Do Son A Critical (CVSS 10.0) RCE flaw (CVE-2025-65108) in md-to-pdf allows arbitrary JavaScript code execution via malicious front-matter. Over 47K weekly downloads are affected. Update to v5.2.5.
Trustwave exposed Eternidade Stealer, a sophisticated Brazilian Trojan. The Python WhatsApp worm steals contact lists and uses IMAP email for covert C2 retrieval to launch banking overlays.
K7 Labs exposed a Python malware using multi-layer encoding (Base64/BZ2/Zlib) and a PNG-disguised RAR archive. The payload executes in memory and achieves stealth by injecting into cvtres.exe.
X is now letting Premium+ subscribers request dormant usernames, dividing them into 'Priority' and 'Rare' categories with ambiguous rules and rumored costs up to millions.
Google firmly denied misleading rumors that it changed its policy to use Gmail content for training Gemini AI models, stressing private data is not used for AI.
Meta is relaxing its real-name policy! Facebook Group admins can now allow members to use custom nicknames and dedicated avatars for semi-anonymous discussions.
Google is testing sponsored links within Gemini's "AI Mode" search results. The ads are visually subtle, signaling the inevitable monetization of AI-powered search.
Starting a business is exciting, but finding the money to get it off the ground can feel...
ASEC exposed a VPN supply chain attack deploying NKNShell, a Go-based backdoor that uses P2P NKN and MQTT for stealthy C2. The installer bypasses AMSI using AI-generated code and grants full remote access (MeshAgent, gs-netcat).
SonicWall patched a critical flaw (CVE-2025-40604) in its Email Security appliances. The bug allows persistent RCE by exploiting a lack of integrity checks when loading the root filesystem image from the VM datastore.
AI agentic browsers have shifted from simple internet gateways to active tools. They rely on autonomous agents...
Have you ever gotten a text from your bank asking if you just spent money in a...
Google's Quick Share now works with Apple AirDrop for seamless file transfer between Pixel 10 and iPhone/Mac. Built with secure Rust for peer-to-peer sharing.
A vertical tab feature, similar to Edge's, has appeared in the Chrome Canary build 144.0 for testing, hinting at a major UI and productivity update coming soon.
ChatGPT's new Group Chat feature is now available globally for all users. Share conversations with up to 20 people for planning or projects, separate from private memory.
Google released Nano Banana Pro, its new Gemini 3 Pro-powered image model, featuring clear, accurate text rendering, 4K export, and built-in editing tools.
Salesforce revoked all Gainsight app tokens and removed the app from the AppExchange after finding unusual activity that may have exposed customer data via the connection.
The new Sturnus Android banking trojan bypasses end-to-end encryption on WhatsApp & Signal and enables full device takeover for hidden financial fraud.
Threat actors are actively exploiting a new WSUS RCE flaw (CVE-2025-59287) to gain SYSTEM shells and deploy the dangerous ShadowPad backdoor. Patch immediately!
SonicWall reports a pre-auth stack-based buffer overflow flaw (CVE-2025-40601) in SonicOS SSLVPN, allowing remote DoS attacks. Patches and mitigation are available.
Grafana Enterprise released emergency patches for CVE-2025-41115 (CVSS 10.0), a critical flaw in SCIM provisioning that could allow attackers to impersonate high-privilege users.
NVIDIA's Q3 revenue hit a record $57B, up 62% YoY, as CEO Jensen Huang declares the AI boom is not a bubble but its "true ascent." Shares surge 5%.