News

ChatGPT Introduces Automatic Memory Management to Prevent “Memory Full” Errors for Paid Subscribers

• Technology

ChatGPT Introduces Automatic Memory Management to Prevent “Memory Full” Errors for Paid Subscribers

Do Son October 16, 2025 0

The ChatGPT memory feature allows users to define specific preferences, enabling the AI model to retain those...

Read More Read more about ChatGPT Introduces Automatic Memory Management to Prevent “Memory Full” Errors for Paid Subscribers

Critical VSCode Supply Chain Flaw: 550+ Secrets Leaked Via Extensions, Exposing 100K+ Users to Malware

• Data Leak

Critical VSCode Supply Chain Flaw: 550+ Secrets Leaked Via Extensions, Exposing 100K+ Users to Malware

Do Son October 16, 2025 0

Cybersecurity researchers at Wiz Research have uncovered what they describe as a “pattern of secret leakage” affecting...

Read More Read more about Critical VSCode Supply Chain Flaw: 550+ Secrets Leaked Via Extensions, Exposing 100K+ Users to Malware

CISA Emergency Alert: Critical Adobe AEM Flaw (CVE-2025-54253, CVSS 10.0) Under Active Exploitation

• Vulnerability Report

CISA Emergency Alert: Critical Adobe AEM Flaw (CVE-2025-54253, CVSS 10.0) Under Active Exploitation

Do Son October 16, 2025 0

The Cybersecurity and Infrastructure Security Agency (CISA) has added a critical Adobe Experience Manager (AEM) vulnerability to...

Read More Read more about CISA Emergency Alert: Critical Adobe AEM Flaw (CVE-2025-54253, CVSS 10.0) Under Active Exploitation

F5 Networks Breached by Nation-State Actor, BIG-IP Source Code and Undisclosed Vulnerabilities Stolen

• Cyber Security
• Data Leak

F5 Networks Breached by Nation-State Actor, BIG-IP Source Code and Undisclosed Vulnerabilities Stolen

Do Son October 16, 2025 0

F5 Networks has disclosed that a “highly sophisticated nation-state threat actor” infiltrated its internal systems, exfiltrating files...

Read More Read more about F5 Networks Breached by Nation-State Actor, BIG-IP Source Code and Undisclosed Vulnerabilities Stolen

Operation Zero Disco: Critical Cisco SNMP Flaw (CVE-2025-20352) Used to Implant Linux Rootkits on Switches

• Cybercriminals
• Vulnerability Report

Operation Zero Disco: Critical Cisco SNMP Flaw (CVE-2025-20352) Used to Implant Linux Rootkits on Switches

Do Son October 16, 2025 0

Security researchers from Trend Research have uncovered a sophisticated campaign — dubbed “Operation Zero Disco” — in...

Read More Read more about Operation Zero Disco: Critical Cisco SNMP Flaw (CVE-2025-20352) Used to Implant Linux Rootkits on Switches

Critical Samba RCE Flaw CVE-2025-10230 (CVSS 10.0) Allows Unauthenticated Command Injection on AD DCs

• Vulnerability Report

Critical Samba RCE Flaw CVE-2025-10230 (CVSS 10.0) Allows Unauthenticated Command Injection on AD DCs

Do Son October 16, 2025 0

The Samba Team has released an urgent security advisory addressing two vulnerabilities, including a critical command injection...

Read More Read more about Critical Samba RCE Flaw CVE-2025-10230 (CVSS 10.0) Allows Unauthenticated Command Injection on AD DCs

Stealth Stealer: PhantomVAI Loader Uses Steganography in Images to Inject Katz Stealer and Evade Sandboxes

• Malware

Stealth Stealer: PhantomVAI Loader Uses Steganography in Images to Inject Katz Stealer and Evade Sandboxes

Do Son October 16, 2025 0

Researchers from Palo Alto Networks’ Unit 42 have uncovered a multi-stage phishing campaign delivering a new stealthy...

Read More Read more about Stealth Stealer: PhantomVAI Loader Uses Steganography in Images to Inject Katz Stealer and Evade Sandboxes

China’s Jewelbug APT Breaches Russian IT Provider for 5 Months, Using Yandex Cloud and Graph API C2

• Cyber Security

China’s Jewelbug APT Breaches Russian IT Provider for 5 Months, Using Yandex Cloud and Graph API C2

Do Son October 16, 2025 0

A new investigation by The Symantec Threat Hunter Team has revealed that the Chinese APT group “Jewelbug”...

Read More Read more about China’s Jewelbug APT Breaches Russian IT Provider for 5 Months, Using Yandex Cloud and Graph API C2

Critical RCE Flaw CVE-2025-54539 in Apache ActiveMQ NMS AMQP Client Allows Server-Side Code Execution

• Vulnerability Report

Critical RCE Flaw CVE-2025-54539 in Apache ActiveMQ NMS AMQP Client Allows Server-Side Code Execution

Do Son October 16, 2025 0

The Apache Software Foundation has issued a new security advisory addressing a critical vulnerability in Apache ActiveMQ’s...

Read More Read more about Critical RCE Flaw CVE-2025-54539 in Apache ActiveMQ NMS AMQP Client Allows Server-Side Code Execution

Global Interruption: YouTube, X, Steam, and Cloudflare Experience Simultaneous Outages Due to Datacenter Route Failure

• Technology

Global Interruption: YouTube, X, Steam, and Cloudflare Experience Simultaneous Outages Due to Datacenter Route Failure

Do Son October 16, 2025 0

Around 8:00 AM on October 16, 2025, multiple major online services — including YouTube, Netflix, X/Twitter, Steam,...

