Do Son Rufus flaw CVE-2026-23988 allows local users to gain Admin rights via a race condition. Update to version 4.12 immediately to secure your system.
"SyncFuture" spies on Indian users via fake Income Tax emails. This advanced campaign bypasses antivirus & installs Chinese IT tools for total surveillance.
DPRK spies weaponize Visual Studio Code tunnels to bypass security. Darktrace reveals a campaign targeting South Korea with government decoys.
KONNI APT targets APAC developers with AI-generated malware disguised as crypto projects. The "polished" backdoor steals wallets & credentials.
Unit 42 reveals "living" phishing pages built by GenAI on the fly. These polymorphic attacks evade detection by generating unique code for every victim.
New Osiris ransomware hits Southeast Asia, linking to Inc & Medusa groups. It uses BYOVD tactics to disable defenses. Unrelated to the 2016 variant.
Critical RealHomes CRM flaw CVE-2025-67968 (CVSS 9.9) allows any logged-in user to upload malicious files. Update to v1.0.1 immediately to prevent takeover.
Apache Karaf Decanter flaw CVE-2026-24656 allows unauthenticated attackers to crash the log collector via deserialization. Update to v2.12.0 immediately.
Abandoned Python PLY library contains a critical RCE flaw (CVE-2025-56005) via an undocumented "picklefile" parameter. No patch is expected.
Google Photos debuts Me Meme in Jan 2026! Use generative AI to put your face in iconic meme templates with one tap. Now rolling out to U.S. users.
Solos Technology sues Meta for billions in Jan 2026, alleging Ray-Ban Meta glasses use stolen patents. A sales ban could be a huge blow to Reality Labs.
TikTok avoids a U.S. ban in Jan 2026 by forming TikTok USDS Joint Venture LLC. ByteDance cedes 80.1% control to Oracle, Silver Lake, and MGX.
Apple accuses the EU of "political delay tactics" in Jan 2026 after Setapp Mobile shuts down. Discover why the Core Technology Fee is causing a crisis.
Apache Hadoop HDFS native client flaw CVE-2025-27821 allows out-of-bounds writes. Update to v3.4.2 to prevent crashes and ensure data stability.
CISA adds VMware vCenter flaw CVE-2024-37079 (CVSS 9.8) to KEV catalog. Hackers are actively exploiting this RCE bug. Patch immediately.
Okta reveals new vishing kits that "drive" victim browsers. These real-time tools sync phone calls with phishing pages to bypass MFA number matching.
Bitwarden updates pricing in Jan 2026: Premium is now $1.65/mo. Discover the new Phishing Blocker, 5GB storage, and loyalty discounts for users.
Linux 7.0 officially drops HIPPI support in Jan 2026. Discover the history of this 800Mbps supercomputing giant and why the kernel is moving on.
A 5-year-old flaw in Linux x86 page fault handling has finally been patched in Kernel 6.19. Discover how engineers fixed this "combinatorial nightmare."
CISA adds 4 flaws to KEV, including critical Versa Concerto auth bypass (CVSS 9.2) & malicious "Prettier" package. Patch by Feb 12 to stop active attacks.
Discover the NexPhone: A 2026 breakthrough running Android, Linux, and Windows 11 on a single chip. Built for geeks with support until 2036.
Fortinet warns of a new Jan 2026 attack path bypassing December’s patches. Attackers use FortiCloud SSO to hijack firewalls. Learn the critical fix.