Do Son Critical Apache Uniffle flaw CVE-2025-68637 (CVSS 9.1) exposes Big Data clusters to MITM attacks. Update to v0.10.0 immediately to secure traffic.
New Astaroth campaign "Boto Cor-de-Rosa" uses a Python worm to hijack WhatsApp Web. It auto-messages your contacts to spread banking malware globally.
Infoblox exposes the "Pig Butchering-as-a-Service" economy. Providers like Penguin and UWORK sell turnkey fraud kits to automate scams globally.
Critical zlib flaw CVE-2026-22184 (CVSS 9.3) allows RCE via buffer overflow in the untgz utility. Update to version 1.3.1.2 immediately to secure systems.
MuddyWater APT deploys new "RustyWater" malware against Middle East targets. CloudSEK reveals how the group is ditching PowerShell for stealthy Rust tools.
Critical unpatched flaws in Vivotek IP7137 cameras allow unauthorized live streaming (CVE-2025-66049). Disconnect these EOL devices immediately.
Cisco Talos reveals UAT-7290, a China-nexus group targeting global telecoms. They act as both spies and infrastructure builders for other hackers.
Critical flaws in InputPlumber (CVE-2025-66005) expose Linux gamers to session hijacking. Update to v0.69.0 or SteamOS 3.7.20 immediately to secure.
Password advice used to be straightforward enough. Pick something hard to guess, change it sometimes, don’t stick...
Meta secures 6.6 GW of nuclear power through landmark deals with Vistra, Oklo, and TerraPower to energize its Prometheus AI supercluster in Ohio.
Microsoft debuts Copilot Checkout at NRF 2026, allowing users to buy products from Shopify, Etsy, and more directly inside the AI chat window.
Gmail enters the Gemini 3 era! Google makes "Help Me Write" free for all, while launching a premium AI Inbox and natural-language search for 2026.
Linus Torvalds shuts down the debate on AI slop in the Linux kernel, calling documentation rules "pointless posturing" and sticking to peer review.
Microsoft’s Build 26220.7535 introduces a targeted Group Policy to uninstall Copilot on managed enterprise devices after 28 days of inactivity.
Iran's nationwide internet blackout saw a brief 0.01% traffic surge from Tehran universities on Jan 9, 2026, signaling a new "whitelist" control strategy.
Microsoft officially ended telephone activation on Dec 3, 2025. Users must now use the aka.ms/aoh online portal, ending the era of true offline licensing.
Microsoft Defender's new FakeMas filter is erroneously blocking the official MAS activation script due to a typosquatted domain war. Learn the fix.
OpenAI launches ChatGPT Health, a secure portal syncing medical records and wearables for personalized advice—isolated from AI model training.
Apple and JPMorgan Chase confirm a massive Apple Card partnership. Goldman Sachs exits with a $1B loss as cardholders begin a 2-year transition.
Public PoC released for Trend Micro Apex Central RCE (CVE-2025-69258). Unauthenticated attackers can gain SYSTEM access. Update to Build 7190 now.
Apache NimBLE flaws (CVE-2025-62235) allow Bluetooth spoofing and eavesdropping. Update to v1.9.0 now to secure your IoT devices against attacks.
Centreon warns of critical AWIE vulnerabilities CVE-2025-15029 (CVSS 9.8) & CVE-2025-15026. Update to v25.10.2 now to prevent unauthenticated SQL injection.