Do Son Microsoft unveiled Work IQ for Copilot, a cognitive upgrade for proactive assistance. New Agent Mode integrates GPT-5, Sora 2, and Anthropic models across M365 apps.
Apple has, for various reasons, adjusted AirDrop so that it now defaults to receiving content only from...
Dutch police seized 250 servers from a bulletproof hosting provider (CrazyRDP) used by cybercriminals since 2022, facilitating over 80 cybercrime investigations.
cybernewswire
Singapore, Singapore, 19th November 2025, CyberNewsWire
Windows 11 is getting new recovery tools: Point-in-Time Restore (default 24-hr snapshots) and Network-Enabled WinRE for automatic driver and internet access.
Google launched Gemini 3, its "most intelligent model yet," alongside the Antigravity platform for agentic development, Generative UI, and deep integration in Search.
Microsoft is investing $10B in Anthropic (and NVIDIA $5B), fueling fears of an AI bubble. Anthropic committed to buying $30B in Azure cloud capacity in the process.
Google announced $78B+ for its "Investing in America 2025" initiative. The funds will expand cloud and AI infrastructure, including $40B in Texas, energy, and workforce training.
xAI released Grok 4.1 Thinking, which immediately topped the LMArena leaderboard (Elo 1483), pushing Gemini 2.5 Pro to #3. Grok 4.1 also cut hallucinations by 70%.
Google upgraded AI Mode with Canvas, a dedicated space for project and travel planning. The Flight Deals tool rolls out globally, and agentic booking expands in the US.
CISA added a FortiWeb RCE flaw (CVE-2025-58034) to its KEV Catalog due to active exploitation. The bug allows authenticated attackers to execute arbitrary code on the WAF via crafted requests. Update now.
Oligo exposed ShadowRay 2.0, a massive, evolving campaign using AI-generated malware to turn 230K exposed Ray AI clusters into a self-propagating cryptomining and DDoS botnet.
D-Link warned that DIR-878 has reached EOL with three unpatched RCE flaws. Unauthenticated remote attackers can execute arbitrary commands via Dynamic DNS and DMZ settings due to insecure CGI parameters.
METZ CONNECT patched five critical flaws in EWIO-2 industrial controllers. CVE-2025-41734 allows unauthenticated PHP RCE, and CVE-2025-41733 risks admin credential reset. Update to v2.2.0 immediately.
LayerX exposed a 6-year, 9M-install campaign: Fake VPN/ad-blocking Chrome extensions hijack all user traffic via remote PAC proxy scripts, enabling surveillance and data exfiltration.
SolarWinds patched three Critical RCE flaws (CVSS 9.1) in Serv-U. An authenticated admin can exploit them for code execution and directory path bypass. Update to v15.5.3 immediately.
Socket exposed a new npm attack (dino_reborn) using Adspect cloaking to hide behind a fake crypto CAPTCHA for victims, while showing a polished decoy site (Offlido) to researchers.
Mandiant exposed UNC1549, an Iranian APT, using DLL search order hijacking on Citrix/VMware to deploy TWOSTROKE and DCSYNCER.SLICK. The group performs VDI breakouts for long-term espionage.
Splunk uncovered a new .NET steganographic loader that hides LokiBot malware inside embedded BMP and PNG image files. The multi-stage loader uses a separate container module, evading static detection.
A new macOS stealer (Nova) uses LaunchAgents to install a modular backdoor. Its main function is replacing legitimate Ledger/Trezor apps with phishing clones that exfiltrate seed phrases as users type.
Orem, United States, 18th November 2025, CyberNewsWire