Do Son Google announced $78B+ for its "Investing in America 2025" initiative. The funds will expand cloud and AI infrastructure, including $40B in Texas, energy, and workforce training.
xAI released Grok 4.1 Thinking, which immediately topped the LMArena leaderboard (Elo 1483), pushing Gemini 2.5 Pro to #3. Grok 4.1 also cut hallucinations by 70%.
Google upgraded AI Mode with Canvas, a dedicated space for project and travel planning. The Flight Deals tool rolls out globally, and agentic booking expands in the US.
CISA added a FortiWeb RCE flaw (CVE-2025-58034) to its KEV Catalog due to active exploitation. The bug allows authenticated attackers to execute arbitrary code on the WAF via crafted requests. Update now.
Oligo exposed ShadowRay 2.0, a massive, evolving campaign using AI-generated malware to turn 230K exposed Ray AI clusters into a self-propagating cryptomining and DDoS botnet.
D-Link warned that DIR-878 has reached EOL with three unpatched RCE flaws. Unauthenticated remote attackers can execute arbitrary commands via Dynamic DNS and DMZ settings due to insecure CGI parameters.
METZ CONNECT patched five critical flaws in EWIO-2 industrial controllers. CVE-2025-41734 allows unauthenticated PHP RCE, and CVE-2025-41733 risks admin credential reset. Update to v2.2.0 immediately.
LayerX exposed a 6-year, 9M-install campaign: Fake VPN/ad-blocking Chrome extensions hijack all user traffic via remote PAC proxy scripts, enabling surveillance and data exfiltration.
SolarWinds patched three Critical RCE flaws (CVSS 9.1) in Serv-U. An authenticated admin can exploit them for code execution and directory path bypass. Update to v15.5.3 immediately.
Socket exposed a new npm attack (dino_reborn) using Adspect cloaking to hide behind a fake crypto CAPTCHA for victims, while showing a polished decoy site (Offlido) to researchers.
Mandiant exposed UNC1549, an Iranian APT, using DLL search order hijacking on Citrix/VMware to deploy TWOSTROKE and DCSYNCER.SLICK. The group performs VDI breakouts for long-term espionage.
Splunk uncovered a new .NET steganographic loader that hides LokiBot malware inside embedded BMP and PNG image files. The multi-stage loader uses a separate container module, evading static detection.
A new macOS stealer (Nova) uses LaunchAgents to install a modular backdoor. Its main function is replacing legitimate Ledger/Trezor apps with phishing clones that exfiltrate seed phrases as users type.
cybernewswire
Orem, United States, 18th November 2025, CyberNewsWire
A severe server incident at Cloudflare caused widespread internet disruption, making major sites like X, ChatGPT, Canva, and PayPal inaccessible. A fix is being deployed.
Critical Flowise Flaw Allows Unauthenticated Remote Admin Takeover via Exposed Registration Endpoint
Critical Flowise Flaw Allows Unauthenticated Remote Admin Takeover via Exposed Registration Endpoint
The team behind Flowise—a popular open-source platform for building AI agents and LLM workflows—has issued an urgent...
Escalating tensions in the Red Sea, including Houthi attacks, are delaying major subsea cable projects like Meta’s 2Africa and Google’s Blue-Raman, forcing reliance on costlier routes.
Meta launches Content Protection to fight Reels theft. Creators can now Track (add attribution) or Block unauthorized reposts of their Facebook Reels on both Instagram and Facebook.
Microsoft is exploring integrating the open-source Windows Edge Light tool into PowerToys to bring a virtual ring light feature to Windows 11 for better video calls.
DeepMind unveiled WeatherNext 2, its AI model for two-week global forecasts. It's 8x faster than its predecessor, adds hourly predictions, and tracks hurricanes up to 3 days out.
Jeff Bezos is the new Co-CEO of Project Prometheus, a secretive AI startup that has raised $6.2 billion to transform high-precision manufacturing. This is his first CEO role since 2021.