Jun 30, 2025

We’ve got another wild one, Digital Defenders! 🛡️

Microsoft is hardening Windows after last year’s CrowdStrike-IT meltdown. Hawaiian Airlines faces turbulence from a fresh cyberattack. Oh, and AI has just outranked humans in the US bug bounty scene.

Let’s dive in.

Here’s what you need to know:

Zero-Day Download

Microsoft Responds to 2024 IT Outage with Tougher, More Resilient Windows

In an effort to recover from the 2024 global IT outage, Microsoft will release key platform upgrades in July that aim to enhance operational resilience on Windows.

According to Cybersecurity Dive, the updates will include quick machine recovery (QMR) and other new capabilities that would prevent future software updates from causing widespread operational disruption for its enterprise customers.

Microsoft Responds to 2024 IT Outage with Tougher, More Resilient Windows

Source: Unsplash / Clint Patterson

Microsoft says QMR enables the deployment of targeted remediations through Windows Recovery Environment (Windows RE), particularly for devices that are unable to start properly.

IT Teams: Check out Microsoft’s new Windows Resiliency Initiative e-book to learn more.

Trouble in Paradise: Hawaiian Airlines Hit by Cyberattack

Hawaiian Airlines has disclosed a cyberattack that disrupted part of its IT systems, though the airline reports that scheduled flights and passenger safety remain unaffected.

According to Reuters, the incident is likely ransomware-related, based on the airline’s use of the term “cybersecurity event.” The company says it has taken steps to safeguard operations and is actively monitoring the situation.

The news comes after Canadian carrier WestJet also reported an attack affecting its internal systems earlier this month.

Airlines and critical infrastructure operators: Stay vigilant as threat activity ramps up across the sector.

‘ClickFix’ Attacks Surge 517% In 2025—Now Second Only to Phishing

According to data from ESET, ClickFix social engineering attacks have recorded a 517% rise in the past six months, making it the second most prevalent attack vector after phishing.

First observed in 2024, ClickFix uses fake error messages to trick victims into “fixing an issue” by copying and pasting a malicious script, unknowingly executing malware on their systems. It can bypass security protections as the victims infect themselves.

Train employees on fake error prompts and restrict script execution privileges on non-admin accounts.

Share this newsletter!

Pulse Check

Has your organization trained for novel social engineering attacks like ClickFix?

✅ Yes – We’ve included these tactics in our trainings.

📝 Partially – We cover social engineering, but not ClickFix specifically.

❌ No – This is a gap we need to address.

Yesterday's Pulse Check Results

What’s your stance on AI agents in the workplace?

Snackable Bytes

NordLayer’s scalable and toggle-ready security platform keeps networks secure, regardless of company size.
From ethical hacking to IT interview training, the Masters in Cyber Security Certification Bundle packs a lot of value for aspiring security professionals.

🛡️ This section contains sponsored cybersecurity insights. Advertise with us!

Threat Tracker

689 Brother Printer Models Vulnerable to Exposing Admin Passwords

Researchers at Rapid7 have identified CVE-2024-51978, a critical vulnerability affecting 689 Brother printer models. The flaw enables attackers to generate the machine’s default admin password, thereby gaining access to admin privileges.

Source: Unsplash / Al Amin Mir

According to Rapid7, seven other vulnerabilities were found that affected printer models from Brother, FUJIFILM, Ricoh, and Toshiba.

Recommendation: Check Brother's official support page or contact their customer service to determine if your printer model is affected.

Humans vs Machines? AI Joins—and Dominates—Bug Bounty Boards

XBOW, an autonomous AI system, has outpaced human experts to become the top vulnerability researcher in the HackerOne Bug Bounty platform leaderboards.

According to TechRepublic, this is the first documented instance of an autonomous AI platform outperforming human experts, submitting over 1,000 vulnerability reports and ranking first in the US leaderboards.

Security teams: Consider exploring AI-powered testing tools to augment your own bug bounty programs.

Security Tip of the Day

Think Twice Before Scanning That QR Code

QR codes are everywhere—on menus, parking meters, and posters—and that convenience is exactly what attackers are counting on.

According to experts at eSecurityPlanet, scammers are weaponizing these codes in a tactic known as quishing—using QR codes to lure victims into malicious websites or trigger harmful downloads.

Think Twice Before Scanning That QR Code

Source: YouTube / eSecurityPlanet

Here’s how to stay safe when facing a suspicious square:

Stick to trusted sources – Only scan codes from legitimate businesses or people you trust.
Ignore random QR codes in public – Avoid scanning stickers in shared spaces as they could’ve been tampered with.
Check the URL before tapping through – If the link has typos or is unfamiliar, close it out.
Don’t install apps after scanning – Unless you know the code is for a specific download, avoid installing anything post-scan.
Use your phone’s built-in scanner – Skip sketchy third-party QR apps that could pose extra risks.

When in doubt, skip that QR scan. A little caution now can save you from a major data leak later.

Meet Our Writers:

Luis Millares

Senior Staff Writer at TechnologyAdvice

Luis Millares is a seasoned tech writer with broad experience reviewing consumer gadgets and enterprise software, offering clear, reliable insights across the latest in technology.

Into more than just malware and mayhem?

Stay sharp on AI, cloud, DevOps, and the tech players shaking things up. Subscribe to Daily Tech Insider for no-fluff rundowns and witty breakdowns delivered straight to your inbox—because knowing what’s next helps you stay secure.

Subscribe Now!

Secure your spotlight and Advertise in Cybersecurity Insider!

Cybersecurity Insider is a TechnologyAdvice business

TechnologyAdvice, 3343 Perimeter Hill Dr., Suite 100, Nashville, TN 37211, USA.

Want to change how you receive these emails? Update your preferences or unsubscribe here.