Cybersecurity Weekly Roundup: July 21-27, 2025

TL;DR

This week’s cybersecurity highlights include Steam games being exploited for malware delivery, a new phishing campaign targeting Instagram users, and debates around age verification for child protection versus privacy risks. Additionally, concerns about iPhone users’ online safety, the launch of Malwarebytes Trusted Advisor, and vulnerabilities in AI-generated image watermarks were discussed. Proton introduced Lumo, a privacy-focused AI chatbot, while a controversial startup was found selling personal data stolen by malware. An AI voice scam involving a fake car crash victim and disputes over Ring camera hacks were also covered.

Cybersecurity Highlights: July 21-27, 2025

Welcome to our weekly cybersecurity roundup, where we summarize the key events and developments from July 21 to July 27, 2025. Stay informed about the latest threats, trends, and innovations in the world of cybersecurity.

Malware Threats and Exploits

Steam Games Exploited for Malware Delivery

Steam, a popular gaming platform, has once again been exploited to deliver malware. Users are advised to be cautious when downloading games and updates from unverified sources¹.

Instagram Users Targeted in Novel Phishing Campaign

Instagram users are being targeted in a sophisticated phishing campaign. This new threat aims to steal user credentials and personal information, highlighting the importance of vigilance and strong password practices².

Age Verification: Child Protection or Privacy Risk?

The debate around age verification for online services continues, with discussions on whether it enhances child protection or poses a significant privacy risk. Stakeholders are exploring the balance between safety and data privacy³.

iPhone vs. Android: iPhone Users More Reckless Online?

A recent study suggests that iPhone users are more reckless and less protected online compared to Android users. This finding underscores the need for improved cybersecurity awareness and practices among iPhone users⁴.

Innovations and Product Updates

Malwarebytes Trusted Advisor Launched

Malwarebytes has introduced its Trusted Advisor, a smarter and more sophisticated cybersecurity personal assistant. This new tool aims to provide users with enhanced protection and guidance⁵.

AI-Generated Image Watermarks Easily Removed

Researchers have discovered that AI-generated image watermarks can be easily removed, raising concerns about the reliability of digital watermarking techniques⁶.

Proton Launches Lumo, a Privacy-Focused AI Chatbot

Proton has launched Lumo, a privacy-focused AI chatbot designed to offer secure communication and data protection. This innovation marks a significant step forward in integrating AI with privacy⁷.

Data Breaches and Privacy Concerns

Startup Sells Personal Data Stolen by Malware

A controversial startup has been found to sell personal data stolen by malware to other companies. This practice raises serious ethical and legal concerns about data protection and privacy⁸.

AI Voice Scam Involving Fake Car Crash Victim

An AI voice scam involving a fake car crash victim has been reported. The scammer impersonated a victim calling for help and bail money, highlighting the growing threat of AI-driven voice manipulation⁹.

Ring Cameras Hacked: Amazon Disputes User Claims

Users have reported hacks on their Ring cameras, but Amazon has denied these claims. The discrepancy between user experiences and the company’s statement raises questions about the security of smart home devices¹⁰.

ThreatDown Blog Highlights

ThreatDown Email × EDR—A Force Multiplier in Protection

ThreatDown has highlighted the importance of integrating email security with EDR (Endpoint Detection and Response) to enhance protection against cyber threats¹¹.

Conclusion

The week of July 21-27, 2025, saw a range of cybersecurity developments, from malware threats and phishing campaigns to innovations in AI and privacy-focused tools. As the cyber threat landscape continues to evolve, staying informed and proactive is crucial for safeguarding digital security.

Stay safe and stay informed!

Additional Resources

For further insights, check:

• Malwarebytes Blog
• ThreatDown Blog

References

1. (July 21, 2025). “Steam games abused to deliver malware once again”. Malwarebytes. Retrieved July 28, 2025. ↩︎

2. (July 22, 2025). “Watch out: Instagram users targeted in novel phishing campaign”. Malwarebytes. Retrieved July 28, 2025. ↩︎

3. (July 23, 2025). “Age verification: Child protection or privacy risk?”. Malwarebytes. Retrieved July 28, 2025. ↩︎

4. (July 24, 2025). “iPhone vs. Android: iPhone users more reckless, less protected online”. Malwarebytes. Retrieved July 28, 2025. ↩︎

5. (July 25, 2025). “Introducing the smarter, more sophisticated Malwarebytes Trusted Advisor, your cybersecurity personal assistant”. Malwarebytes. Retrieved July 28, 2025. ↩︎

6. (July 26, 2025). “AI-generated image watermarks can be easily removed, say researchers”. Malwarebytes. Retrieved July 28, 2025. ↩︎

7. (July 27, 2025). “Proton launches Lumo, a privacy-focused AI chatbot”. Malwarebytes. Retrieved July 28, 2025. ↩︎

8. (July 28, 2025). “Startup takes personal data stolen by malware and sells it on to other companies”. Malwarebytes. Retrieved July 28, 2025. ↩︎

9. (July 29, 2025). “‘Car crash victim’ calls mother for help and $15K bail money. But it’s an AI voice scam”. Malwarebytes. Retrieved July 28, 2025. ↩︎

10. (July 30, 2025). ““Ring cameras hacked”? Amazon says no, users not so sure”. Malwarebytes. Retrieved July 28, 2025. ↩︎

11. (July 31, 2025). “ThreatDown Email × EDR—a force multiplier in protection”. ThreatDown. Retrieved July 28, 2025. ↩︎