Do Son Apache NuttX patches a moderate Use After Free (CVE-2025-48769) and a DoS flaw in its filesystem. Network-exposed devices must upgrade to v12.11.0.
Do Son
Do Son is the Founder and Editor of Daily CyberSecurity. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.
Kaspersky unmasks HoneyMyte's 2025 campaign, using the ProjectConfiguration.sys kernel rootkit to deploy ToneShell backdoors with elite stealth.
CISA issues a 9.8 severity alert for WHILL wheelchairs! CVE-2025-14346 lets attackers hijack controls via Bluetooth. Update your firmware now.
Apple enters 2026 with $130B in cash and a new AI chief. While rivals burn billions, Apple is betting on Gemini and its Liquid Glass UI to win.
F-Droid ends its server crisis with a hardware upgrade, just as Google prepares a controversial mandatory developer verification mandate for 2026.
ByteDance targets a $14B NVIDIA spend for 2026 while moving its 1,000-person chip team to Singapore's Picoheart to navigate US export curbs.
SoftBank completes a historic $41B investment in OpenAI, securing 11% ownership. Masayoshi Son bets the future on AGI after liquidating his NVIDIA stake.
Trust Wallet hit by an $8.5M heist after Shai-Hulud hackers poisoned the NPM supply chain. Binance is fully compensating affected version 2.68 users.
Apache StreamPipes patches CVE-2025-47411, a logic flaw allowing users to manipulate JWT tokens and hijack admin accounts. Update to v0.98.0 now!
CloudSEK uncovers the RondoDoX botnet's expansion into enterprise Next.js apps via the React2Shell exploit, alongside global IoT compromises.
Two US cybersecurity pros, Ryan Goldberg and Kevin Martin, plead guilty to moonlighting as ALPHV/BlackCat affiliates, extorting $1.2M from victims.
Meta acquires Manus, the AI agent startup that hit $100M in revenue in 8 months. Zuckerberg is moving from chatbots to autonomous "digital employees."
Bixby is back: Samsung’s One UI 8.5 beta reveals a deep Perplexity AI integration, bringing context-aware reasoning to the Galaxy S26 and beyond.
Hackers bribed Ubisoft outsourced staff for backend access, leading to a $339T currency exploit and a massive source code leak. Is outsourcing to blame?
Hyderabad police arrest another ex-Coinbase agent for selling user data. The TaskUs insider breach exposed 70k users and cost Coinbase up to $400 million.
Samsung's 2026 TVs will natively integrate Google Photos and Vision AI, bringing exclusive Memories, AI editing, and video generation to the big screen.
SAIMEMORY, backed by SoftBank, Intel, and now Fujitsu, is developing a low-power HBM successor to end the AI memory shortage and challenge Korean dominance.
From Meta adopting the Steam Deck scheduler to the first Rust CVE, 2025 was the year Linux matured, clashed, and conquered. Read the full year-end wrap.
CISA adds MongoBleed (CVE-2025-14847) to its KEV Catalog after confirming active exploitation. 80,000+ MongoDB servers are at risk. Patch by Jan 19!
SmarterMail hits a 10/10 CVSS severity! CVE-2025-52691 allows unauthenticated RCE via arbitrary file uploads. Update to Build 9413 immediately!
IBM issues a 9.8 critical alert for API Connect! CVE-2025-13915 allows unauthenticated remote access. Update to v10.0.11 or apply iFixes now.
Ubisoft takes Rainbow Six Siege offline after a massive backend breach. Hackers gifted 2 billion credits to players and hijacked the game's ban system.