Cybersecurity — May 20, 2025

### Surge in Cyber Threats to U.S. Educational Institutions U.S. schools and universities are experiencing a significant increase in cyber threats, averaging more than 3,000 attacks weekly. This surge, detailed by Check Point Research, highlights the vulnerabilities that educational institutions face as they continue to digitize their infrastructure without adequate cybersecurity measures. This increase is almost triple the number of attacks recorded in early 2024, emphasizing the pressing need for enhanced security protocols. [Read more](https://blog.checkpoint.com/security/from-classrooms-to-code-red-3000-cyber-threats-hit-u-s-schools-and-universities-weekly/) ### UK Legal Aid Agency Data Breach The UK's Legal Aid Agency has confirmed a significant data breach following an April cyberattack. Sensitive information, potentially including criminal records of applicants over the past 15 years, is believed to have been stolen. This breach underscores the persistent threat to governmental agencies and the importance of robust data protections. [Read more](https://www.securityweek.com/uk-legal-aid-agency-finds-data-breach-following-cyberattack/) ### Mozilla's Emergency Firefox Update Mozilla has released crucial security updates to fix two zero-day vulnerabilities in Firefox that were disclosed during the Pwn2Own Berlin competition. These vulnerabilities could allow attackers to execute code remotely, posing significant risks to users who have not yet updated their browsers. [Read more](https://www.securityweek.com.mozilla-fixed-zero-days-demonstrated-at-pwn2own-berlin-2025/) ### RVTools Supply Chain Attack The official site for RVTools was compromised to distribute Bumblebee malware via a trojanized installer. This supply chain attack highlights the growing threat of malware distribution through trusted software utilities, urging organizations to be vigilant about software sources and updates. [Read more](https://www.helpnetsecurity.com/2025/05/19/rvtools-installer-malware/) ### O2 Service Vulnerability Exposing User Locations A vulnerability in O2’s implementation of the IMS standard exposed users' location data when calls were made. Although the issue has been patched, this incident reveals the potential privacy risks associated with telecom infrastructure vulnerabilities. [Read more](https://cybernews.com/security/o2-phone-calls-expose-recipient-location-imei/) ### You May Also Be Interested In... - **New AI Voice Awareness**: AI advancements now allow voice cloning accessible with minimal audio data, raising security concerns. [Read more](https://www.helpnetsecurity.com/2025/05/20/ai-voice-hijacking-threat/) - **Significant Breach in Health Sector**: A data leak at Serviceaide affects 480,000 records at Catholic Health, highlighting vulnerabilities in healthcare data management. [Read more](https://www.securityweek.com/480000-catholic-health-patients-impacted-by-serviceaide-data-leak/) - **Japan Shifts Cyber Defense Policy**: Japan passed new legislation allowing preemptive cyber actions, indicating a significant policy shift. [Read more](https://securityaffairs.com/178056/laws-and-regulations/japan-passed-a-law-allowing-preemptive-offensive-cyber-actions.html)

A clearer view of today.

Your briefing

A clearer view of today.

Your briefing

Make room for a smarter morning.