Do Son Public PoC released for Trend Micro Apex Central RCE (CVE-2025-69258). Unauthenticated attackers can gain SYSTEM access. Update to Build 7190 now.
Apache NimBLE flaws (CVE-2025-62235) allow Bluetooth spoofing and eavesdropping. Update to v1.9.0 now to secure your IoT devices against attacks.
Centreon warns of critical AWIE vulnerabilities CVE-2025-15029 (CVSS 9.8) & CVE-2025-15026. Update to v25.10.2 now to prevent unauthenticated SQL injection.
New phishing campaign uses fake layoff warnings to drop Guloader and Remcos RAT. Learn how this HR-themed scam exploits workplace anxiety to steal data.
Critical alert: Undertow CVE-2025-12543 (CVSS 9.6) exposes WildFly & JBoss to cache poisoning and hijacking via Host Header Injection. Patch now.
Zscaler detects NodeCordRAT, a new malware in malicious npm packages. It uses Discord as a C2 server to loot crypto wallets and Chrome data.
Critical Foomuuri flaws (CVE-2025-67603) allow local users to hijack firewall settings. SUSE urges immediate update to v0.31 to secure your system.
Russian group BlueDelta targets energy researchers in Europe & Middle East. Learn how they abuse free web services for credential harvesting.
LockBit 5.0 emerges with new "premium" criminal services. AhnLab analysis reveals how the top RaaS gang targets IT firms and churches alike.
Google Gemini surges past 20% market share in Jan 2026, fueled by Nano Banana artistry, as ChatGPT faces its steepest traffic decline to date.
At CES 2026, Dell admitted consumers don't care about AI PCs, pivoting back to battery and performance as Microsoft's Copilot+ push hits a roadblock.
Google officially ended POP3 fetching and Gmailify in Jan 2026. External emails will no longer reach your web inbox unless you set up auto-forwarding.
Google switches to a biannual AOSP schedule in 2026. Custom ROM developers now face a 3-month delay for the latest Android source code optimizations.
Fixed: Logitech's macOS certificate issue. Download the manual patch for Logi Options+ and G HUB to restore your custom settings immediately.
At CES 2026, Arm redefined the future with Physical AI and AI-Defined Platforms, powering Tesla's 40x faster AI5 chip and next-gen humanoid robots.
Lenovo Tech World 2026: Meet Qira, the AI super-agent for your PC and phone, and the AI Cloud Gigafactory built with NVIDIA to scale enterprise AI.
CISA adds critical HPE OneView (CVE-2025-37164) and legacy PowerPoint (CVE-2009-0556) flaws to KEV. FCEB agencies must patch by Jan 28, 2026.
Alert: Public exploit released for n8n CVE-2026-21858 (CVSS 10.0). Unauthenticated attackers can seize full control. Update to v1.121.0 now.
Huntress exposes "VSOCKpuppet" VM escape: Attackers used a hidden zero-day toolkit to breach VMware ESXi hosts and bypass network monitoring.
New GoBruteforcer variant targets 50k+ servers by exploiting weak passwords from AI-generated code. Learn how this crypto-stealing botnet operates.
CVE-2025-67859: TLP 1.9.0 flaw lets users bypass root auth. SUSE researchers urge Linux users to update to version 1.9.1 to fix this critical security gap.
New CrazyHunter ransomware targets healthcare with BYOVD tactics and rapid encryption. Trellix reveals how this "greedy" threat cripples hospitals.