Critical WD Discovery flaw CVE-2025-30248 (CVSS 8.9) allows DLL hijacking during installation. Update to v5.3 immediately to prevent system takeover.
Trend Micro uncovers PeckBirdy, a JScript C&C framework used by China-aligned APTs. It uses lightweight, fileless tactics to target Asian governments.
Microsoft patches zero-day CVE-2026-21509, actively exploited in the wild. The flaw bypasses OLE security in Office 2016/2019. Update to Build 16.0.10417+.
CVE-2026-0994 (CVSS 8.2) in Google Protobuf Python allows DoS via nested "Any" messages. Recursion limit bypass causes crashes. Update now.
Attackers exploit GitHub forks ("Repo Squatting") to push HijackLoader malware via official-looking URLs. Technique remains active; verify all downloads.
Public PoC exploit released for critical Firefox WebRTC flaw CVE-2025-14321 (CVSS 9.8). AI-discovered bug allows remote code execution. Update now.
Malicious npm package "ansi-universal-ui" drops "G_Wagon" infostealer to steal cloud keys and wallets. Check for .gwagon_status and rotate creds now.
Researchers uncover "KazakRAT," a state-affiliated spyware targeting Kazakhstan & Afghanistan. A lapsed domain allowed experts to sinkhole the C2.
New ClearFake malware uses fake CAPTCHAs & "ClickFix" tactics to trick users into pasting malicious code. 150k victims infected via blockchain.
North Korean group PurpleBravo uses fake job offers to breach IT firms. The "Contagious Interview" campaign deploys malware via coding tests.
Official EmEditor installer hijacked to push malware. This supply chain attack steals credentials & evades detection. Check your logs for these domains.
1Password launches a new layer of security that warns you before pasting credentials into suspicious sites. Stop phishing scams before they steal your login.
ChatGPT is reportedly citing Elon Musk’s AI-authored Grokipedia, sparking fears of "model collapse" and a circular loop of unverified AI-generated misinformation.
Microsoft confirms the January Windows 11 update is causing critical "Unmountable Boot Volume" errors. See if your hardware is at risk of a system collapse.
Microsoft releases emergency auto-updates to fix critical Outlook Classic freezes and cloud storage failures in Windows 11. Check your build number today.
Apple plans a 20-device blitz in 2026! From the foldable iPhone to a robotic Home Hub and a budget A18 MacBook, see the full leaked roadmap.
Apple may return to Intel by 2028 to fab iPhone chips on the 14A node. Discover how NVIDIA's AI boom and U.S. politics are reshaping Apple Silicon.
Microsoft confirms it surrenders BitLocker keys to the FBI in Jan 2026. Discover why your Windows 11 cloud-stored key is a major privacy liability.
Apple debuts Gemini-powered Siri in Jan 2026! Discover how iOS 26.4 brings on-screen awareness and a 1.2T parameter AI model to your iPhone.
Public PoC released for critical Oracle E-Business Suite RCE (CVE-2025-61882). Ransomware gangs are actively exploiting this CVSS 9.8 flaw. Patch now.