---
title: "Microsoft Alerts Millions, War Expands Globally, Salt Typhoon Surge, Cybersecurity News [January 06, 2025] | DuoCircle"
description: "Microsoft Alerts Millions, War Expands Globally, Salt Typhoon Surge, Cybersecurity News [January 06."
image: "https://www.duocircle.com/images/og-default.png"
canonical: "https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-3-of-2025/"
---

Quick Answer

Five items. Microsoft confirmed that Windows 10 reaches end-of-support on October 14, 2025; roughly a million users on systems lacking TPM 2.0 will need new hardware to move to Windows 11\. The Russia-Ukraine cyber dimension is widening, with attacks now hitting NATO logistics, telecoms, and aid organizations across multiple countries. The Salt Typhoon Chinese-linked espionage campaign expanded to nine U.S. telecom carriers, including AT&T, Verizon, T-Mobile, Lumen, and Charter. The U.S. Cyber Trust Mark, modeled on Energy Star, will start labeling consumer IoT devices that meet NIST security baselines. And the post covers practical signs a smartphone has been compromised, unexpected battery drain, unknown apps, ad pop-ups, and how to triage with a factory reset.

Microsoft Alerts Millions, War Expands Globally, Salt Typhoon Surge, Cybersecurity News \[January 06, 2025\]

Your browser does not support the audio element.

[ Download episode](https://media.mailhop.org/duocircle/images/2025/01/Microsoft-Alerts-Millions-War-Expands-Globally-Salt-Typhoon-Surge-Cybersecurity-News-January-06-2025.mp3) 

Share 

[ ](https://www.linkedin.com/sharing/share-offsite/?url=undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-3-of-2025%2F "Share on LinkedIn") [ ](https://twitter.com/intent/tweet?text=Microsoft%20Alerts%20Millions%2C%20War%20Expands%20Globally%2C%20Salt%20Typhoon%20Surge%2C%20Cybersecurity%20News%20%5BJanuary%2006%2C%202025%5D&url=undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-3-of-2025%2F "Share on X/Twitter") [ ](https://www.facebook.com/sharer/sharer.php?u=undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-3-of-2025%2F "Share on Facebook") [ ](https://reddit.com/submit?url=undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-3-of-2025%2F&title=Microsoft%20Alerts%20Millions%2C%20War%20Expands%20Globally%2C%20Salt%20Typhoon%20Surge%2C%20Cybersecurity%20News%20%5BJanuary%2006%2C%202025%5D "Share on Reddit") [ ](mailto:?subject=Microsoft%20Alerts%20Millions%2C%20War%20Expands%20Globally%2C%20Salt%20Typhoon%20Surge%2C%20Cybersecurity%20News%20%5BJanuary%2006%2C%202025%5D&body=Check out this article: undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-3-of-2025%2F "Share via Email") 

![cybersecurity news](https://media.mailhop.org/duocircle/images/2025/01/spf-record-checker-5.jpg) 

Ensuring proper cybersecurity is at the top of every organization’s agenda this year. That explains why Microsoft cautions its Windows 10 users and asks them to upgrade their PC’s OS before the **14 October 2025** deadline. However, even the most robust [cybersecurity](/) strategies might seem inadequate, especially as three more telecoms become victims of the Salt Typhoon.

The matter becomes more serious because nations have resorted to [cyber warfare](https://www.imperva.com/learn/application-security/cyber-warfare/) rather than firing guns and bullets. This **week’s section** includes a news report on a new cybersecurity rating like the Energy Star rating for home appliances. Finally, we round off by discussing how to know if your smartphone is hacked and the steps to take to prevent such cyber-attacks.

## Microsoft Warns, A Million Windows Users Will Need A New PC

Microsoft has named the new year 2025 as “[The Year of the Windows 11 PC Refresh](https://www.forbes.com/sites/zakdoffman/2025/01/06/microsoft-warns-400-million-windows-users-you-need-a-new-pc-in-2025/).” It has already stated that it will stop supporting [computers running on Windows 10.](https://www.microsoft.com/en-us/windows/end-of-support?utm%5Fsource=chatgpt.com&r=1) While the **14 October 2025** deadline is still ten months away, Microsoft has warned Windows users that they are staring at a “dangerous security fiasco.” _The latest Windows 11 PCs are the most secure personal computers available today because of the default security features that can thwart the most sophisticated cyber-attacks_.

