Netskope uncovers Sainbox RAT (Gh0stRAT variant) and Hidden rootkit delivered via fake software installers to Chinese users, leveraging DLL sideloading and sRDI for stealth.

Leeds, UK, 27th June 2025, CyberNewsWire

Microsoft's 2011 Secure Boot certificates expire in 2026, impacting all supported Windows versions. Update now via Windows Update to avoid boot failures, especially on isolated systems.

Google's "Ask Photos" feature relaunches in the US, blending traditional image search with Gemini AI for faster, more contextual natural language queries within your photo library.

Apple revised EU App Store policies, allowing external purchases and new fees (initial acquisition, service, CTC) after a €500M fine. Developers can now direct users to outside payment channels.

MongoDB discloses CVE-2025-6710 (CVSS 7.5), a pre-authentication DoS flaw. Crafted JSON inputs can crash servers via stack overflow.

IBM warns of a critical RCE flaw (CVE-2025-36038) in WebSphere Application Server 8.5/9.0, allowing unauthenticated attackers to execute arbitrary code via serialization.

Following the 2024 CrowdStrike BSOD incident, Microsoft's Windows Resiliency Initiative is moving security drivers out of the kernel into user mode to boost system stability.

Let’s Encrypt is now testing IP-only digital certificates, offering a free alternative for securing IP addresses without domains, valid for six days with automated renewal.

Notorious hacker "IntelBroker" (Kai West) has been arrested, traced by the FBI through his crypto transactions. He's charged with stealing and selling data, causing $25M in damages.

Microsoft confirms any activated Windows 10 PC can receive ESU updates, regardless of Windows 11 hardware compatibility. Get one year of security updates via payment or free options.

HDMI 2.2 is finalized, doubling bandwidth to 96Gbps for 4K@240Hz, 8K@60Hz, and 16K@60Hz (via DSC). Requires Ultra96 cables, with devices expected Q4 2025.

PNG 3.0 is now a W3C Recommendation, introducing HDR imaging, native APNG, and EXIF metadata support, significantly enhancing the visual quality and functionality of web images.

The US Senate reintroduced the Open App Markets Act, aiming to curb Apple & Google's app store dominance by mandating sideloading, third-party payments, and preventing self-preferencing.

Google Cloud launches Gemini CLI, a free, open-source terminal tool bringing Gemini 2.5 Pro to developers for code generation, debugging, and file manipulation.

Amazon is investing $4B to expand same-day/next-day delivery to over 4,000 smaller US communities by 2026, leveraging AI and new hubs to boost e-commerce dominance.

Microsoft is replacing Windows' iconic Blue Screen of Death with a new black-and-white interface this summer, removing the QR code and emoticon for faster IT diagnosis.

In my journey to explore how I can use artificial intelligence to assist in penetration testing, I experimented with a security-focused chat bot created by Jason Haddix called Arcanum Cyber Security Bot (available on https://chatgpt.com/gpts). Jason engineered…

Free Link 🎈

Unlocking Hidden Attack Surfaces in the Most Overlooked Corner of Web Security

Source Code Disclosure via Backup Files — Hunting Sensitive Data Left in the Wild. Automates discovery of leaked backup files via…