Do Son Zscaler reveals Water Gamayun exploiting the MSC EvilTwin zero-day (CVE-2025-26633) via fake hiring lures to deploy stealthy backdoors.
Cybercriminals are using fake Battlefield 6 cracks and trainers to deploy infostealers. Avoid "InsaneRamZes" & "RUNE" torrents to protect your data.
Alert: Malicious Blender files are delivering StealC V2 infostealer. 3D artists downloading from free sites are at risk. Disable auto-run scripts now.
Critical alert: Twonky Server suffers unpatched flaws (CVE-2025-13315/16) allowing full takeover. Vendor has no fix; isolate your server immediately.
A massive leak exposes Iran's Department 40 (APT35). Discover how IRGC hackers build target packages for assassination squads and drone strikes.
CVE-2025-66035: Angular protocol-relative URLs leak XSRF tokens, bypassing CSRF protection. Update to v19.2.16, v20.3.14, or v21.0.1 now.
CloudSEK exposes a massive network of Amazon clones and 200k fake .shop domains targeting Black Friday shoppers. Learn how to spot these holiday scams.
Critical GitLab updates (18.6.1/18.5.3) fix severe CI/CD credential theft (CVE-2024-9183) & unauthenticated DoS flaws. Upgrade immediately.
cybernewswire
Cary, North Carolina, USA, 26th November 2025, CyberNewsWire
Qualcomm unveiled the Snapdragon 8 Gen 5, featuring a custom Oryon CPU (36% faster) and NPU (46% better AI), extending elite performance to more premium smartphones.
Google CEO Sundar Pichai forecasts quantum computing will match today's AI excitement in 5 years. He also touched on Gemini 3's success and Project Suncatcher (space data centers).
Perplexity launched a new AI shopping tool in the U.S. that offers deeply personalized search and enables instant purchases through PayPal, rivaling ChatGPT and Google.
Meta has once again become embroiled in allegations of concealing internal research data. According to a report...
Anthropic unveils Opus 4.5, with full Claude for Excel integration and "Infinite Chat" memory for long context. It is designed as a state-of-the-art model for enterprise and coding.
The Tor Project is developing the Counter Galois Onion (CGO) algorithm to replace the vulnerable Tor1 protocol, enhancing security against tagging attacks and key reuse.
CVE-2025-54918 allows attackers to gain SYSTEM privileges on Windows Server 2025 via a new NTLM relay attack that bypasses LDAP Channel Binding. Patch now.
NVIDIA patches 14 flaws in DGX Spark, including a critical SROOT bug (CVSS 9.3) allowing total system takeover. Update to OTA0 immediately.
Unit 42 reveals how malicious LLMs like WormGPT 4 and KawaiiGPT weaponize AI to automate ransomware and phishing, democratizing cybercrime for all.
Arctic Wolf Labs reveals Russian GRU Unit 29155 using SocGholish to deploy RomCom malware against a US firm with ties to Ukraine.
Zenitel TCIV-3+ intercoms face critical, unauthenticated command injection and XSS flaws (CVSS 9.8). Update to v9.3.3.0 immediately to patch.
A Critical flaw (CVE-2025-12816) in node-forge allows attackers to bypass signature verification by manipulating ASN.1 structures. The vulnerability affects 21M+ weekly downloads. Update to v1.3.2.
ASUS fixes 8 severe router flaws, including a critical AiCloud authentication bypass (CVSS 9.4). Users must update firmware immediately to patch vulnerabilities.