Meta AI's "Discover" feed is exposing private chats by default—including medical, financial, and voice recordings. Over 6.5M users may be affected. Check your privacy settings now. Details: https://redteamnews.com/news/meta-ais-public-search-leak-privacy-risks-and-technical-implications/

Victoria's Secret confirms a May cyberattack involving phishing, ransomware, and third-party data exposure. Systems are restored, but the breach delayed earnings and exposed 364K records. A reminder of evolving supply chain risks. https://redteamnews.com/threat-intelligence/data-breach/victorias-secret-cyberattack-phishing-ransomware-and-third-party-impacts/

Trend Micro released urgent patches for critical RCE and auth bypass flaws in Apex Central and Endpoint Encryption. Attackers could exploit these to compromise systems—update now. Details: https://redteamnews.com/red-team/cve/trend-micro-patches-critical-rce-and-authentication-bypass-vulnerabilities-in-apex-central-and-endpoint-encryption/

Major outages hit Google Cloud and Cloudflare today, disrupting services like Gmail, YouTube, and Discord. Workarounds available as teams investigate. Highlights risks of internet centralization. Details: https://redteamnews.com/news/widespread-outages-hit-google-cloud-and-cloudflare-technical-impact-and-response/

Investigators confirm Paragon's Graphite spyware targeted journalists via iOS zero-click exploits in iMessage and WhatsApp. The attacks bypassed encryption, raising serious surveillance concerns. High-risk users should update devices immediately. https://redteamnews.com/threat-intelligence/apt-news/graphite-spyware-targets-journalists-via-ios-zero-click-exploits/

GitLab just patched critical vulnerabilities allowing account takeovers and CI/CD pipeline hijacking. If you use GitLab, upgrade to 18.0.2/17.11.4 immediately. Details: https://redteamnews.com/red-team/cve/gitlab-patches-critical-account-takeover-and-pipeline-hijacking-vulnerabilities/

Fog ransomware is using legit tools like Syteca & open-source utilities in attacks on gov, healthcare & education. Targets Windows & Linux, demands up to $1.2M. Patch VPNs, monitor logins & use immutable backups. Details: https://redteamnews.com/threat-intelligence/fog-ransomwares-unusual-toolset-legitimate-software-and-open-source-utilities-in-attacks/

AI bots are reshaping the web—40% drop in search traffic, 37% of internet traffic now malicious bots. The security and economic impacts are huge. How is your org adapting? https://redteamnews.com/threat-intelligence/ai-bots-reshaping-web-traffic-security-implications-and-industry-shifts/

Disney and Universal sue Midjourney for allegedly using Mickey Mouse and Darth Vader in AI-generated images without permission. The $20M+ lawsuit could reshape AI copyright rules. https://redteamnews.com/cyber-laws-regulations/disney-and-universal-sue-midjourney-over-ai-copyright-infringement-legal-and-security-implications/

Microsoft has rolled out a revised Windows 11 24H2 update (KB5060842/KB5060999) for PCs with compatibility issues, fixing 66 vulnerabilities including an active WebDAV zero-day. Check if your device is affected. https://redteamnews.com/red-team/cve/microsoft-releases-revised-windows-11-24h2-update-for-incompatible-pcs/

🚨 BREAKING: Operation Secure led by INTERPOL has dismantled global infostealer networks—32 arrests, 20K malicious domains taken down. These stealers fuel 49% of breaches. Protect yourself with MFA and credential monitoring. Details: https://redteamnews.com/threat-intelligence/operation-secure-global-infostealer-crackdown-and-emerging-threats/

Microsoft has fixed Windows Server auth failures caused by April 2025 updates. The June patch (KB5060526) resolves Kerberos PKINIT issues that broke smart cards & Windows Hello for Business. Critical for enterprises to update. Details: https://redteamnews.com/red-team/cve/microsoft-resolves-windows-server-authentication-failures-after-april-2025-updates/

WhatsApp joins Apple in opposing UK's push to weaken encryption, calling it a "dangerous precedent" for privacy. The standoff could reshape global digital rights as tech giants resist government backdoors. https://redteamnews.com/cyber-laws-regulations/whatsapp-supports-apple-in-uk-encryption-dispute-citing-privacy-risks/

The Secret Service tracked a child abuse distributor using digital forensics—analyzing video metadata and even diaper serial codes. International collaboration led to a life sentence. A stark reminder of tech's role in justice. Read more: https://redteamnews.com/news/how-the-secret-service-used-digital-forensics-to-track-a-child-sex-abuse-distributor/

New Secure Boot bypass (CVE-2025-3052) lets attackers install bootkit malware by breaking UEFI trust. Patches are out, but firmware issues complicate fixes. Critical update for admins. Details: https://redteamnews.com/red-team/cve/new-secure-boot-bypass-cve-2025-3052-enables-bootkit-malware-installation/

Microsoft's June 2025 Patch Tuesday fixes 66 flaws, including a critical zero-day under active attack. If you use Windows, Office, or SharePoint, patch now—especially for WebDAV and SMB vulnerabilities. Details: https://redteamnews.com/red-team/cve/microsoft-june-2025-patch-tuesday-critical-zero-day-fixes-and-66-flaws-addressed/

Microsoft's June 2025 Patch Tuesday brings critical security fixes for Windows 11 (KB5060842 & KB5060999), patching 66 vulnerabilities including an exploited zero-day. Enterprises should prioritize updating, especially for DirectAccess fixes. Details: https://redteamnews.com/news/windows-11-kb5060842-and-kb5060999-updates-security-fixes-and-enterprise-implications/

FIN6 hackers are now posing as job seekers, sending fake resumes with malicious .lnk files to recruiters. The More_eggs malware they deliver can lead to ransomware and credential theft. Stay vigilant and verify applicants carefully. #Cybersecurity https://redteamnews.com/threat-intelligence/apt-news/fin6-hackers-target-recruiters-with-fake-job-applications-delivering-more_eggs-malware/

Shocking report: 99% of organizations expose sensitive data to AI tools, with 90% of cloud data accessible. AI's "Pac-Man" behavior creates major security risks. Are you protected? Learn more: https://redteamnews.com/news/ai-as-a-data-threat-99-of-organizations-expose-sensitive-data-to-ai-tools/

Heroku's latest 6-hour outage has developers questioning its reliability. With rising costs and limited features, many are migrating to alternatives like AWS, DigitalOcean, or mogenius. Here's a technical breakdown of the impact and options: https://redteamnews.com/news/herokus-global-outage-technical-impact-and-cloud-platform-alternatives/