US National Cybersecurity Update for July 21, 2025

07.21.25 11:07 AM By Jonathan Eubanks

In today's fast-evolving threat landscape, staying ahead of cyber risks is crucial for businesses and individuals alike. Here's a quick rundown of the key developments shaking up the US cybersecurity scene:

  • Critical Zero-Day in Microsoft SharePoint (CVE-2025-53770): Actively exploited for remote code execution. Microsoft has patched it—apply updates ASAP! CISA confirms widespread attacks on the government and enterprises.
  • Ransomware Hits Education Hard: There has been a 23% year-over-year spike in attacks on schools and universities. It's time to reinforce those defenses!
  • CrushFTP Vulnerability (CVE-2025-54309): Under active exploitation for unauthorized server access. Patch now if you're using it.
  • Aviation IT Disruptions: Alaska Airlines grounded flights due to outages, amid broader Microsoft-related concerns (link unconfirmed).
  • Emerging Threats: Exploits in NVIDIA drivers, SQLite, and more. Plus, $2.17B in crypto thefts YTD, and AI-fueled attacks on the rise.

On X (formerly Twitter), pros are buzzing about mitigation strategies and phishing tied to these issues. AI's role in defense and offense is a hot topic, with calls for stronger federal-state partnerships.

FBI's ongoing crackdowns on global cybercrime, including ransomware extraditions, show progress—but vigilance is key.

What are your top cybersecurity priorities this week? Share in the comments! Let's connect and discuss how to build resilient systems together. 🔒

#Cybersecurity #InfoSec #ThreatIntel #Ransomware #MicrosoftSecurity #AICyberThreats


Jonathan Eubanks