SecurityWeek’s cybersecurity news roundup for July 4, 2025 provides a concise compilation of noteworthy stories.

New research from Semperis suggests more than 10,000 SaaS apps could remain vulnerable to a nOAuth attack variant.

North Korean hackers employ social engineering to trick Zoom Meeting participants into executing system-takeover commands.

The key tool for surviving ransomware, or any attack scenario, is an incident response (IR) plan that is comprehensive, ...

Cloudflare now blocks AI crawlers by default, giving website owners more control over how their content is scraped for AI ...

North Korean hackers are using fake Zoom invites to install ‘NimDoor’ malware — a rare Nim-compiled backdoor targeting macOS ...

A critical vulnerability (CVE-2025-20309) in Cisco's Unified CM and Unified CM SME communication management software could ...

Australian airline Qantas says personal information stolen from systems hosting the service records of 6 million customers.

Many Citrix NetScaler systems are exposed to attacks exploiting the vulnerabilities tracked as CVE-2025-5777 and ...

A vulnerability in the Forminator WordPress plugin allows attackers to delete arbitrary files and take over impacted websites ...

The US government is again warning about potential Iranian cyberattacks as researchers find that hackers’ favorite ICS ...

Forty-one cybersecurity merger and acquisition (M&A) deals were announced in June 2025 and added to SecurityWeek tracker.