Top Tech Headlines for July 25, 2025
From AI tools hacking developers to escalating geopolitical cyber threats, today's cyber news reminds us how fast the tech world moves—and why staying alert matters. Here’s your daily digest of the most important cybersecurity and tech stories.
Amazon AI Coding Agent Compromised by Hacker
An unknown attacker compromised a version of Amazon’s Q Developer Extension for Visual Studio Code, injecting it with malicious data-wiping commands. This creates a major risk for developers unknowingly running destructive scripts via AI automation. It’s a cautionary tale about the growing threats embedded in trusted development tools.
Microsoft 365 Admin Center Suffers Outage
Microsoft is investigating a widespread issue affecting the Microsoft 365 admin center, leaving business and enterprise users locked out. Though no user data appears compromised, the outage spotlights the need for contingency plans—even for major platforms. Always have offline recovery tools and backups ready.
Cybersecurity PMs Adapt to Fast-Moving Threats
Security-focused product managers are evolving quickly, implementing real-time controls and leveraging tools like ThreatLocker Patch Management. With attackers exploiting PowerShell and USB vulnerabilities, modern threat response now requires on-the-fly risk mitigation. The days of static policies are over.
U.S. Sanctions N. Korean Operatives in IT Worker Scheme
The U.S. Treasury has sanctioned three North Korean nationals and an IT front company linked to covert income streams for the DPRK. These workers posed as global IT freelancers, funneling over $17M to fund prohibited weapons programs. It's cyber-espionage wrapped in freelance deception.
Arizona Woman Sentenced for Running ‘Laptop Farm’
Christina Marie Chapman has been sentenced to over eight years in prison for enabling North Koreans to access the U.S. job market and infiltrate 309 companies. Her network of remotely controlled laptops helped them bypass identity verification and security protocols—highlighting a surprising insider threat scenario.
Microsoft Removes Windows 11 Block for Gamers
Gamers rejoice—Microsoft has lifted the Windows 11 update block that had affected users running Easy Anti-Cheat. The issue, which caused blue screens (BSOD), is now resolved. This brings much-needed stability to gaming rigs eager to run the 2024 Update.
Cursor’s Bugbot AI Now Available Beyond Beta
Developers, meet your new reviewer. Cursor’s AI-powered Bugbot is officially out of beta, offering automated code reviews to speed up dev workflows. It's another step toward AI-driven software development efficiency—just make sure security reviews aren’t overlooked!
Anthropic Launches AI Agents for Model Safety Audits
Anthropic is ramping up AI safety efforts by deploying autonomous agents to evaluate models like Claude. These agents aim to catch potential risks before they reach users, a move that aligns with rising regulatory pressure to make AI more responsible.
Alibaba’s Qwen AI Breaks Open-Source Benchmarks
Alibaba has launched an upgraded version of its open-source Qwen reasoning AI model, setting new records in benchmark performance. This release cements China's growing leadership in open GenAI innovation, posing both opportunity and competition on the global stage.
YouTube Retires ‘Trending’ for Personalized Discovery
YouTube has ditched its global 'Trending' page in favor of a more personalized feed based on your activity and interests. This marks a big shift in content delivery, focusing on relevancy over virality. Expect your video recommendations to get even more targeted.
Patchwork Uses LNK Phishing to Target Turkish Defenses
APT group Patchwork is targeting Turkish defense firms using malicious LNK files to spear-phish staff and steal sensitive military data. The campaign emphasizes how niche but critical sectors like UAV and missile systems are under constant cyber siege. Advanced phishing remains a go-to tactic.
EAGLET Malware Hits Russian Aerospace with Espionage Campaign
Russian aerospace companies are under attack by cyber spies deploying the EAGLET backdoor via phishing lures. Researchers link the campaign to Head Mare and Hive0156, highlighting ongoing state-linked cyberespionage campaigns. No targets are off-limits in the global cyber chessboard.
Malware Campaigns Target Cloud Services with Cryptominers
New cloud-focused malware strains, Soco404 and Koske, are hijacking misconfigured services to mine crypto across platforms. These cross-platform attacks use malicious images and default settings to sneak past defenses. Cloud security hygiene is now more critical than ever.
Chinese GenAI Tools Raise Alarm Over Data Compliance
Over 1,000 employees have reportedly leaked sensitive corporate data via China-based generative AI platforms. This has sparked global concerns over data privacy, compliance, and third-party risk with non-domestic AI services. If you're using AI tools, make sure you know where your data ends up.
Want to stay ready for anything? From data recovery to bootable OS installs, our Ultimate USBs have your back. Check out our tools today.