Do Son Silver Fox APT targets users with fake LINE installers delivering ValleyRat. New campaign uses rare "PoolParty" injection to evade detection.
Sophisticated phishing abuses Vercel Blob & PDFs to bypass filters. Stolen credentials are exfiltrated via Telegram bots. Learn how to spot this attack.
Critical jsPDF flaws (CVE-2026-24133) allow XSS & DoS via malicious BMPs. Update to v4.1.0 immediately to prevent browser crashes and code injection.
Microsoft warns: Infostealers now target macOS & use WhatsApp worms. "Eternidade" & "Crystal PDF" steal credentials via cross-platform attacks.
F5 warns of NGINX flaw CVE-2026-1642 (CVSS 8.2). MITM attackers can inject data into upstream TLS responses. Update to v1.29.5 immediately.
Anthropic pledges Claude will stay ad-free, mocking rivals with a 2026 Super Bowl spot. Discover their "Agentic AI" plan to monetize without selling your data.
Google teases the Pixel 10a! Pre-orders open Feb 18. Discover the "More in Store" upgrades, including the Tensor G5 chip and flagship-grade AI features.
Intel and SoftBank subsidiary SAIMEMORY join forces to develop Z-Angle Memory (ZAM), a next-gen stacked DRAM aiming to slash power and double AI memory capacity.
Intel CEO Lip-Bu Tan recruits Eric Demers as Chief GPU Architect to challenge NVIDIA. Plus, a warning on Huawei’s "poor man's" leap in chip design.
The DOJ and 38 states have filed a cross-appeal to force Google to sell Chrome, arguing that current "modest" search monopoly sanctions are not enough.
Unsealed court files reveal Google’s "Aluminum OS" will pilot in 2026, bridging Android and PC. Discover why ChromeOS is officially slated for a 2034 sunset.
Elon Musk’s xAI is hiring crypto experts to train Grok in market reasoning, just as SpaceX moves toward a massive $1.25 trillion June IPO.
Amaranth-Dragon (APT-41 nexus) weaponized WinRAR flaw CVE-2025-8088 in just 10 days. Southeast Asian govts targeted with malicious RAR archives.
Cisco patches critical flaws: CVE-2026-20098 allows root access in Meeting Management, while malicious invites crash TelePresence units. Update now.
Apache Answer flaw CVE-2026-24735 exposes deleted post history to unauthenticated users via API. Upgrade to v2.0.0 to stop data leaks.
WatchGuard patches two flaws: a VPN privilege escalation (NCPVE-2025-0626) and Fireware LDAP injection (CVE-2026-1498). Update Firebox and VPN clients now.
Critical vLLM bug CVE-2026-22778 (CVSS 9.8) lets attackers hijack servers using malicious videos. Affects video model deployments. Patch to v0.14.1 now.
Lotus Blossom compromises Notepad++ infrastructure to deploy "Chrysalis" malware. Rapid7 reveals the group using Microsoft Warbird to evade detection.
CISA warns Avation & RISS SRL are unresponsive to critical flaws (CVSS 9.8). Devices lack authentication. Isolate these unpatched systems now.
BlueNoroff hackers use fake "audio issues" on Teams calls to trick macOS users. The "fix" runs terminal commands that steal Keychains. Watch out.
Samsung MagicInfo9 has critical flaws (CVSS 9.8) including hardcoded passwords and RCE. Update to v21.1090.1 immediately to secure your digital signage.
New "directory shadowing" malware creates physical folders to hijack WordPress URLs. It feeds gambling spam to Googlebots while staying invisible.