Top Tech Headlines – July 20, 2025

From a critical SharePoint zero-day to supply chain threats rippling through npm, today’s cybersecurity landscape is packed with red flags. Here’s your quick and clear breakdown of what’s happening in the tech world — and what you can do to stay protected.

🚨 Unpatched Microsoft SharePoint Zero-Day Actively Exploited

A new zero-day vulnerability in Microsoft SharePoint, tracked as CVE-2025-53770, is being actively exploited in the wild. Over 85 servers and at least 75 organizations across the globe have already been breached. The bugs enable remote code execution (RCE), and with no patch currently available, on-prem SharePoint users face a serious security headache.

🔑 HPE Aruba Access Points Expose Users via Hardcoded Credentials

Hewlett-Packard Enterprise has issued a warning for its Aruba Instant On Access Points. These Wi-Fi devices ship with hardcoded login credentials – a major vulnerability allowing attackers to bypass authentication and access device settings. If you manage Aruba networks, now's the time to audit and update.

🎯 Web3 Devs Targeted by EncryptHub’s Fake AI Tool Scam

A new malware campaign dubbed EncryptHub is preying on Web3 developers. Attackers pose as AI platform providers and trick developers into downloading tools laced with Fickle Stealer — malware designed to snatch crypto wallet info and developer credentials. Web3 builders, stay skeptical of unsolicited AI downloads.

🪓 Malware Injected into npm Packages via Phished Maintainer Tokens

In a fresh supply chain attack, six npm packages were polluted with malware after package maintainers fell for a phishing scheme. Attackers stole access tokens, injected malicious code, and exposed thousands of projects to risk. Developers relying on npm should verify package authorship and consider using safety-focused mirrors.

🛡️ CrushFTP Vulnerability Lets Intruders Take Admin Control

The file transfer solution CrushFTP has a critical vulnerability (CVE-2025-54309) that’s under active exploitation. Older versions before July 1 are most at risk, allowing attackers to gain full admin access. If you're running CrushFTP, patch ASAP or isolate the host from sensitive internal systems.

Want to stay ready for anything? From data recovery to bootable OS installs, our Ultimate USBs have your back. Check out our tools today.