In today’s episode of the Cybersecurity Roundup for Friday, June 13, 2025, we explore a turbulent week in the tech world marked by major disruptions and critical vulnerabilities. Cloud service outages hit industry giants including Cloudflare, Google, and Microsoft, revealing the fragility of even the most robust digital infrastructures and highlighting the need for stronger service-level contingency planning. We examine a zero-click exploit in Apple iMessage used to infect journalists’ devices with Paragon spyware, a stark reminder of escalating privacy threats. The episode also covers the Fog ransomware group’s novel tactics, the misuse of expired Discord invites for malware distribution, and a widespread JavaScript injection campaign dubbed JSFireTruck that infected over 269,000 websites. Additional threats include malware posing as trusted software, a smartwatch-based data exfiltration technique named SmartAttack, and critical vulnerabilities in Mitel and Trend Micro products. For professionals and individuals alike, these stories emphasize the evolving sophistication of cyber threats and the urgent need for proactive security measures.

https://healsecurity.com/