🔴 CYBERSECURITY NEWS HUNTING with @endingwithali

Quick Overview

During a live cybersecurity news hunting session, host Allie and viewers created a July 2025 cybersecurity bingo board featuring predictions like a major US infrastructure cyber attack and a quantum computing breakthrough, while also discussing recent vulnerabilities including Microsoft's direct send email spoofing flaw, the new Citrix Bleed 2, and unpatchable vulnerabilities in Brother printers.

Key Points: Host Allie and viewers collaboratively created a July 2025 cybersecurity bingo board, predicting events such as a 'major US infrastructure cyber attack,' 'quantum computing breakthrough,' and 'Defcon drama.' A novel phishing campaign exploited Microsoft's 'direct send' feature, allowing unauthenticated email spoofing from internal devices like printers, targeting over 70 predominantly US-based organizations since May 2025. New vulnerabilities, dubbed 'Citrix Bleed 2' (CVE 2025 5349 and CVE 2025 5777), affect Citrix NetScaler ADC and Gateway products, enabling attackers to steal tokens and bypass MFA via out-of-bounds memory reads. Brother multifunction printers contain eight vulnerabilities, including CVE 2024 5197, which allows remote unauthenticated attackers to leak serial numbers and generate default passwords, with some flaws requiring manufacturing process changes for full remediation. A Google Chrome API allows browsers to permanently set the global microphone volume without user notification, with no easy way to disable it beyond hidden flags. The bingo board also includes more speculative predictions like 'US accidentally hires a North Korean IT worker' and 'PewDiePie drops new open-source propaganda.'

Context: During a live streaming session titled "Cybersecurity News Hunting," host Allie engages with her audience to create a monthly "bingo board" of cybersecurity predictions, a recurring segment. She then transitions to reviewing recent cybersecurity news, focusing on specific vulnerabilities and exploits that have emerged.

Detailed Analysis