Cybersecurity Decrypted #43: SharePoint Exploited, Cyberattacks Up 21%, And Lumma Stealer Is Back

Microsoft SharePoint Vulnerabilities Lead To Widespread Exploits

Over 400 organizations globally have been impacted by a vulnerability in on-premises Microsoft SharePoint accounts, reports Axios. Two vulnerabilities are actively being exploited by threat actors: CVE-2025-49706, a spoofing vulnerability, and CVE-2025-49704, a remote code execution vulnerability. Chinese nation-state actors are behind several of the attacks, Microsoft said in a recent blog post. A fix is now available, and customers should immediately look to apply security updates. 

Cyberattacks Up 21% Globally

The average number of weekly cyberattacks surged by 21% in Q2 compared to the same period in 2024, according to cybersecurity researchers at Check Point. The most targeted sectors are education, government, and telecommunications. 

“World Leaks” Breaches Dell Environment, Steals Fake Data

The newly branded World Leaks (formerly Hunters International) extortion gang beached one of Dell’s product demo platforms earlier this month. Dell says that all the data they accessed is either made up for demo purposes, or already publicly available. 

Lumma Stealer Malware Is “Back,” Says Trend Micro

Despite Microsoft and global law enforcement seizing 2,300 malicious domains and disrupting the “Lumma Stealer” infrastructure, the malware has rebounded, says Trend Micro. The malware operators restored functionality using new, obscure domains and new service providers, including some in Russia, to evade detection. 

PoisonSeed Uses Novel Technique To Bypass FIDO Keys

The crypto-hacking group has been leveraging the cross-device sign-in feature available with FIDO keys to trick users into approving authentication requests from fake, malicious login portals. 

HPE Flaw Enables Authentication Bypass And Remote Access

Hardcoded credentials have been found in HPE Networking Instant On Access Points. The vulnerability enables users to bypass normal authentication mechanisms and gain administrative access to the system. The vulnerability is tracked as CVE-2025-37103 and has been rated critical. 

FBI And CISA Issue Advisory For Interlock Group

The ransomware group is targeting critical infrastructure and businesses across North America and Europe in double extortion attacks. 

New UK Legislation Bans Ransomware Payments

The UK government has proposed new legislation that would ban public sector and critical infrastructure organizations from making ransomware payments. The proposal also mandates that victims inform law enforcement of attacks. 

Singapore Accuses China Of Infrastructure Attacks

The Chinese embassy in Singapore has refuted claims that the espionage group behind the attacks was linked to China. 

UK Sanctions Russian State-Backed Hackers

The three APT groups and 18 individuals were sanctioned for their involvement in cyber espionage operations and assassination attempts against Ukraine, the EU, and NATO allies. 

CISO Leo Cunningham On Navigating Cloud Security And AI Challenges

Leo Cunningham, CISO at AI biotech firm Owkin, highlights cloud security’s growing complexity. He emphasizes experimentation, clear communication, and data-driven metrics to balance security with business agility, advocating for robust security metrics to demonstrate value. Read our Q&A here. 

Social Engineering: A New Frontier

Sandy Kronenberg, CEO and Founder of Netarx, discusses the future of social engineering and how organizations need to pivot to detect deepfakes across enterprise email, video, and voice. Listen now. 

How To Safely Enhance Productivity With AI Copilots

Sounil Yu, CTO at Knostic, discusses the how organizations can integrate copilots safely into their workflows to enhance productivity without putting their data—or users—at risk. Listen now.  

• Top RMM Solutions For MSPs
• Top Mobile Device Management (MDM) Solutions
• Top Email Security Gateways
• Top Email Security Solutions For Office 365
• Top Identity And Access Management Solutions
• Top Phishing Protection Solutions
• Top Phishing Simulation And Testing Solutions
• Top Cyber Threat Intelligence Solutions