Do Son Elastic patched a High-severity flaw (CVE-2025-37735) in Elastic Defend for Windows. A local attacker can delete arbitrary files via the SYSTEM service, risking privilege escalation. Update to v8.19.6+.
A China-linked APT targeted a U.S. policy nonprofit for weeks in April 2025. The group used DLL sideloading via a VipreAV binary and msbuild.exe scheduled tasks to achieve SYSTEM persistence for espionage.
Medusa & DragonForce RaaS groups weaponize SimpleHelp RMM flaws (CVE-2024-57726/7/8) to gain SYSTEM-level access to customer networks. Immediate patch needed.
Kimsuky APT is using a Themes.js JavaScript loader and certutil LOLBIN to gain minute-by-minute persistence via a Windows Scheduled Task. The APT is targeting think tanks for espionage.
A High-severity LPE flaw (CVE-2025-55680) in the Windows Cloud Files Driver allows local users to gain SYSTEM privileges by exploiting a TOCTOU race condition. Patch immediately.
It is not only a daily routine matter, but also a business-running activity to the decision-maker, office...
Snap partners with AI search startup Perplexity in a $400M deal to integrate advanced search into the Snapchat chatbot "My AI," enhancing Q&A capabilities.
Valve rolls out a major redesign of the Steam Store pages to all users, introducing a wider 1200px layout, "Theater Mode" for trailers, and higher-resolution images.
Sen. Warren's report blasts Republican tax breaks for tech giants, showing Microsoft, Amazon, and Alphabet's savings could fund food or healthcare for millions of families.
Denmark plans to introduce legislation banning social media use for those under 15—one of the world's strictest measures—sparking debate over enforcement and privacy.
QNAP patched 7 zero-day flaws in QTS/QuTS hero and apps (HBS 3, Malware Remover) after being hacked by researchers at Pwn2Own Ireland 2025. Update urgently.
Google Gemini's Deep Research now integrates Gmail, Drive, & Docs content to create personalized reports. Users maintain full control over which data the AI accesses.
Meta committed $600B to US infrastructure by 2028, primarily for AI data centers. The figure was confirmed following a "hot-mic" moment between Zuckerberg and Trump.
Google launches Ironwood, its 7th-gen TPU, promising 4x Trillium performance, 42.5 EFLOPS per pod, and 1.77 PB shared HBM to power Agentic AI models like Claude.
Large language models can generate impressive text, answer questions, and engage in conversation. But until recently, they...
OFAC sanctioned 8 individuals and 2 banks linked to North Korea for laundering millions in stolen crypto and IT earnings to fund Pyongyang's WMD and missile programs.
OCI patched three critical runc flaws allowing container escape and host DoS/RCE. Attackers exploit mount race conditions in maskedPaths and /dev/console bind-mounts. Update to v1.2.8+.
Sekoia exposed a campaign exploiting compromised Booking.com/Expedia accounts to deliver PureRAT malware via a ClickFix lure. Attackers use authentic reservation details to steal guest credentials.
High-Severity Cisco ISE Flaw (CVE-2025-20343) Allows Unauthenticated DoS via Crafted RADIUS Requests
High-Severity Cisco ISE Flaw (CVE-2025-20343) Allows Unauthenticated DoS via Crafted RADIUS Requests
Cisco patched a High-severity DoS flaw (CVE-2025-20343) in ISE that allows unauthenticated remote attackers to crash the server via crafted RADIUS requests. Disable the Reject setting as a workaround.
Darktrace exposed a DragonForce RaaS attack on a manufacturer. The multi-phase intrusion used brute force and OpenVAS for recon, then exfiltrated data over SSH to a Russian-based malicious host.
AWS patched a High-severity flaw (CVE-2025-12779) in the WorkSpaces client for Linux. A local user can extract DCV authentication tokens to hijack another user’s virtual desktop session. Update to v2025.0.
ASEC exposed Cephalus, a Go-based RaaS group attacking RDP. The malware uses VirtualLock, XOR encryption, and a fake AES key pattern to severely complicate memory and forensic analysis.