On the one hand, Microsoft has confirmed that it will withdraw support for Windows 10\. However, the same update also offers a [$30 12-month support lifeline](https://www.theverge.com/2024/10/31/24284398/microsoft-windows-10-extended-security-updates-consumer-pricing?utm%5Fsource=chatgpt.com). So, the focus is on upgrading PCs. Present estimates show that nearly 850 million PCs globally run on Windows 10\. While it can be practically impossible for each user to purchase a new Windows 11-enabled PC, they can surely upgrade to the Windows 11 OS on their existing PCs. So, the one technology that people should refresh in the **new year is their PCs**. The earlier they do, the better it is.

[![malicious intrusion attempt](https://media.mailhop.org/duocircle/images/2025/01/spf-record-tester-8744.jpg)](https://media.mailhop.org/duocircle/images/2025/01/spf-record-tester-8744.jpg)

## The Alleged Russia-Ukraine War Is Transcending Into New Territories

Warfare tactics have changed globally, as countries can destroy enemy nations without firing a bullet. The malicious hackers breached an international network last week and cleaned out some crucial systems and documents, allegedly stealing sensitive data. The breach was [announced](https://t.me/UCAgroup/38) on the **social media platform**, where the target organization informed its customers, that its [networks had been destroyed](https://x.com/netblocks/status/1876777724829630746) by malicious [threat actors](/email-security/what-threat-actor-can-do-with-your-emails-without-password/) having ill intent. The hackers shared vital information, such as screenshots of the breached systems and infrastructure, including [PII (Personally Identifiable Information](https://www.investopedia.com/terms/p/personally-identifiable-information-pii.asp)), showcasing evidence of their [malicious intrusion attempt](https://thehackernews.com/2024/11/us-telecom-giant-t-mobile-detects.html), allegedly turning all significant network services down.

_The organization has acknowledged the attack and stated that its first priority is to restore normalcy_. They have not stipulated any specific timeline for restoring operations. This attack is not the first and will certainly not be the last. Some international actors hacked the [ransomware gang’s](https://www.techtarget.com/searchsecurity/news/366617781/December-ransomware-attacks-slam-healthcare-public-services) servers in October 2023 and wiped all data, including **cryptocurrency hot wallets**. These attacks prove that warfare is not as simple as it was earlier; now, it involves the use of various complex architectures and solutions, indeed closely imitating the use of weapons. Adding [ransomware protection](/resources/locky-ransomware) is crucial in mitigating these advanced threats and ensuring greater security moving forward.

## The Salt Typhoon Victims List Is Growing Exponentially

Last week, we reported that nine US telecommunication firms fell victim to a [cyberespionage campaign](https://industrialcyber.co/cisa/us-continues-investigation-into-chinese-cyber-espionage-campaign-as-volt-typhoon-resurfaces/), Salt Typhoon. The list is growing as [three more telecoms](https://www.sans.org/newsletters/newsbites/xxvii-2/) have been added to the victim list. The latest additions are Windstream, Charter Communications, and Consolidated Communications. The [Salt Typhoon](https://www.techmonitor.ai/technology/cybersecurity/salt-typhoon-targets-more-us-telecoms-widening-attack-campaign?utm%5Fsource=chatgpt.com) cyber threat group is linked to state actors. The **US CISA believes** that this group has ties to the Chinese Government. This threat has been growing since mid-2024\. _Malicious actors hack into some systems by exploiting known and unpatched vulnerabilities in edge devices_.

President-Elect Donald Trump has already taken cognizance of these attacks and promised to punish the perpetrators of the crime, whoever they are. **White House Deputy National Security** Advisor for cyber technologies, Anne Neuberger, has stated that the scope and scale of these attacks remain unknown because the intruders kept erasing logs. Besides, the targeted companies weren’t keeping adequate logs. The continuing attacks show that even the most robust cybersecurity strategies constantly need improvement. 

