted attack from a China-based threat group dubbed PurpleHaze. While the hackers failed to breach SentinelOne, the investigation led to a bigger discovery: more than 70 other organizations, including government agencies and media companies, had already been compromised.

Source: Insurtech Insights

The attack originated through a hardware logistics partner, highlighting how third-party connections can become vulnerable weak spots. Even when you’re secure, your supply chain might not be.

This is a reminder that trusting partners is beneficial, but verifying their security is even more important.

Malicious LinkedIn Job Applications Deliver Malware to Hiring Teams

A cybercrime group tied to FIN6 is targeting recruiters by posing as job seekers on LinkedIn and Indeed. After striking up conversations, they share links to fake “resumes” hosted on AWS that actually deliver the More_eggs malware.

These files are often wrapped in sophisticated decoy sites and CAPTCHA checks to bypass scanners and deceive users. Once opened, they can steal credentials, gain system access, or pave the way for ransomware.

Recruiters may be on the lookout for talent, but they also need to watch for traps. A well-timed link could include more than just a job application.

Learn why protecting Microsoft 365 data is so critical today and how to identify security gaps in your organization.

Security Tip of the Day

Think Your Socials Are Safe? Think Again

Social media accounts might seem harmless, but they can do real damage in the wrong hands. President Peña’s compromised X account showed how quickly a single exposed account can spread false information to a wide audience.

You don’t have to be famous to be a target. Personal profiles, business pages, and team accounts all carry risk. Secure your socials, because just one hacked post can create confusion, damage trust, and open the door to bigger threats.

Source: The Hacker News

Cybercriminals are seizing the opportunity to intercept passengers’ data in transit. But this doesn’t mean you need to swear off your airline’s wifi altogether. Just make sure you’re taking the proper precautions before connecting.

Here are a few ways to protect your social media accounts:

Social media can amplify your message…or your mistakes. Make sure it’s working for you, not for attackers.

Security Question of the Day

How locked down are your social media accounts?

Results from Yesterday's Security Question of the Day

How secure is your cloud storage setup?

Meet Our Writers:

Liz Ticong

Liz Ticong is a tech writer specializing in AI and software tools, known for turning complex topics into clear, actionable insights through hands-on testing and analysis.

Secure your spotlight and Advertise in Cybersecurity Insider!

Cybersecurity Insider is a TechnologyAdvice business

© 2025 TechnologyAdvice, LLC. All rights reserved.

TechnologyAdvice, 3343 Perimeter Hill Dr., Suite 100, Nashville, TN 37211, USA.

Want to change how you receive these emails? Update your preferences or unsubscribe here.