Take cover, Digital Defenders! 🛡️

Today’s drop reads like a cyber spy thriller: smartwatch espionage, INTERPOL raids, and zero-click AI exploits straight from a villain’s playbook. Meanwhile, Microsoft Teams gets weaponized for mass takeovers, while insurers get hammered like high-risk policies — because the digital storm’s not subsiding, it’s about to blow everything down.

Also, be sure to check out our poll at the bottom: How hackable is your GPS setup, really?

Here’s what you need to know:

Zero-Day Download

TeamFiltration Attack Hijacks 80,000+ Entra ID Accounts via Microsoft Teams Exploit

A massive account takeover campaign dubbed "UNK_SneakyStrike" has compromised over 80,000 Microsoft Entra ID (formerly Azure AD) accounts using an open-source tool called TeamFiltration.

Source: Microsoft Teams.

The attack leverages Microsoft Teams APIs and AWS infrastructure to execute password spraying and user enumeration across cloud tenants. The tool — originally presented at DEF CON — enables persistent access and data exfiltration through Microsoft 365 services like OneDrive and Outlook.

To protect against these attacks, users should enable multi-factor authentication (MFA) on all accounts and avoid reusing passwords across services.

INTERPOL's 'Operation Secure' Shuts Down 20,000+ Malware-Linked IPs Across 26 Nations

In a sweeping international crackdown dubbed Operation Secure, INTERPOL and law enforcement from 26 countries dismantled over 20,000 malicious IP addresses and domains tied to 69 strains of info-stealing malware.

Conducted between January and April 2025, the operation led to the takedown of 79% of flagged infrastructure, the seizure of 41 servers, and over 100 GB of criminal data. 

Authorities arrested 32 suspects — 18 in Vietnam — and seized devices, SIM cards, and illicit funds. Hong Kong police also uncovered 117 servers behind global phishing and fraud campaigns.

Users should stay vigilant by avoiding suspicious links, using antivirus software, and regularly updating their passwords to protect against info-stealing malware.

SinoTrack GPS Flaws Expose Vehicles to Remote Hijacking and Location Tracking

Two critical vulnerabilities (CVE-2025-5484 and CVE-2025-5485) in SinoTrack GPS devices could let attackers remotely control vehicle functions and track locations, according to a CISA advisory.

The flaws stem from weak authentication — relying on default passwords and easily guessed numerical usernames tied to device IDs. All versions of the SinoTrack IoT PC Platform are affected, potentially putting thousands of vehicles at risk of unauthorized tracking or fuel pump disablement.

Users should immediately change default credentials, restrict physical and web access to their GPS devices, and consider disabling remote management features until a firmware update is available.

Share this newsletter!

Snackable Bytes

🛡️ This section contains sponsored cybersecurity insights. Advertise with us!

Threat Tracker

First-Ever Zero-Click AI Exploit 'EchoLeak' Discovered in Microsoft 365 Copilot

Security researchers from Aim Labs have uncovered a critical zero-click vulnerability in Microsoft 365 Copilot, dubbed "EchoLeak," which could allow attackers to extract sensitive data from a user's environment without any interaction.

Source: Microsoft.

While no real-world exploitation occurred, EchoLeak highlights a new class of risks — 'LLM Scope Violation' — involving large language models unintentionally leaking privileged internal information, raising concerns about AI-driven tools in enterprise environments.

Users should stay informed about AI tool vulnerabilities and rely on official updates, while avoiding sharing sensitive data in AI-assisted platforms unless necessary.

Researchers Use Smartwatches to Steal Data from Air-Gapped Systems via Ultrasound

Israeli researchers have unveiled "SmartAttack," a novel method of exfiltrating data from air-gapped systems using ultrasonic signals received by nearby smartwatches.

Despite their isolation from networks, air-gapped machines remain susceptible to insider threats and stealthy malware. Once a system is compromised, malicious code can manipulate hardware to emit ultrasonic signals carrying sensitive data — undetectable by the human ear.

Organizations should strictly control insider access, regularly audit connected devices near sensitive systems, and consider banning or limiting wearable technology in high-security areas to reduce the risk of covert data leaks.

Learn why protecting Microsoft 365 data is so critical today and how to identify security gaps in your organization.

Security Tip of the Day

Don’t Let GPS Spoofing Turn Your Scenic Route Into a Shortcut to Disaster

Looking to catch up on some emails on that next red eye? As more travelers log on mid-flight, cybercriminals are circling like vultures, ready to hijack your personal data at 30,000 feet.

Source: Adobe Stock.

By broadcasting fake GPS signals stronger than real ones, attackers trick your car (or phone) into believing it’s somewhere it’s not. The consequences range from harmless annoyances like misrouted ride shares to life-threatening disasters like planes entering restricted airspace or ships veering off course.

Fortunately, a few simple steps can tighten your location security and keep GPS spoofers from hijacking your journey.

Tips to Protect Yourself From GPS Spoofing:

Want to stay one step ahead of the spoofers? Start with these defenses and keep your digital location locked tight.

Security Question of the Day

How hackable is your GPS setup, really?

Results from Yesterday's Security Poll

How locked down are your social media accounts?

Meet Our Writers:

Leon Yen

Leon Yen is a cybersecurity expert and seasoned tech journalist with over a decade of experience, including founding a cyber risk startup and leading industry-focused research and reporting.

Secure your spotlight and Advertise in Cybersecurity Insider!

Cybersecurity Insider is a TechnologyAdvice business

© 2025 TechnologyAdvice, LLC. All rights reserved.

TechnologyAdvice, 3343 Perimeter Hill Dr., Suite 100, Nashville, TN 37211, USA.

Want to change how you receive these emails? Update your preferences or unsubscribe here.