[![Malicious Actors hack](https://media.mailhop.org/duocircle/images/2025/01/anti-phishing-software.jpg)](https://media.mailhop.org/duocircle/images/2025/01/anti-phishing-software.jpg)

## c Ratings Similar To Energy Star Ratings On Internet-Connected Devices

Everyone knows about Energy Star ratings on home appliances. These ratings enable consumers to know their appliances’ energy efficiency. However, with most home appliances connected to the internet today, consumers must know if they are safe from cyber threats. In this regard, the White House has introduced the “[Cyber Trust Mark](https://www.reuters.com/technology/cybersecurity/internet-connected-devices-can-now-have-label-that-rates-their-security-2025-01-07/),” a new label that allows consumers to see how their **internet-connected devices rate** on cybersecurity criteria. This label is a stylized shield logo with an embedded microchip, which enables consumers to evaluate the security of their smart home product.

Appliance manufacturing companies must satisfy the established cybersecurity criteria and comply with testing by accredited labs. _The home appliances that qualify for this cybersecurity label include security cameras, garage doors, voice-activated assistants, and fitness trackers_. The [White House](https://web.archive.org/web/20250120112627/https://www.whitehouse.gov/briefing-room/statements-releases/2025/01/07/white-house-launches-u-s-cyber-trust-mark-providing-american-consumers-an-easy-label-to-see-if-connected-devices-are-cybersecure/) will issue an executive order shortly to restrict the US government from buying Cyber Trust Mark products only from 2027\. The program will gradually extend to other **domestic and commercial consumers**. 

## Know If Your Smartphone Has Been Hacked And Fix It

The days when phones were exclusively used for communication are long gone. _Today, individuals and organizations breathe through their smartphones_. They have become our **most trusted digital companions**, so securing them is entirely our responsibility. Let’s learn [how to know](https://www.forbes.com/sites/alexvakulov/2025/01/06/how-to-know-if-your-phone-is-hacked-and-how-to-fix-it/) if your smartphone is hacked and how to fix the issue. Look for these six giveaways.

- **Battery depleting quicker than usual**.
- Sudden surge in data usage
- Notice apps you have not installed on the phone
- Receiving [unsolicited MFA codes](https://blogs.chapman.edu/information-systems/2024/01/29/unexpected-mfa-codes-and-what-to-do-about-them/)
- Sluggish performance and unexplained crashes
- Unexplained switching on your phone camera

Here are the immediate steps you must take if you suspect your [smartphone has been hacked.](https://www.mcafee.com/blogs/mobile-security/help-i-think-my-phones-been-hacked/)

- Disable all internet access, including Bluetooth
- Remove the [malicious software](https://www.infosecurity-magazine.com/news/malware-hunt-software/) using a trusted antivirus.
- Review all installed apps and uninstall suspicious or unfamiliar ones.
- **Update all your passwords** and ensure they are strong and unique.
- Immediately enable MFA
- Inform your mobile service provider of the suspected hack
- Back up your essential data and perform a factory reset.

## Topics

cyber securityNewsSecurityUpdates 

![Brad Slavin](https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg) 

Brad Slavin 

General Manager

General Manager at DuoCircle. Product strategy and commercial lead across the email security portfolio.

## Secure your email infrastructure

Protect, authenticate, and deliver. Contact our team to find the right solution.

[Contact Sales](/contact/) [Explore Products](/products/) 

Share this article

[ ](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-3-of-2025%2F) [ ](https://twitter.com/intent/tweet?text=Microsoft%20Alerts%20Millions%2C%20War%20Expands%20Globally%2C%20Salt%20Typhoon%20Surge%2C%20Cybersecurity%20News%20%5BJanuary%2006%2C%202025%5D&url=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-3-of-2025%2F) [ ](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-3-of-2025%2F) Copy 

Related Articles

- [ ![cybersecurity news](https://media.mailhop.org/duocircle/images/2025/01/spf-permerror.jpg)  Microsoft Cybersecurity Transparency, Chrome Update Required, Google Calendar Phishing, Cybersecurity News \[December 23, 2024\] News ](/blog/announcements/cyber-security-news-update-week-1-of-2025/)
- [ ![cybersecurity news](https://media.mailhop.org/duocircle/images/2026/01/email-smtp-service-7865.jpg)  Trust Wallet Hack, Browser Extension Espionage, Unleash Protocol Loss, Cybersecurity News \[December 29, 2025\] News ](/blog/announcements/cyber-security-news-update-week-1-of-2026/)
- [ ![cybersecurity news](https://media.mailhop.org/duocircle/images/2025/03/phishing-protection-5643.jpg)  Bybit’s $1.5B Loss, FatalRAT Hits APAC, GitVenom Targets Wallets,, Cybersecurity News \[February 24, 2025\] News ](/blog/announcements/cyber-security-news-update-week-10-of-2025/)
- [ ![cybersecurity news](https://media.mailhop.org/duocircle/images/2026/03/email-smtp-service-6670.jpg)  LastPass Users Phished, Amazon Down US, UK Cybersecurity Boost, Cybersecurity News \[March 02, 2026\] News ](/blog/announcements/cyber-security-news-update-week-10-of-2026/)

