BADBOX 2.0 Found Preinstalled on Android IoT Devices Worldwide – Source:hackread.com https://ciso2ciso.com/badbox-2-0-found-preinstalled-on-android-iot-devices-worldwide-sourcehackread-com/ #1CyberSecurityNewsPost #CyberSecurityNews #cybersecurity #Vulnerability #BADBOX20 #Hackread #security #android #malware #Badbox #China #IoT #TV

SonicWall SMA devices persistently infected with stealthy OVERSTEP backdoor and rootkit https://www.helpnetsecurity.com/2025/07/16/sonicwall-sma-devices-persistently-infected-with-stealthy-overstep-backdoor-rootkit/ #vulnerability #credentials #Don'tmiss #SonicWall #Hotstuff #backdoor #Mandiant #Google #News

Fortinet FortiWeb Instances Hacked With Webshells Following Public PoC Exploits https://cybersecuritynews.com/fortinet-fortiweb-instances-hacked/ #CyberSecurityNews #VulnerabilityNews #cybersecuritynews #CyberSecurity #cybersecurity #vulnerability

Windows Server 2025 Golden dMSA Attack Enables Authentication Bypass and Password Generation https://cybersecuritynews.com/windows-server-2025-golden-dmsa-attack/ #CyberSecurityNews #VulnerabilityNews #cybersecuritynews #CyberSecurity #cybersecurity #vulnerability #Windows

Google’s AI Tool Big Sleep Uncovered Critical SQLite 0-Day Vulnerability and Blocks Active Exploitation https://cybersecuritynews.com/sqlite-0-day-vulnerability/ #CyberSecurityNews #CyberSecurity #Vulnerability #ZeroDay #Google #AI

Gmail Message Used to Trigger Code Execution in Claude and Bypass Protections https://cybersecuritynews.com/claude-ai-exploited/ #CyberSecurityNews #cybersecuritynews #CyberSecurity #Vulnerability #cybersecurity #vulnerability #GMail

Oracle Critical Security Update – 309 Vulnerabilities with 145 Remotely Exploitable Patched https://cybersecuritynews.com/oracle-critical-security-update-july2025/ #CyberSecurityNews #cybersecuritynews #SecurityUpdates #Vulnerabilities #CyberSecurity #cybersecurity #vulnerability #Oracle

Critical VMware vulnerabilities enable Virtual Machine escape, host compromise

Broadcom has patched multiple critical VMware vulnerabilities discovered at Pwn2Own 2025 that enable attackers with local admin privileges on virtual machines to escape to host systems and execute arbitrary code, affecting VMware ESXi, Workstation, Fusion, and VMware Tools. The vulnerabilities were demonstrated with near-perfect reliability and have existing proof-of-concept exploits.

**If you are running VMware on your laptop, PC or servers, read this advisory. There are some very nasty flaws that enable user (or process) on a VMware guest OS to breach the isolation and attack the host. Time to patch VERY QUICKLY. Isolation doesn't work because the attacker will already have access to the VMware system.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/critical-vmware-vulnerabilities-enable-virtual-machine-escape-host-compromise-0-v-9-m-o/gD2P6Ple2L

Lenovo Vantage Flaws Enable Attackers to Gain SYSTEM-Level Privileges https://gbhackers.com/lenovo-vantage-flaws-enable-attackers/ #CyberSecurityNews #cybersecurity #Vulnerability

Samsung WLAN AP Flaws Let Remote Attackers Run Commands as Root https://gbhackers.com/samsung-wlan-ap-flaws/ #CyberSecurityNews #Vulnerabilities #cybersecurity #Vulnerability

Windows Secure Boot Certificate Expired in June, Microsoft Issues Warning https://gbhackers.com/windows-secure-boot-certificate-expired-in-june/ #CyberSecurityNews #cybersecurity #Vulnerability

Google’s AI ‘Big Sleep’ Detects Critical SQLite 0-Day, Halts Ongoing Attacks https://gbhackers.com/googles-ai-big-sleep-detects-critical-sqlite-0-day/ #CVE/vulnerability #CyberSecurityNews #Vulnerabilities #Vulnerability

Google releases urgent patch for Chrome, fixes actively exploited flaw

Google has released an urgent Chrome security update addressing six vulnerabilities, including a critical zero-day sandbox escape flaw (CVE-2025-6558) that is being actively exploited in the wild. The flaw is discovered by Google's Threat Analysis Group, suggesting potential nation-state involvement.

**Once again - an urgent patch for Chrome - Google is patching an actively exploited flaw in Chrome, and exploitation is just a visit to a malicious site. DONT WAIT! Update all your Chrome and Chromium browsers (Edge, Opera, Brave, Vivaldi...). Updating the browser is easy, all your tabs reopen after the patch.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/google-releases-urgent-patch-for-chrome-fixes-actively-exploited-flaw-d-g-f-0-h/gD2P6Ple2L

Ever wondered what vulnerabilities look like in Android apps?

We have 2 real-world examples for you! From simple misconfig to cross-app data flow, learn how vulnerabilities manifest in the Kotlin code of Android apps:

https://www.sonarsource.com/blog/securing-kotlin-apps-with-sonarqube-real-world-examples/?utm_medium=social&utm_source=mastodon&utm_campaign=research&utm_content=blog-kotlin-real-world-vulns-250715-1&utm_term=---all&s_category=Organic&s_source=Social%20Media&s_origin=social

Oracle Issues Critical Update Fixing 309 Vulnerabilities Across Products https://gbhackers.com/oracle-issues-critical-update/ #CVE/vulnerability #CyberSecurityNews #Vulnerabilities #Vulnerability

Google Says AI Agent Thwarted Exploitation of Critical Vulnerability https://www.securityweek.com/google-says-ai-agent-thwarted-exploitation-of-critical-vulnerability/ #ArtificialIntelligence #Vulnerabilities #vulnerability #BigSleep #SQLite #AI