Cybersecurity — June 8, 2025

### Google Patches Exploited Chrome Zero-Day (CVE-2025-5419) Google has addressed a critical zero-day vulnerability affecting the Chrome browser, actively exploited in the wild. This zero-day flaw, designated CVE-2025-5419, could allow attackers to compromise user systems. Cybersecurity professionals must ensure all systems are promptly updated to the latest Chrome version to mitigate risks. [Read more](https://www.helpnetsecurity.com/2025/06/08/week-in-review-google-fixes-exploited-chrome-zero-day-patch-tuesday-forecast/) ### Largest Recorded Data Leak of Chinese Personal Information Researchers have uncovered an enormous data breach disclosing over 4 billion records tied to Chinese citizens. This is one of the largest data exposures from a single source, involving sensitive information like financial transaction records and data from popular apps like WeChat and Alipay. The breach's implications for privacy and surveillance are profound, with significant impacts expected on consumer and governmental levels. [Read more](https://securityaffairs.com/178744/data-breach/experts-found-4-billion-user-records-online-the-largest-known-leak-of-chinese-personal-data-from-a-single-source.html) ### Supply Chain Attack on NPM Packages In a concerning supply chain attack, 15 popular Gluestack NPM packages, with nearly a million weekly downloads, have been compromised with malicious code that installs a remote access trojan (RAT). The cyber community is urged to review projects for impacted packages and update them promptly to versions free of malicious code to prevent data breaches and system compromises. [Read more](https://www.bleepingcomputer.com/news/security/supply-chain-attack-hits-gluestack-npm-packages-with-960k-weekly-downloads/) ### Trump Reverses Key Biden-Era Cybersecurity Policies The Trump administration has issued an executive order revoking several Biden-era cybersecurity mandates, including those focusing on AI policy and digital ID initiatives. This reversal has significant implications for cybersecurity policy and international relations, especially concerning strategic partners and adversaries like China. [Read more](https://www.forbes.com/sites/emilsayegh/2025/06/07/trump-drops-a-cybersecurity-bombshell-with-biden-era-policy-reversal/) ### Malicious Apps on Google Play Target Crypto Users More than 20 malicious apps on the Google Play Store have been discovered stealing cryptocurrency seed phrases by masquerading as legitimate wallets and exchanges. Users are advised to scrutinize wallet apps and avoid those not verified by trusted sources or experts to secure their digital assets. [Read more](https://hackread.com/malicious-apps-google-play-users-for-seed-phrases/) ### You May Also Be Interested In... - **FBI Issues Ransomware Alert**: Critical advisory as ransomware incidents soar. [Read more](https://www.forbes.com/sites/daveywinder/2025/06/07/fbi-issues-critical-cyberattack-alert---act-now-as-victims-skyrocket/) - **Fresh Malware Targets Ukrainian Infrastructure**: New pro-Russian wiper malware disrupts services. [Read more](https://ciso2ciso.com/fresh-strain-of-pro-russian-wiper-flushes-ukrainian-critical-infrastructure-source-go-theregister-com/) - **Gmail Upgrade Advisory**: Google announces mandatory updates for most Gmail accounts. [Read more](https://www.forbes.com/sites/zakdoffman/2025/06/08/google-confirms-almost-all-gmail-users-must-upgrade-accounts/) - **35,000 Solar Systems at Risk**: Vulnerabilities in solar power systems expose users to cyberattacks. [Read more](https://cybernews.com/security/thousands-solar-power-systems-exposed-and-vulnerable/)

A clearer view of today.

Your briefing

A clearer view of today.

Your briefing

Make room for a smarter morning.