Apple and NVIDIA are fiercely competing for TSMC's next-gen A16/A14 capacity. To mitigate risk, Apple is exploring using Intel's 18AP process for entry-level M-series chips.
Code leaks confirm ChatGPT is testing search ads. The push for monetization is vital for OpenAI to offset its projected $115 billion in accumulated losses before 2029 break-even.
A critical boot flaw (CVE-2025-47372) exposes Snapdragon 8 Gen 3 and 5G modems to attack. Qualcomm's December update fixes 11 issues. Patch now.
CVE-2025-60718 lets attackers hijack Windows Administrator Protection to gain full control. Learn how the "Shadow Admin" exploit works.
A critical vulnerability in Apache bRPC (CVE-2025-59789) allows attackers to crash servers using deep JSON data. Upgrade to version 1.15.0 now to fix it.
Apple is reportedly signing a deal for Intel to manufacture entry-level M-series chips (MacBook Air/iPad Pro) using its 18A process by mid-2027, validating Intel's foundry business.
Microsoft confirmed a Windows 11 bug where the password login icon vanishes from the lock screen after the August update, forcing users to click an invisible space to sign in.
Google's VP of Global Marketing reveals the Pixel AI strategy: focus on tangible benefits like Auto Best Take, not hype, to define the Pixel as the generation's AI device.
OpenAI's early lead is eroding as Google's Gemini 3 surpasses GPT-5 in benchmarks and Anthropic dominates the enterprise market. Sam Altman faces critical pressure.
An Android Canary build reveals a new hotspot feature allowing simultaneous 2.4 GHz + 6 GHz (Wi-Fi 6E/7) dual-band broadcasting for maximum speed and device compatibility.
Operation Hanoi Thief targets Vietnam with a pseudo-polyglot LNK/image file that executes malicious code via ftp.exe. The attack deploys LOTUSHARVEST stealer via DLL sideloading to steal Chrome/Edge credentials.
Devolutions Server patched a Critical SQLi flaw (CVE-2025-13757) allowing authenticated users to exfiltrate or modify data via log parameters. Update to v2025.2.21 or v2025.3.9 immediately.
WithSecure exposed TangleCrypt, a new ransomware packer that uses LZ78/XOR and embedded PE resources to hide the STONESTOP EDR killer. However, coding flaws cause unexpected crashes.
Kaspersky exposed Tomiris APT using a "polyglot" strategy (Go/Rust/Python) and Telegram/Discord for covert C2. The group targets foreign ministries with implants that steal file paths and reconnaissance data.
GeoServer patched a High-severity XXE flaw (CVE-2025-58360, CVSS 8.2) in its WMS GetMap operation. The flaw allows unauthenticated remote attackers to read arbitrary files and perform SSRF. Update to v2.27.0.
Darktrace exposed TAG-150, a new MaaS operator compromising 469+ US devices in months. The group uses ClickFix to trick victims into running malicious PowerShell that deploys the CastleLoader/CastleRAT backdoor.
North Korean APTs added 197 malicious npm packages to the "Contagious Interview" campaign. The operation uses fake crypto job assignments to deploy the OtterCookie/BeaverTail hybrid to steal credentials cross-platform.
FortiGuard exposed ShadowV2, a new Mirai botnet variant that launched an IoT test attack specifically during a global AWS outage. The XOR-encoded malware targets routers and uses a hardcoded fallback C2 for resilience.
Bloody Wolf APT is targeting Central Asia using custom Java droppers to deploy the NetSupport RAT. The group uses geo-fencing and fake Ministry of Justice lures to achieve stealthy, persistent access for espionage.