Do Son A severe server incident at Cloudflare caused widespread internet disruption, making major sites like X, ChatGPT, Canva, and PayPal inaccessible. A fix is being deployed.
Critical Flowise Flaw Allows Unauthenticated Remote Admin Takeover via Exposed Registration Endpoint
Critical Flowise Flaw Allows Unauthenticated Remote Admin Takeover via Exposed Registration Endpoint
The team behind Flowise—a popular open-source platform for building AI agents and LLM workflows—has issued an urgent...
Escalating tensions in the Red Sea, including Houthi attacks, are delaying major subsea cable projects like Meta’s 2Africa and Google’s Blue-Raman, forcing reliance on costlier routes.
Meta launches Content Protection to fight Reels theft. Creators can now Track (add attribution) or Block unauthorized reposts of their Facebook Reels on both Instagram and Facebook.
Microsoft is exploring integrating the open-source Windows Edge Light tool into PowerToys to bring a virtual ring light feature to Windows 11 for better video calls.
DeepMind unveiled WeatherNext 2, its AI model for two-week global forecasts. It's 8x faster than its predecessor, adds hourly predictions, and tracks hurricanes up to 3 days out.
Jeff Bezos is the new Co-CEO of Project Prometheus, a secretive AI startup that has raised $6.2 billion to transform high-precision manufacturing. This is his first CEO role since 2021.
Microsoft fixed a bug in Windows 11 where the Task Manager process continued to run in the background, consuming resources. The update also fixes WinRE input issues.
A Critical (CVSS 9.0) flaw in W3 Total Cache (CVE-2025-9501) allows unauthenticated attackers to execute arbitrary PHP code via a crafted comment. 1M+ sites are at risk. Update to v2.8.13.
The DOJ announced five guilty pleas and $15M in crypto forfeiture seized from APT38. Facilitators helped North Korean IT workers fraudulently earn $2.2M from 136 US companies to fund the DPRK regime.
Israel disclosed SpearSpecter: an IRGC-IO espionage campaign using weeks-long WhatsApp social engineering and search-ms/WebDAV abuse to deploy the fileless TAMECAT PowerShell backdoor with Discord/Telegram C2.
Jamf exposed DigitStealer, an advanced macOS infostealer that checks for Apple M2+ chips. It uses Cloudflare Pages for delivery, JXA for stealth, and modifies Ledger Live to steal crypto wallets via DNS TXT C2.
Unit 42 exposed two massive campaigns (Trio & Chorus) using 2,500 spoofed domains to target Chinese users. The multi-stage attack uses MSI/VBScript and DLL sideloading via Avast to deploy Gh0st RAT.
eSentire exposed the Amatera Stealer campaign using ClickFix social engineering to deliver multi-stage PowerShell. The malware patches AMSI in memory and deploys NetSupport RAT for remote access.
Elastic exposed Dragon Breath APT's new RoningLoader malware. It uses PPL abuse and a signed kernel driver (ollama.sys) to disable Windows Defender and inject a modified gh0st RAT for espionage.
CISA/Europol updated their advisory on Akira Ransomware, confirming $244M in profits. The group now encrypts Nutanix AHV VMs and performs data exfiltration in just two hours via VPN flaws.
Google released an emergency Chrome update (142.0.7444.175) to patch two V8 Type Confusion flaws. One zero-day (CVE-2025-13223) is actively exploited. Update now!
cybernewswire
Menlo Park, California, USA, 17th November 2025, CyberNewsWire
Mark Gurman reports Apple has abandoned the Mac Pro, cancelling the M4 Ultra refresh. The company now views the Mac Studio as the future of its professional desktops.
Google has suffered yet another setback on Europe’s antitrust front. According to a report from Reuters, a...
Mark Gurman says the iPhone Air 2 is cancelled, confirming Apple will shift to a split release cycle: high-end/Fold in Fall 2026, followed by standard models in Spring 2027.