Read More Read more about Global Interruption: YouTube, X, Steam, and Cloudflare Experience Simultaneous Outages Due to Datacenter Route Failure

Mysterious Elephant APT Campaign Targets South Asian Diplomacy, Steals WhatsApp Data with New MemLoader Backdoor

• Cyber Security

Mysterious Elephant APT Campaign Targets South Asian Diplomacy, Steals WhatsApp Data with New MemLoader Backdoor

Do Son October 16, 2025 0

Researchers at Kaspersky’s Global Research and Analysis Team (GReAT) have published a detailed report on a newly...

Read More Read more about Mysterious Elephant APT Campaign Targets South Asian Diplomacy, Steals WhatsApp Data with New MemLoader Backdoor

China-Backed Flax Typhoon APT Maintained Year-Long Access by Turning ArcGIS SOE into Web Shell Backdoor

• Cyber Security

China-Backed Flax Typhoon APT Maintained Year-Long Access by Turning ArcGIS SOE into Web Shell Backdoor

Do Son October 16, 2025 0

A newly released report from ReliaQuest reveals how the China-backed advanced persistent threat (APT) group “Flax Typhoon”...

Read More Read more about China-Backed Flax Typhoon APT Maintained Year-Long Access by Turning ArcGIS SOE into Web Shell Backdoor

Samsung Sets Oct 21 Event to Unveil “Project Moohan,” Its Android XR Headset Rival to Vision Pro

• Technology

Samsung Sets Oct 21 Event to Unveil “Project Moohan,” Its Android XR Headset Rival to Vision Pro

Do Son October 15, 2025 0

Samsung has announced that it will host a new product unveiling event titled “Worlds Wide Open” on...

Read More Read more about Samsung Sets Oct 21 Event to Unveil “Project Moohan,” Its Android XR Headset Rival to Vision Pro

Critical Siemens Flaw CVE-2025-40771 (CVSS 9.8) Allows Unauthenticated Remote Access to SIMATIC CP Config

• Vulnerability Report

Critical Siemens Flaw CVE-2025-40771 (CVSS 9.8) Allows Unauthenticated Remote Access to SIMATIC CP Config

Do Son October 15, 2025 0

Siemens has released a critical security update for its SIMATIC ET 200SP communication processors, addressing an authentication...

Read More Read more about Critical Siemens Flaw CVE-2025-40771 (CVSS 9.8) Allows Unauthenticated Remote Access to SIMATIC CP Config

Apple SVP Joswiak Teases “Five M’s”: M5 MacBook Pro, iPad Pro, and Vision Pro Launch Expected This Week

• Technology

Apple SVP Joswiak Teases “Five M’s”: M5 MacBook Pro, iPad Pro, and Vision Pro Launch Expected This Week

Do Son October 15, 2025 0

Apple’s Senior Vice President of Worldwide Marketing, Greg Joswiak, recently hinted at the arrival of a new...

Read More Read more about Apple SVP Joswiak Teases “Five M’s”: M5 MacBook Pro, iPad Pro, and Vision Pro Launch Expected This Week

Google Plans EU Search Overhaul to Avoid DMA Fines, Will Display Rivals “Equally” to Google Flights/Hotels

• Technology

Google Plans EU Search Overhaul to Avoid DMA Fines, Will Display Rivals “Equally” to Google Flights/Hotels

Do Son October 15, 2025 0

In an effort to avoid multibillion-dollar fines for violating the EU Digital Markets Act (DMA), Google is...

Read More Read more about Google Plans EU Search Overhaul to Avoid DMA Fines, Will Display Rivals “Equally” to Google Flights/Hotels

OpenAI Forms AI Well-Being Council to Address Mental Health Risks of Future Models

• Technology

OpenAI Forms AI Well-Being Council to Address Mental Health Risks of Future Models

Do Son October 15, 2025 0

As artificial intelligence continues its rapid expansion, OpenAI has announced the formation of a new advisory body...

Read More Read more about OpenAI Forms AI Well-Being Council to Address Mental Health Risks of Future Models

Critical Rockwell NAT Router Flaw (CVE-2025-7328, CVSS 10.0) Allows Unauthenticated Admin Takeover

• Vulnerability Report

Critical Rockwell NAT Router Flaw (CVE-2025-7328, CVSS 10.0) Allows Unauthenticated Admin Takeover

Do Son October 15, 2025 0

Rockwell Automation has published a new security advisory warning customers about three vulnerabilities affecting its 1783-NATR Network...

Read More Read more about Critical Rockwell NAT Router Flaw (CVE-2025-7328, CVSS 10.0) Allows Unauthenticated Admin Takeover

Critical RCE Flaws CVE-2025-48983 & CVE-2025-48984 (CVSS 9.9) Found in Veeam Backup & Replication

• Vulnerability Report

Critical RCE Flaws CVE-2025-48983 & CVE-2025-48984 (CVSS 9.9) Found in Veeam Backup & Replication

Do Son October 15, 2025 0

Veeam Software has released patches addressing three newly disclosed vulnerabilities, including two critical Remote Code Execution (RCE)...

Read More Read more about Critical RCE Flaws CVE-2025-48983 & CVE-2025-48984 (CVSS 9.9) Found in Veeam Backup & Replication

DOJ Files Record $15 Billion Bitcoin Seizure Against Prince Group Chairman Over Pig Butchering Scams

• Cybercriminals

DOJ Files Record $15 Billion Bitcoin Seizure Against Prince Group Chairman Over Pig Butchering Scams

Do Son October 15, 2025 0

The U.S. Department of Justice (DOJ) has unsealed an indictment against Chen Zhi, also known as Vincent,...

Read More Read more about DOJ Files Record $15 Billion Bitcoin Seizure Against Prince Group Chairman Over Pig Butchering Scams