AWS Nova Forge allows deep customization of Nova 2 models via open-training (pre-, mid-, post-training). This ensures reliable AI outputs aligned with enterprise operational constraints.
Android 16's second update brings AI notification summaries and anti-scam tools. Accessibility gains Gemini-powered TalkBack and Expressive Captions for enhanced user experience.
Raspberry Pi raised prices on Pi 4 and Pi 5 models by up to $25, citing AI-driven memory demand. It simultaneously launched a new $45, 1GB Pi 5 entry model.
AWS launched Frontier Agents, a new class of autonomous AI agents (Kiro, Security Agent, DevOps Agent) capable of long-running, independent software engineering tasks.
AWS launched the Nova 2 model family (Lite, Pro, Omni) and Nova Act, an agent platform achieving 90% reliability in web-browsing tasks, with Nova Forge for deep customization.
AWS launched AI Factories, deploying its full AI stack (NVIDIA/Trainium) into customer data centers to create private AWS regions for compliance and data sovereignty.
AWS launched the Trainium3 chip in EC2 UltraServers, offering 4.4x performance for AI training and 40% better efficiency, supporting massive 1M-chip clusters.
AWS Bedrock unveiled 18 new models (including Mistral/Nova 2), AgentCore with memory/policies, and GuardDuty/Security Hub upgrades to enhance AI-driven threat detection.
The Google Phone app is testing a 'Call Reason' feature, letting users mark urgent calls with a badge to ensure the recipient answers, limiting its use to saved contacts.
Windows 11 preview update KB5070311 introduced a bug where File Explorer, Home, and Gallery flash bright white upon launch, severely disrupting the dark mode experience.
Following Apple's push, Let's Encrypt will cap all certificate validity at 45 days by 2028. Users must ensure automation is compatible with the significantly shorter lifetime.
Facing a "red alert" from Google Gemini, OpenAI shelved its ad plans to focus on core ChatGPT quality, speed, and deep personalization to remain competitive.
India's DoT mandated SIM-binding for all messaging apps (WhatsApp, Telegram, Signal). Users must re-verify every six hours to combat cybercrime and cross-border fraud.
A Critical (CVSS 9.3) LPE flaw in cPanel's Team Manager API allows a standard user to break out of their directory via path traversal and compromise the shared hosting server. Update immediately.
A Critical (CVSS 9.8) RCE flaw in ACF Extended allows unauthenticated attackers to run arbitrary code via the prepare_form function, risking 100K+ WordPress sites. Update to v0.9.2.
CISA warned of a Critical RCE flaw (CVE-2025-13658, CVSS 9.8) in Longwatch video surveillance. Unauthenticated attackers can execute arbitrary code with SYSTEM privileges on OT environments. Update to v6.335.
A malicious Rust package (evm-units) was live on Crates.io for 8 months, hiding RCE in a version check function. The loader uses VBScript and checks for Qihoo360 to compromise crypto developers on Windows/Linux/macOS.
The DOJ seized tickmilleas.com, a domain central to "pig butchering" crypto fraud run from Burma's Tai Chang compound. The action is part of a rapid escalation against transnational organized crime scams.
Google rolled out Chrome 143 stable, patching 13 vulnerabilities. Key fixes include a High-severity V8 Type Confusion flaw (CVE-2025-13630) and an Updater vulnerability that risk code execution. Update immediately.
Django patched CVE-2025-13372, a High-severity SQLi flaw affecting PostgreSQL FilteredRelation via kwargs, and a DoS flaw in the XML serializer (CVE-2025-64460). Update to v5.2.9+.
CISA Warns: Critical Iskra iHUB Flaw (CVE-2025-13510) Allows Unauthenticated Smart Metering Takeover
CISA warned of a Critical Auth Bypass (CVE-2025-13510, CVSS 9.1) in Iskra iHUB smart metering gateways. Unauthenticated attackers can access and modify critical device settings. Vendor is non-responsive.