Do Son Microsoft confirms it surrenders BitLocker keys to the FBI in Jan 2026. Discover why your Windows 11 cloud-stored key is a major privacy liability.
Do Son
Do Son is the Founder and Editor of Daily CyberSecurity. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.
Apple debuts Gemini-powered Siri in Jan 2026! Discover how iOS 26.4 brings on-screen awareness and a 1.2T parameter AI model to your iPhone.
Public PoC released for critical Oracle E-Business Suite RCE (CVE-2025-61882). Ransomware gangs are actively exploiting this CVSS 9.8 flaw. Patch now.
Rufus flaw CVE-2026-23988 allows local users to gain Admin rights via a race condition. Update to version 4.12 immediately to secure your system.
"SyncFuture" spies on Indian users via fake Income Tax emails. This advanced campaign bypasses antivirus & installs Chinese IT tools for total surveillance.
DPRK spies weaponize Visual Studio Code tunnels to bypass security. Darktrace reveals a campaign targeting South Korea with government decoys.
KONNI APT targets APAC developers with AI-generated malware disguised as crypto projects. The "polished" backdoor steals wallets & credentials.
Unit 42 reveals "living" phishing pages built by GenAI on the fly. These polymorphic attacks evade detection by generating unique code for every victim.
New Osiris ransomware hits Southeast Asia, linking to Inc & Medusa groups. It uses BYOVD tactics to disable defenses. Unrelated to the 2016 variant.
Critical RealHomes CRM flaw CVE-2025-67968 (CVSS 9.9) allows any logged-in user to upload malicious files. Update to v1.0.1 immediately to prevent takeover.
Apache Karaf Decanter flaw CVE-2026-24656 allows unauthenticated attackers to crash the log collector via deserialization. Update to v2.12.0 immediately.
Abandoned Python PLY library contains a critical RCE flaw (CVE-2025-56005) via an undocumented "picklefile" parameter. No patch is expected.
Google Photos debuts Me Meme in Jan 2026! Use generative AI to put your face in iconic meme templates with one tap. Now rolling out to U.S. users.
Solos Technology sues Meta for billions in Jan 2026, alleging Ray-Ban Meta glasses use stolen patents. A sales ban could be a huge blow to Reality Labs.
TikTok avoids a U.S. ban in Jan 2026 by forming TikTok USDS Joint Venture LLC. ByteDance cedes 80.1% control to Oracle, Silver Lake, and MGX.
Apple accuses the EU of "political delay tactics" in Jan 2026 after Setapp Mobile shuts down. Discover why the Core Technology Fee is causing a crisis.
Apache Hadoop HDFS native client flaw CVE-2025-27821 allows out-of-bounds writes. Update to v3.4.2 to prevent crashes and ensure data stability.
CISA adds VMware vCenter flaw CVE-2024-37079 (CVSS 9.8) to KEV catalog. Hackers are actively exploiting this RCE bug. Patch immediately.
Okta reveals new vishing kits that "drive" victim browsers. These real-time tools sync phone calls with phishing pages to bypass MFA number matching.
Bitwarden updates pricing in Jan 2026: Premium is now $1.65/mo. Discover the new Phishing Blocker, 5GB storage, and loyalty discounts for users.
Linux 7.0 officially drops HIPPI support in Jan 2026. Discover the history of this 800Mbps supercomputing giant and why the kernel is moving on.
A 5-year-old flaw in Linux x86 page fault handling has finally been patched in Kernel 6.19. Discover how engineers fixed this "combinatorial nightmare."