Do Son A new campaign is using Bitcoin wallet lures to distribute DarkComet RAT. The UPX-packed trojan gains persistence via a fake explorer.exe binary and uses keylogging and remote control to steal data.
A Critical flaw in Lite XL (CVE-2025-12120) allows RCE when opening a project: the editor automatically executes malicious .lite_project.lua files, risking developer compromise.
ASEC exposed PatoRAT, a Delphi RAT that hijacks LogMeIn Resolve and PDQ Connect RMM tools. Attackers use maliciously configured installers disguised as 7-Zip/Notepad++ to gain full system control.
Google released an urgent Chrome update (v142.0.7444.162) patching a High-severity V8 flaw (CVE-2025-13042). The "inappropriate implementation" issue risks remote code execution. Update immediately.
Broadcom partnered with CAMB.AI to develop an AI chip for real-time, on-device audio translation and dubbing in 150+ languages, promising ultra-low latency.
Apache OpenOffice 4.1.16 fixes seven security flaws, including a memory corruption bug and six issues that allow unprompted loading of remote content via documents, risking system info leak and malware delivery.
Apache patched a Critical RCE flaw (CVE-2025-59118) in OFBiz ERP that allows remote attackers to upload arbitrary files with dangerous types. A reflected XSS flaw was also fixed.
Microsoft's November Patch Tuesday fixes 68 vulnerabilities, including CVE-2025-62215, an actively exploited Windows Kernel zero-day allowing local attackers to gain SYSTEM privileges via a race condition.
A Critical (CVSS 9.3) Auth Bypass flaw (CVE-2025-64513) in Milvus Proxy allows unauthenticated attackers to gain full administrative control over the vector database cluster. Update to v2.6.5.
Rockwell patched a critical API flaw (CVE-2025-11862, CVSS 9.9) in Verve Asset Manager, allowing read-only users to escalate privileges and fully compromise OT systems.
Meta's FAIR team open-sourced Omnilingual ASR, an LLM-based system offering SOTA speech recognition for 1,600+ languages, including a "Bring Your Own Language" feature.
Samsung reportedly made last-minute Galaxy S26 dimension changes, making it slightly thicker. This suggests a potential battery upgrade for the standard model.
Google launches the "Excessive Wake Lock" metric. Apps that overuse wake locks (over 2 hours in 24 hrs) will get a red battery drain warning on the Play Store starting Mar 2026.
AI demand caused a 2-year backlog for hard drives, forcing data centers to buy QLC SSDs. This shift threatens consumer SSD supply and drives up memory prices.
Wikipedia launches a paid API for AI companies to stop web scraping and generate revenue after sophisticated AI crawlers caused an 8% drop in human traffic.
Zimbra fixes Critical Stored XSS and an Unauthenticated LFI flaw, urging users to update immediately to mitigate session hijacking and data exfiltration risks.
SAP released its Patch Day update fixing 18 flaws, including two Critical (CVSS 10.0) vulnerabilities: RMI-P4 RCE and Hard-Coded Credentials in SQL Anywhere Monitor, risking unauthenticated takeover.
Critical Synology BeeStation Zero-Day (CVE-2025-12686) Found at Pwn2Own Allows Remote Code Execution
Critical Synology BeeStation Zero-Day (CVE-2025-12686) Found at Pwn2Own Allows Remote Code Execution
Synology patched a Critical (CVSS 9.8) RCE zero-day flaw (CVE-2025-12686) in BeeStation OS. The vulnerability, found during Pwn2Own, allows remote attackers to execute arbitrary code. Update to v1.3.2-65648.
Microsoft confirms Windows 11 26H1 (Build 28000), but it's not a feature update. It's a platform build exclusively for new ARM silicon like Snapdragon X2 and NVIDIA N1X.
Mozilla unveiled Kit, a new friendly fox mascot, to represent the Firefox brand's commitment to user privacy. It will appear across new tab pages and branding.
Microsoft is testing "Haptic Signals" in Windows 11 to give subtle vibrations for UI interactions like window snapping, targeting haptic-enabled mice and trackpads.
A fierce EU debate rages over the upper 6GHz spectrum. Mobile operators want it for 6G, while the Wi-Fi Alliance says it's essential for Wi-Fi 7 performance.