CVE-2025-68615: A critical 9.8 severity Net-SNMP buffer overflow allows attackers to crash snmptrapd. Upgrade to v5.9.5 or v5.10.pre2 immediately!
Genians exposes APT37's Artemis campaign, where hackers pose as Korean TV writers using fake casting calls to deliver malware via HWP documents.
Jamf uncovers a new MacSync Stealer variant that was notarized by Apple, allowing it to bypass Gatekeeper and infect Macs without terminal commands.
SEQRITE Labs uncovers Operation IconCat, a campaign by UNG0801 using spoofed SentinelOne and Check Point icons to deploy PYTRIC and RUSTRIC in Israel.
CYFIRMA exposes APT-36 weaponizing a fake NCERT WhatsApp advisory to deliver a stealthy backdoor and seize long-term control of government systems.
Kaspersky warns of Webrat malware targeting researchers via fake GitHub PoCs for CVE-2025-10294 and other high-CVSS flaws to install a backdoor.
PCPcat exploited Next.js/React flaws to hijack 59,128 servers in just 48 hours. Protect your cloud credentials and patch CVE-2025-55182 now!
Steam is now native 64-bit on Windows. Valve confirms that 32-bit Windows 10 users will stop receiving all updates and security fixes on January 1, 2026.
Microsoft's CoreAI team aims to eliminate all C/C++ code by 2030. Using AI agents, they plan to rewrite 1 million lines of code per engineer, every month.
Microsoft’s native NVMe driver for Windows Server 2025 & Win11 25H2 bypasses legacy SCSI layers to boost SSD IOPS by up to 80% and cut CPU load by 45%.
MAS is ditching Batch for PowerShell! Discover how the new roadmap optimizes Windows 10 & 11 activation while maintaining a legacy branch for older systems.
Starting Jan 28, 2026, Google will charge developers up to $3.65 per install for apps downloaded via external links, sparking a new legal row with Epic.
Alphabet acquires Intersect Power for $4.75B, securing gigawatts of clean energy to solve the "AI power gap" and bypass the aging U.S. electrical grid.
SEQRITE Labs uncovers a China-linked campaign targeting Indian firms with fake tax notices to install persistent Remote Access Trojans.
Microsoft patches a high-severity Windows DWM flaw that allows low-level users to seize SYSTEM privileges via a rendering brush error. PoC availabe.
Anna’s Archive claims it mirrored Spotify’s catalog into a 300TB torrent trove, prompting an investigation into DRM bypass, piracy, and copyright risks.
MongoDB CVE-2025-14847: A high-severity flaw in zlib compression allows unauthenticated attackers to read sensitive heap memory. Upgrade to v8.2.3+!
Fortra unmasks Scripted Sparrow, a global BEC collective sending 3M+ targeted emails monthly via spoofed executive chains to steal millions.
Yarix exposes the new Qilin-LockBit-DragonForce cartel. Is it a powerful merger or a desperate PR stunt for a "dead" LockBit? Find out.
SafeBreach reveals the return of the Prince of Persia (Infy) group, using Telegram and the new Tonnerre v50 malware to target victims in 2025.
Do Son 
