Google Warns: Critical Chrome Flaw Letting Hackers Take Over PCs Is Already Being Exploited
Source: https://techoreon.com/google-warns-critical-chrome-flaw-letting-hackers-take-over-pcs-is-already-being-exploited/
Google Patches Critical Zero-Day Flaw in Chrome’s V8 Engine After Active Exploitation
Source: https://thehackernews.com/2025/07/google-patches-critical-zero-day-flaw.html
|Reference: [Ongoing Campaign Abuses Microsoft 365’s Direct Send to Deliver Phishing Emails](https://www.varonis.com/blog/direct-send-exploit)|
|:-|
**Key Points:**
* **Phishing Campaign:** Varonis' MDDR Forensics team uncovered a phishing campaign exploiting Microsoft 365's Direct Send feature.
* **Direct Send Feature:** Allows internal devices to send emails without authentication, which attackers abuse to spoof internal users.
* **Detection:** Look for external IPs in message headers, failures in SPF, DKIM, or DMARC, and unusual email behaviors.
* **Prevention:** Enable "Reject Direct Send," implement strict DMARC policies, and educate users on risks.
For technical details, please see more in reference (above).
Could anyone share samples or real-world experiences about this *(for education and security monitoring)*?
Androxgh0st Botnet Expands Reach, Exploiting US University Servers
Source: https://hackread.com/androxgh0st-botnet-expand-exploit-us-university-servers/
Hackers Exploit Misconfigured Docker APIs to Mine Cryptocurrency via Tor Network
Source: https://thehackernews.com/2025/06/hackers-exploit-misconfigured-docker.html
