Figma CEO Dylan Field says AI isn't a job threat; a company survey shows 60% of professionals are shifting to higher-value work thanks to AI.
OpenAI launches "ChatGPT Login" allowing users to pay third-party service API costs using their query quota, creating a new AI-centered ecosystem.
A Critical RCE flaw (CVE-2025-61932, CVSS 9.8) in Lanscope Endpoint Manager (v9.4.7.1 and earlier) is actively exploited via malicious packets.
TP-Link patched four critical RCE/command injection flaws in its Omada gateways. CVE-2025-6542 (CVSS 9.3) allows unauthenticated remote OS command execution. Update firmware immediately.
iOS 26.1 Beta 4 introduces a new setting to disable the lock screen swipe-to-open Camera gesture, preventing accidental launches and battery drain.
Microsoft has patched a critical 9.9/10 ASP.NET Core Kestrel vulnerability (CVE-2025-55315) that allows unauthenticated HTTP request smuggling.
Microsoft released emergency update KB5070773 to fix a critical bug where USB keyboards/mice failed in Windows Recovery Environment (WinRE).
A patched 7-Zip path-traversal flaw (RCE) now has public exploit code. Users must update immediately, as 7-Zip lacks auto-updates.
Microsoft's new PowerToys "Light Switch" feature, designed for automatic theme switching, is causing systems to rapidly flicker between light and dark modes.
Microsoft released an emergency update for Windows 11 (24H2/25H2) to fix the critical bug that broke localhost/127.0.0.1 authentication for developers.
The official Xubuntu website was compromised, replacing the torrent download with a malicious Windows executable to steal data.
Tor Browser v15.0a4 removes all of Mozilla's built-in AI/ML components, prioritizing user anonymity and privacy over potential black-box risks.
Microsoft's latest Windows 11 update, KB5066835, broke USB keyboard/mouse input in the critical Windows Recovery Environment (WinRE).
A Reddit user lost 3TB of data after a Windows reinstall and automatic BitLocker encryption locked their drives without saving the recovery key.
A major AWS service outage in the US-EAST-1 region (Northern Virginia) crippled countless websites and applications, underscoring cloud dependency risks.
X is testing a new iOS feature that keeps the original post visible when users tap a link, aiming to solve low engagement rates for creators.
Apple engineers are reportedly concerned about the performance of the next-gen Siri set to debut in iOS 26.4, fearing an exodus of AI talent.
A Critical (CVSS 10.0) flaw in Squid proxy (CVE-2025-62168) leaks HTTP authentication credentials and security tokens through error messages.
Koi Security exposed GlassWorm, the first VSCode worm that spreads autonomously, using invisible Unicode to hide malicious code. It uses Solana blockchain and Google Calendar for a resilient C2.
SEQRITE exposed CAPI, a .NET trojan targeting Russian FinTech with malicious LNK resumes. It uses rundll32 for execution and a hidden "Security" scheduled task for persistence.