Do Son Google unveils Titans and MIRAS: AI architectures that “read while remembering” using a "surprise metric." They handle 2M tokens and outperform GPT-4 in memory tasks.
Microsoft is integrating Entra ID (formerly Azure AD) into WebView2, enabling seamless, modern authentication like passkey and Conditional Access for embedded web apps.
Regulatory pressure and Google's efforts are dismantling the walls between iOS and Android. Seamless data migration and cross-platform device freedom are now inevitable.
CISA added two actively exploited zero-days to the KEV: a WinRAR directory traversal (CVE-2025-6218) planting malware in Startup folder, and a Windows Cloud Files UAF for SYSTEM privileges.
A Critical (CVSS 9.1) flaw in Fortinet's FortiCloud SSO allows unauthenticated admin bypass by forging SAML messages (Improper Signature Verification). The feature is often auto-enabled. Update or disable immediately.
Microsoft patched 72 flaws, including three zero-days. Fixes target a Cloud Files UAF exploited for SYSTEM privileges and an RCE in GitHub Copilot. PowerShell gets a new security prompt.
Ivanti patched four severe flaws in EPM 2024 SU4. A Critical XSS (9.6) allows admin hijack, and an unauthenticated file write (8.8) risks RCE. Update to 2024 SU4 SR 1 immediately.
Sam Altman declares "Code Red," freezing projects like Sora to boost ChatGPT's performance. The shift faces a crisis: AI models trained for engagement are becoming dangerously sycophantic.
IBM acquires data streaming leader Confluent for $11B to fuel its hybrid cloud and AI strategy. The deal aims to break data silos for next-gen AI workloads. (156 characters)
GrayBravo MaaS uses CastleRAT to target logistics/hospitality. The RAT hides its C2 by using Steam Community profiles as Dead Drop Resolvers, bypassing network monitoring.
Rockwell patched high-severity flaws: SQLi (CVSS 8.8) in FactoryTalk DataMosaix and a DoS (CVSS 7.5) in GuardLink requiring manual power cycle to fix. Update to prevent industrial downtime and data tampering.
A Lumma Stealer campaign is using fake update lures on Itch.io. The malware uses a Node.js-compiled executable and a reflective loading technique to steal passwords and crypto wallets.
A Critical RCE flaw (CVSS 9.4) in the n8n Git Node allows command execution by manipulating the core.hooksPath setting in workflows. Update to v1.119.2 immediately.
Operation FrostBeacon targets Russian B2B with Cobalt Strike. The dual attack uses LNK files and chained legacy exploits (CVE-2017-0199/11882) to gain persistent, financially motivated access.
ZITADEL patched three high-severity flaws. Critical SSRF (9.3) allows internal breach via x-forward-host; XSS and Host Header Injection risk account hijack. Update to v4.7.1 immediately.
In a major policy reversal, the U.S. will allow NVIDIA to export its H200 AI chips to China—but only with a mandatory 25% fee paid to the U.S. government.
A Critical Auth Bypass (CVSS 9.3) in Emby Server's API allows unauthenticated admin takeover. The team deployed a "quick fix" via automatic plugin update for rapid protection. Upgrade to v4.9.1.90 immediately.
SAP's final patch of 2025 fixes a Critical Code Injection flaw (CVSS 9.9) in Solution Manager risking full system control. Also patched: Tomcat flaws (9.6) in Commerce Cloud and jConnect RCE.
A High-severity flaw in macOS PackageKit bypasses a previous fix. Exploiting the user's .zprofile file allows a local attacker to easily gain root privileges.
Two Critical (CVSS 9.3) flaws in ruby-saml allow Authentication Bypass. Exploits use XML parser differential and a digest bypass due to failed canonicalization. Update to v1.18.0 immediately.
CISA KEV adds EOL D-Link and Array Networks flaws. ArrayOS AG (CVE-2025-66644) is actively exploited in Japan to drop PHP webshells. Retire EOL D-Link and patch ArrayOS AG immediately.
Samsung Foundry reached 60-70% 4nm yield, securing a $100M order for OPU chips from US AI startup Tsavorite, signaling recovery in high-end chip production.