Do Son Despite a recent doxxing attempt, Lumma Stealer has resurfaced, integrating browser fingerprinting into its C&C to collect WebGL/Canvas signatures for sandbox evasion and victim assessment.
Group-IB exposed an automated PhaaS kit that impersonates Aruba S.p.A. to steal credentials, credit card details, and OTPs. The multi-stage scam uses a CAPTCHA filter and Telegram for real-time exfiltration.
ASEC exposed Yurei, a new Go-based ransomware group using ChaCha20-Poly1305/ECIES for irreversible encryption. The stealthy RaaS operates with minimal initial setup and focuses on double extortion.
Sam Altman confirmed ChatGPT has fixed its overuse of the em dash. The model will now respect Custom Instructions to stop using the punctuation, removing a clear AI tell.
X (Twitter) launched 'Chat' to replace DMs, adding video/voice calling, file sharing, editing, and E2E encryption for messages on iOS and web. Android is coming soon.
Google announced a $40B investment in Texas by 2027 to build new cloud and AI data centers. The plan includes a $30M Energy Impact Fund and workforce training.
Microsoft publicly released the Xbox Game Publishing Guide, previously partner-only, to remove barriers and make it easier for all developers to launch titles on Xbox and PC.
Meta confirmed WhatsApp is ready for DMA interoperability with third-party apps BirdyChat and Haiket. European users can soon opt in to cross-platform chats.
Amazon officially rebranded its LEO satellite initiative, formerly Project Kuiper, as Amazon Leo, signaling its readiness to transition the network into a commercial product.
Sender Policy Framework (SPF) is a vital component of modern email authentication protocols, designed to combat email...
Symfony patched a High-severity flaw (CVE-2025-64500) in its Request component. Improper PATH_INFO parsing allows attackers to bypass access control rules in vulnerable applications.
Cisco patched a High-severity EoP flaw (CVE-2025-20341) in Catalyst Center Virtual Appliance. A low-privileged Observer user can remotely elevate privileges to Administrator via a crafted HTTP request.
Apple launched the Mini Apps Partner Program, cutting the App Store commission fee in half—from 30% to 15%—for eligible developers of self-contained web-based services.
“Is it working?” It can be easy to drop an AI SOC agent into your environment and...
Cybersecurity firms warn of a Critical, actively exploited FortiWeb flaw that allows unauthenticated attackers to create a new administrator account on the FortiWeb Manager panel. Update to v8.0.2 immediately.
ASUS released an urgent patch for a Critical (CVSS 9.3) Auth Bypass flaw (CVE-2025-59367) in its DSL Series Routers. The bug allows remote attackers to gain unauthorized access without credentials. Update firmware immediately.
Qualcomm launches Dragonwing IQ-X, its first industrial PC processor with Oryon CPUs, 45 TOPS of AI power, and a rugged design for factory edge controllers.
OpenAI released GPT-5.1 Instant/Thinking with "adaptive reasoning" for slower, deeper thinking. It also adds new chat styles like Professional, Candid, and Quirky.
macOS Tahoe 26.2 beta reveals "Edge Light," an AI-driven virtual ring light that uses the display edges and Neural Engine to optimize illumination for video calls.
Microsoft revealed plans for an "Agentic OS," transforming Windows 11 into an AI-first platform using the Model Context Protocol (MCP) to let AI agents interact with native apps.
A malicious Chrome extension, Safery: Ethereum Wallet, steals BIP-39 seed phrases by encoding them into synthetic Sui blockchain addresses and broadcasting microtransactions, bypassing HTTP/C2 detection.
NVIDIA patched two High-severity flaws in its NeMo Framework. CVE-2025-23361 and CVE-2025-33178 allow local code injection and privilege escalation in AI training environments. Update to v2.5.0.