SecurityWeek’s cybersecurity news roundup for July 4, 2025 provides a concise compilation of noteworthy stories.

A critical vulnerability (CVE-2025-20309) in Cisco's Unified CM and Unified CM SME communication management software could ...

North Korean hackers are using fake Zoom invites to install ‘NimDoor’ malware — a rare Nim-compiled backdoor targeting macOS ...

The key tool for surviving ransomware, or any attack scenario, is an incident response (IR) plan that is comprehensive, ...

Australian airline Qantas says personal information stolen from systems hosting the service records of 6 million customers.

A vulnerability in Catwatchful, an Android spyware posing as parental control software, exposed the credentials of over 62,000 customer accounts.

A vulnerability in the Forminator WordPress plugin allows attackers to delete arbitrary files and take over impacted websites ...

CISA says two more vulnerabilities in the messaging application TeleMessage TM SGNL have been exploited in the wild.

Google has released a Chrome 138 update that patches a high-severity vulnerability with an exploit in the wild.

The International Criminal Court (ICC) has detected and contained a sophisticated and targeted cyberattack. The International ...

The US has made 29 searches of known or suspected laptop farms supporting North Korean individuals posing as US IT workers.

Many Citrix NetScaler systems are exposed to attacks exploiting the vulnerabilities tracked as CVE-2025-5777 and ...