## Related Articles

[  News 6m  Microsoft Cybersecurity Transparency, Chrome Update Required, Google Calendar Phishing, Cybersecurity News \[December 23, 2024\]  Jan 2, 2025 ](/blog/announcements/cyber-security-news-update-week-1-of-2025/)[  News 6m  Trust Wallet Hack, Browser Extension Espionage, Unleash Protocol Loss, Cybersecurity News \[December 29, 2025\]  Jan 5, 2026 ](/blog/announcements/cyber-security-news-update-week-1-of-2026/)[  News 7m  Bybit’s $1.5B Loss, FatalRAT Hits APAC, GitVenom Targets Wallets,, Cybersecurity News \[February 24, 2025\]  Mar 3, 2025 ](/blog/announcements/cyber-security-news-update-week-10-of-2025/)[  News 6m  LastPass Users Phished, Amazon Down US, UK Cybersecurity Boost, Cybersecurity News \[March 02, 2026\]  Mar 9, 2026 ](/blog/announcements/cyber-security-news-update-week-10-of-2026/)

```json
{"@context":"https://schema.org","@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}],"sameAs":["https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.facebook.com/duocirclellc","https://www.g2.com/products/phish-protection-by-duocircle/reviews","https://github.com/duocircle","https://www.crunchbase.com/organization/duocircle-llc"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://support.duocircle.com"},"knowsAbout":["Email Security","Email Authentication","SPF","DKIM","DMARC","Phishing Protection","Spam Filtering","SMTP Relay","Email Deliverability","Email Forwarding"]}
```

```json
{"@context":"https://schema.org","@type":"WebSite","name":"DuoCircle LLC","url":"https://www.duocircle.com","description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]}}
```

```json
[{"@context":"https://schema.org","@type":"BlogPosting","headline":"Microsoft Alerts Millions, War Expands Globally, Salt Typhoon Surge, Cybersecurity News [January 06, 2025]","description":"Microsoft Alerts Millions, War Expands Globally, Salt Typhoon Surge, Cybersecurity News [January 06.","url":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-3-of-2025/","datePublished":"2025-01-13T19:35:35.000Z","dateModified":"2025-04-21T12:17:37.000Z","dateCreated":"2025-01-13T19:35:35.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://www.duocircle.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin runs DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. His focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-3-of-2025/"},"articleSection":"announcements","keywords":"cyber security, News, Security, Updates","wordCount":1050,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/images/2025/01/spf-record-checker-5.jpg","caption":"cybersecurity news","width":900,"height":506},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}},{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":2,"name":"News"},{"@type":"ListItem","position":3,"name":"Microsoft Alerts Millions, War Expands Globally, Salt Typhoon Surge, Cybersecurity News [January 06, 2025]","item":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-3-of-2025/"}]}]
```

```json
{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://www.duocircle.com/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":3,"name":"News","item":"https://www.duocircle.comundefined"},{"@type":"ListItem","position":4,"name":"Microsoft Alerts Millions, War Expands Globally, Salt Typhoon Surge, Cybersecurity News [January 06, 2025]","item":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-3-of-2025/"}]}
```

```json
{"@context":"https://schema.org","@type":"BlogPosting","headline":"Microsoft Alerts Millions, War Expands Globally, Salt Typhoon Surge, Cybersecurity News [January 06, 2025]","description":"Microsoft Alerts Millions, War Expands Globally, Salt Typhoon Surge, Cybersecurity News [January 06.","url":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-3-of-2025/","datePublished":"2025-01-13T19:35:35.000Z","dateModified":"2025-04-21T12:17:37.000Z","dateCreated":"2025-01-13T19:35:35.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://www.duocircle.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin runs DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. His focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-3-of-2025/"},"articleSection":"announcements","keywords":"cyber security, News, Security, Updates","wordCount":1050,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/images/2025/01/spf-record-checker-5.jpg","caption":"cybersecurity news","width":900,"height":506},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}}
```