An investigation finds Cryptomus, registered in Vancouver, is a payment processor for dozens of Russian crypto exchanges and sites hawking cybercrime services (Brian Krebs/Krebs on Security)

Ukrainian authorities arrested the suspected administrator of the Russian-language cybercrime forum XSS.is, which has been a major hub for global cybercrime since 2013, facilitating the sale of malware and stolen data. This operation, supported by French authorities and Europol, culminated after nearly four years of investigation, as announced by the Paris Prosecutor's Office. Want More Context? 🔎

The Trump administration released its AI Action Plan, marking a significant departure from President Biden’s cautious stance on AI risks. The new strategy emphasizes urgency, national sovereignty, and security, aiming to enhance competitiveness against China in the rapidly evolving AI landscape. Want More Context? 🔎

Going Public Stage at TechCrunch Disrupt 2025 We recently launched the Going Public Stage at TechCrunch Disrupt 2025, designed to support founders from early traction to IPO. Today, we are thrilled to announce new additions to the agenda, featuring insights from notable speakers, including Eric . Want More Context? 🔎

Google has launched OSS Rebuild, a new initiative aimed at enhancing the security of open-source package ecosystems to prevent software supply chain attacks. Matthew Suozzo from Google Open Source Security stated that this initiative provides security teams with essential data to mitigate risks without adding extra burden on upstream maintainers. Want More Context? 🔎

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has included two vulnerabilities in SysAid IT support software in its Known Exploited Vulnerabilities (KEV) catalog due to evidence of active exploitation. Notably, CVE-2025-2775, which has a CVSS score of 9.3, relates to an improper restriction of XML external entity (XXE) reference vulnerability. Want More Context? 🔎

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two Microsoft SharePoint vulnerabilities, CVE-2025-49704 and CVE-2025-49706, to its Known Exploited Vulnerabilities (KEV) catalog due to active exploitation as of July 22, 2025. Federal Civilian Executive Branch (FCEB) agencies must remediate these vulnerabilities by July 23, 2025. Want More Context? 🔎