Do Son CISA adds XWiki (CVE-2025-24893) and VMware (CVE-2025-41244) to its KEV Catalog after confirming active exploitation in the wild.
Netflix explores vertical video and podcast integration, signaling a new era of mobile entertainment without mimicking TikTok’s model.
The Brash exploit leverages a missing rate limit on Chromium's document.title API to trigger a Denial-of-Service attack, crashing browsers in seconds.
Samsung launched the Samsung Internet browser beta for Windows 10/11, featuring cross-device sync and Galaxy AI capabilities to advance its ambient AI ecosystem vision.
Google opened the US Play Store to external payment methods and alternative app downloads, a temporary measure following a US court mandate in the Epic Games antitrust case.
Urgent! DNN Platform has a Critical CVSS 10.0 flaw allowing unauthenticated users to overwrite files, leading to site defacement & XSS. Update to 10.1.1.
Wordfence exposed a Magecart campaign using a rogue WooCommerce plugin to hide skimmer code in a fake PNG image. The malware uses an AJAX backdoor to maintain access and steal customer cards.
Koi Security exposed PhantomRaven, an npm supply chain attack using 126 packages. It leverages Remote Dynamic Dependencies (RDD) and AI slopsquatting to steal GitHub/CI/CD secrets from 86,000+ downloads.
XLab exposed RPX_Client, a new PolarEdge malware that turns IoT/router devices into a global ORB proxy network. The ELF binary uses XOR to encrypt config and spreads across 40 countries.
Unit 42 exposed Airstalk, a suspected nation-state malware that abuses VMware AirWatch (MDM) APIs for a covert C2 dead drop. The tool is used to steal credentials and browser data in supply chain attacks.
Symantec exposed a Russian-aligned espionage campaign in Ukraine using LotL tactics. Attackers used a Sandworm-linked webshell (Localolive) and abused scheduled tasks to dump credentials and bypass Windows Defender.
Progress patched a High-severity DoS flaw (CVE-2025-10932) in MOVEit Transfer’s AS2 module. The vulnerability allows unauthenticated attackers to exhaust server resources. Patch to v2025.0.3 immediately.
cybernewswire
Silver Spring, USA/ Maryland, 30th October 2025, CyberNewsWire
Microsoft Q1 FY26 revenue hit $77.7B, driven by 40% Azure growth and Copilot adoption, despite a $3.1B loss related to its $500B-valued OpenAI stake.
Microsoft's Azure cloud suffered an outage caused by a Front Door configuration change, disrupting Microsoft 365, Xbox, and customer services globally.
OpenAI expanded the Sora App to Asia, featuring the popular 'Cameos' tool and strict copyright safeguards after calls from the Japanese government.
OpenAI released the GPT-OSS-SafeGuard models under Apache 2.0, enabling developers to apply custom safety policies at inference time with a transparent reasoning trace.
The Cameo celebrity platform sued OpenAI for trademark infringement over its Sora feature, arguing the name for AI-generated likenesses causes confusion and harms its brand.
Microsoft released a Liquid Glass UI update for its iOS apps, featuring a translucent, floating navigation bar that aligns with Apple's modern design language.
Grammarly has rebranded to Superhuman and launched Superhuman Go, a new AI assistant that unifies Grammarly, Superhuman Mail, and Coda for cross-app automation.
Meta Description: Microsoft released the KB5067036 preview fix for a two-year-old bug where "Update and Shut Down" unexpectedly caused a reboot instead of powering off.
Jenkins warned of a Critical SAML Plugin flaw (CVE-2025-64131) that allows session replay/hijacking due to a missing cache. Multiple plugins also expose API tokens in plaintext.