Do Son
The shift to cloud migration alters information management and security. Multi-cloud systems pose new challenges to securing...
Dell patched seven flaws in CloudLink, including two Critical bugs that allow an authenticated user to escape the restricted shell and execute arbitrary commands for system takeover. Update to v8.2.
iOS 26.2 beta code suggests Apple is enabling third-party app stores in Japan to comply with new antitrust laws. Users report accessing AltStore & Epic Games Store.
Apple will reportedly pay Google $1B annually to license Gemini AI to power the next-gen Siri's "summarizer" and "planner" functions within its Private Cloud Compute.
Apple will disable automatic Wi-Fi credential sync on Apple Watch in the EU starting with iOS 26.2. The change stems from a dispute over accessory interoperability.
Microsoft Store now supports multi-app batch installation, allowing users to select and install multiple recommended apps from a curated list in a single click.
Google Maps integrates Gemini AI, replacing Assistant for natural, complex navigation and quick task handling. New features include Landmark Directions and Google Lens integration.
Google and Epic settled their antitrust suit, proposing changes to open the Play Store. The deal mandates third-party stores, alternative payments, and new fee caps (9-20%).
Amazon issued a cease-and-desist to Perplexity's Comet AI browser, demanding it stop automated purchasing. Amazon calls it a bot; Perplexity calls it a user agent.
A Microsoft bug is forcing Windows 10/11 users into BitLocker Recovery Mode after updates. Affected Intel-based PCs need the recovery key to regain access to data.
Microsoft released an unusual Windows 11 Insider test build (26220.7052) that installs without requiring a system restart, hinting at future update process improvements.
Apple issued a DMCA takedown to GitHub, forcing the deletion of over 8,270 repositories and forks containing the leaked App Store web front-end source code.
Cisco patched two Critical flaws in Unified CCX. CVE-2025-20354 (CVSS 9.8) risks unauthenticated root RCE via Java RMI, and CVE-2025-20358 allows admin bypass via the CCX Editor application.
Google exposed AI-enabled malware like PROMPTFLUX, which uses the Gemini API to dynamically rewrite its own source code to evade detection. APT28 was seen deploying an LLM-assisted stealer.
Django released urgent patches (v5.2.8+) for a Critical SQL Injection flaw (CVE-2025-64459) affecting QuerySet methods via the _connector keyword, risking remote database compromise.
Proofpoint exposed UNK_SmudgedSerpent, an APT using RMM tools (PDQConnect) and M365 spoofs in targeted phishing campaigns against academics and foreign policy experts with complex Iranian political lures.
Google released an urgent update (v142.0.7444.134) patching three High-severity flaws: WebGPU Out-of-Bounds Write (CVE-2025-12725) and two Inappropriate Implementations in V8 and Views. Update immediately.
CISA warned of three Critical flaws (CVSS 10.0) in Radiometrics VizAir weather systems. Unauthenticated attackers can manipulate wind shear alerts and runway configurations, risking hazardous flight conditions.
Bitdefender exposed Curly COMrades (Russian APT) using Hyper-V to run a hidden Alpine Linux VM. The VM hosts the CurlyShell backdoor, effectively bypassing host-based EDR for espionage.
NVIDIA patched a High-severity EoP flaw (CVE-2025-23358) in the NVIDIA App installer for Windows. A local attacker could exploit a search path issue to achieve code execution with elevated privileges.
JPCERT exposed APT-C-60 targeting Japan via VHDX LNK files in phishing emails. The SpyGlace malware uses GitHub to fetch encrypted commands and statcounter for victim telemetry.
CISA warned of a Critical Auth Bypass flaw (CVE-2025-12108, CVSS 9.8) in Survision LPR Cameras. The lack of password enforcement allows unauthenticated attackers to gain full system access.