Here are some interesting updates about cybersecurity threats and new trends.
A recent viral incident at a Coldplay concert, where a couple was caught on a “KissCam,” highlights the diminishing boundaries between public and private life in today’s world of omnipresent cameras and rapid social media sharing. The clip, which circulated widely online, led internet users to quickly identify the couple as the CEO and chief people officer of tech company Astronomer, prompting the CEO’s resignation. This episode sparked debate about business ethics, the consequences of leadership conflicts, and more broadly the expectation of privacy in an age when nearly every public moment can be captured and shared globally.
Experts note that while events like KissCam have long been staples at large venues, technological advances now allow such moments to travel far beyond their original context. Anyone with a smartphone can record and post footage, making privacy in public spaces almost obsolete. The distribution system, social media, amplifies reach and impact, often resulting in viral attention followed by “doxing,” or public identification of those involved. Advances in technology, including AI, have made it easier to track and identify individuals, creating what some describe as a “gigantic surveillance system."
This constant visibility can lead to widespread harassment, sometimes even affecting people not actually involved in the original event. Experts warn that society has not yet caught up with these technological changes in terms of ethics and etiquette, urging individuals to reconsider before sharing content widely. Ultimately, the incident highlights the reality that in today’s digital world, privacy in public is increasingly rare, and viral moments can have major personal and professional consequences.
Source: CTV News
A major new study suggests that children, especially girls, who receive smartphones before age 13 are at higher risk for worse mental health outcomes as young adults. Researchers analyzed responses from over 100,000 people ages 18 to 24 and found that earlier smartphone ownership was linked to more reports of aggression, detachment, suicidal thoughts, and lower self-worth. Girls experienced lower emotional resilience and confidence, while boys reported feeling less calm and empathetic. Key findings include:
Factors such as increased social media use, cyberbullying, poor sleep, and strained family relationships further increase risks. The study recommends limiting smartphone and social media use before age 13, teaching digital literacy, and encouraging open family communication while modeling healthy device use.
Source: ABC News
Louis Vuitton confirmed that customer data was stolen in a cyberattack targeting its UK operation. Hackers accessed names, contact information, and purchase histories but did not obtain financial data like bank details. The company assured customers there is no current evidence of misuse, though it warned of potential phishing or fraud attempts. The breach, reported on July 2, is the third incident affecting LVMH brands within three months, following similar attacks on Louis Vuitton’s Korean business and Christian Dior Couture. Authorities have been informed, and several arrests have been made as part of investigations into broader retail cyberattacks.
Source: The Guardian
Attackers are exploiting a zero-day vulnerability (CVE-2025-53770) in Microsoft SharePoint, a serious issue related to an earlier patched flaw (CVE-2025-49706). This newly exploited weakness allows actors to plant a covert backdoor on on-premises SharePoint Servers and steal cryptographic security keys, granting them full control of the compromised systems. As of late July 2025, there was a period when no patch was available, so Microsoft strongly advised administrators to enable Antimalware Scan Interface (AMSI) integration with Defender AV on all servers to mitigate attacks. If AMSI can’t be enabled, disconnecting SharePoint servers from the internet is another recommended safeguard.
This vulnerability comes from unsafe deserialization of untrusted data and affects SharePoint Server 2016, 2019, and the Subscription Edition; cloud-hosted SharePoint Online is not impacted. Attacks were first observed around July 18, 2025. Instead of typical web shells, attackers deployed a malicious ASPX file whose sole purpose was to extract and leak the SharePoint server’s cryptographic keys, allowing future authenticated requests to be used for further remote code execution.
By July 21, Microsoft had released updates for SharePoint Server 2019 and the Subscription Edition to address the vulnerability. Organizations are urged to check logs for signs of compromise, rotate all secrets that may have been accessed, and closely follow Microsoft’s updated guidance. Security experts stress that a single breach can enable attackers to access connected services and move laterally in a network. Victims include government agencies, universities, energy firms, and an Asian telecom, as attackers have already used this exploit to achieve broad unauthorized access.
Source: Help Net Security