Do Son Cameo won a TRO barring OpenAI from using the name ‘Cameo’ for a feature in its Sora app, citing trademark infringement. The ban is effective until the December 19 hearing.
A job posting revealed the codename 'Aluminium OS' for Google's project to merge Android and ChromeOS into a single platform for laptops, tablets, and mini-PCs.
After removing JPEG-XL support in 2023, Chromium has reopened the debate on reinstating the format, driven by Apple's recent adoption in Safari and the iPhone 16 Pro.
ChatGPT’s new Shopping Research feature is now live for all users! It leverages AI to create comprehensive, personalized guides for electronics, home goods, and more.
Google is preparing a native Universal Clipboard feature for Android and Chromebooks to allow seamless copy-paste across devices, expected to debut in Android 17.
AMD formally notified partners that GPU prices will rise by at least 10% starting in 2026. Soaring GDDR memory chip costs and AI market focus are blamed for the hike.
cybernewswire
Horsham, United Kingdom, 25th November 2025, CyberNewsWire
A critical chain of Fluent Bit vulnerabilities allows RCE, path traversal, and log tampering by exploiting tag handling and an auth bypass. Update to v4.1.1 now.
Apache warned of a Critical flaw (CVE-2025-65998) in Syncope. When AES is enabled for password storage, a hard-coded key allows attackers with database access to decrypt all user passwords. Update immediately.
CISA issued an urgent alert: Commercial spyware is actively exploiting zero-click flaws and malicious QR codes to hijack messaging apps (Signal, WhatsApp) for espionage against government and civil society targets.
A Critical (CVSS 9.8) RCE flaw in Sneeit Framework is actively exploited. The bug allows unauthenticated attackers to run arbitrary code via call_user_func and take over WordPress sites. Update to v8.4 immediately.
A High-severity flaw (CVE-2025-13357, CVSS 7.4) in the Vault Terraform Provider allows unauthenticated access via LDAP null binds due to an insecure deny_null_bind default setting. Update to v5.5.0.
Critical Unpatched Flaw: Vivotek EOL IP Cameras Exposed to Unauthenticated RCE via Command Injection
Critical Unpatched Flaw: Vivotek EOL IP Cameras Exposed to Unauthenticated RCE via Command Injection
A critical, unpatched flaw in EOL Vivotek IP Cameras allows unauthenticated RCE via command injection in eventtask.cgi. Firmware versions 0100c–0305a4 are vulnerable and will not receive fixes.
A Critical (CVSS 9.8) Auth Bypass flaw (CVE-2025-63207) in R.V.R Elettronica TEX broadcast hardware allows unauthenticated attackers to reset all user passwords (Admin/Operator) via a simple HTTP request.
Kaspersky exposed ToddyCat APT's evolution: the group steals M365 OAuth tokens from memory and uses TCSectorCopy to steal locked Outlook OST files, allowing covert access to cloud email outside the perimeter.
ENKI exposed a Kimsuky APT campaign using a dual PE/PowerShell payload that switches based on Windows Defender status to deploy KimJongRAT. The malware steals Chrome AppBound keys via GitHub Releases C2.
K7 Labs exposed a Brazilian campaign using a Python WhatsApp worm for self-propagation. The in-memory AutoIt loader deploys a banking trojan that uses IMAP email as a covert C2 channel to steal banking credentials.
Orange Cyberdefense’s CyberSOC and CSIRT teams have uncovered a new wave of Operation DreamJob attacks, revealing updated...
CyberArmor exposed Autumn Dragon, a China-nexus APT using a WinRAR path traversal flaw (CVE-2025-8088) and DLL sideloading to deploy a Telegram C2 backdoor for espionage in Southeast Asia.
Qualcomm confirmed that the Quick Share-AirDrop feature, enabling seamless file transfer with iPhones, will expand beyond Pixel 10 to all Snapdragon-powered Android phones soon.
A major bug in the Windows 11 July update (KB5062553) is causing widespread crashes in core system components like File Explorer, Taskbar, and Start Menu on 24H2/25H2.