Do Son OpenAI officially launched Sora for Android, allowing users to create 30 free AI-generated videos daily. The app includes audio mixing and voiceover features.
Apple is preparing an affordable MacBook model (codenamed J700) with a 12-inch LCD screen & A-series chip to compete with Chromebooks. Expected launch in 2026.
Google announced Project Suncatcher: an ambitious plan to launch TPU-equipped satellites to perform AI computing in space, harnessing limitless solar power and low temperatures.
Apple failed to disable SourceMap in its new App Store web version, inadvertently leaking the entire Svelte/TypeScript front-end codebase to the public.
Ubuntu 26.04 LTS release schedule finalized: Feature freeze Feb 19, 2026; final stable release April 23, 2026. LTS users must wait until Aug 6, 2026, to upgrade.
Microsoft fixed a bug incorrectly showing Windows 10 LTSC and ESU users that support ended. A cloud-based rollback corrects the policy automatically via the internet.
Meta launched a native WhatsApp app for Apple Watch (watchOS 10+). Users can now view full messages, send voice notes, and use E2EE without the iPhone.
A Critical (CVSS 9.8) Auth Bypass in AI Engine is actively exploited. The flaw exposes the MCP bearer token via the REST API when No-Auth URL is enabled, allowing admin takeover.
Check Point exposed four critical flaws in Microsoft Teams. Attackers could forge executive caller IDs, silently edit messages without trace, and spoof notifications for BEC and espionage.
GreyNoise tracked a coordinated cryptojacking blitz exploiting PHP RCE flaws (CVE-2024-4577, ThinkPHP) to deploy miners on cloud infrastructure. The spike is driven by high Bitcoin prices.
CERT Polska exposed NGate, an Android malware that tricks users into tapping their card against their phone to steal NFC EMV data and PINs. The data is then relayed to an ATM for cash withdrawal.
Trustwave confirmed the "Trinity of Chaos" alliance (Scattered Spider, LAPSUS$, ShinyHunters) launched a federated EaaS model for high-profile extortion, driven by performance, theatrics, and insider recruitment.
CISA added two critical, actively exploited flaws to its KEV Catalog: Gladinet LFI (CVE-2025-11371) risks RCE via machine key theft, and CWP RCE (CVE-2025-48703) allows unauthenticated admin takeover.
Google Translate rolled out a Gemini-powered "Advanced" mode that sacrifices speed for higher accuracy and contextual fluency. The feature is currently limited to select language pairs like English/French/Spanish.
China's RedDrip exposed APT zero-day exploitation of Android email clients, achieving 1-click RCE via the ZipperDown flaw to steal account tokens and compromise targets around the Korean Peninsula.
A Critical RCE flaw (CVE-2025-11953, CVSS 9.8) in React Native Community CLI allows unauthenticated attackers to execute arbitrary code via a command injection in the exposed Metro Dev Server.
A Critical (CVSS 9.8) LFI flaw (CVE-2025-12493) in ShopLentor (WooCommerce Builder) allows unauthenticated attackers to run arbitrary .php files and compromise 100K+ e-commerce sites.
cybernewswire
Delaware, United States, 4th November 2025, CyberNewsWire
Google's November 2025 update fixes a Critical RCE flaw (CVE-2025-48593) in the Android System component. Exploitation requires no user interaction and affects Android versions 13 through 16.
Microsoft signed a 5-year, $9.7B deal with IREN for NVIDIA GB300 GPU compute capacity, part of a strategy to meet surging global demand for its Azure AI services.
OpenAI signed a $38B deal with AWS for cloud computing infrastructure, diversifying its resources after ending exclusivity with Microsoft. AWS gains a major AI client.