Do Son Google Translate rolled out a Gemini-powered "Advanced" mode that sacrifices speed for higher accuracy and contextual fluency. The feature is currently limited to select language pairs like English/French/Spanish.
China's RedDrip exposed APT zero-day exploitation of Android email clients, achieving 1-click RCE via the ZipperDown flaw to steal account tokens and compromise targets around the Korean Peninsula.
A Critical RCE flaw (CVE-2025-11953, CVSS 9.8) in React Native Community CLI allows unauthenticated attackers to execute arbitrary code via a command injection in the exposed Metro Dev Server.
A Critical (CVSS 9.8) LFI flaw (CVE-2025-12493) in ShopLentor (WooCommerce Builder) allows unauthenticated attackers to run arbitrary .php files and compromise 100K+ e-commerce sites.
cybernewswire
Delaware, United States, 4th November 2025, CyberNewsWire
Google's November 2025 update fixes a Critical RCE flaw (CVE-2025-48593) in the Android System component. Exploitation requires no user interaction and affects Android versions 13 through 16.
Microsoft signed a 5-year, $9.7B deal with IREN for NVIDIA GB300 GPU compute capacity, part of a strategy to meet surging global demand for its Azure AI services.
OpenAI signed a $38B deal with AWS for cloud computing infrastructure, diversifying its resources after ending exclusivity with Microsoft. AWS gains a major AI client.
Microsoft is simplifying Windows Update names by removing OS version, date, and architecture—a change criticized by admins for degrading readability and context.
Developer @XenoPanther created a Windows 7 build that occupies just 69 MB. The ultra-compact OS successfully boots but is primarily a fascinating proof of concept.
Microsoft Authenticator will purge Entra ID credentials from jailbroken/rooted devices starting Feb 2026 to block token theft, enforcing security for enterprise accounts.
Apple unveiled a fully featured web-based App Store homepage with search, cross-platform toggles (iOS, macOS, watchOS), and a curated "Today" section.
Edge v142.0 introduces cross-platform passkey sync, letting users reuse passkeys securely across devices with a PIN, enhancing passwordless authentication.
Apple released iOS 26.1, adding a "Tinted" option to Liquid Glass for clarity, a toggle to disable the Camera gesture, and real-time translation for AirPods.
Google quietly removed the open-source Gemma AI model after it was found to fabricate defamatory claims and fake news links about U.S. Senator Marsha Blackburn.
Microsoft exposed SesameOp, an espionage backdoor that uses the OpenAI Assistants API for a covert C2 channel. The malware bypasses network defenses by blending encrypted commands with legitimate HTTPS traffic.
Redis patched a High-severity RCE flaw (CVE-2025-62507) in XACKDEL, allowing remote code execution via a stack buffer overflow on a stream ID list. The bug was discovered by Google Big Sleep.
Cyber-Enabled Cargo Theft: Hackers Hijack Logistics Firms with RMM Tools to Steal Physical Shipments
Cyber-Enabled Cargo Theft: Hackers Hijack Logistics Firms with RMM Tools to Steal Physical Shipments
Proofpoint exposed cyber-enabled cargo theft where criminals use phishing to deliver RMM tools (ScreenConnect, SimpleHelp). They hijack load boards and dispatch systems to steal physical freight worth millions.
Check Point found ChatGPT dramatically accelerates malware analysis, reducing XLoader's complex, multi-layered RC4 encryption decryption from days to hours. The AI breaks obfuscation and reveals C2 infrastructure.
Seqrite exposed Silent Lynx APT targeting Central Asia and Russia with Operation Peek-A-Baku. The group uses LNK files and GitHub to deploy Laplas reverse shells and SilentSweeper for espionage intelligence.
A serious Windows LPE flaw in DirectComposition allows local attackers to gain SYSTEM privileges by exploiting a type confusion bug leading to a controlled out-of-bounds write in kernel memory.