Do Son Mandiant exposed UNC5142 for using EtherHiding—hiding malicious JavaScript in BNB Smart Chain smart contracts—to create a resilient C2 and distribute VIDAR/ATOMIC to 14,000+ sites.
A spamware network of 131 cloned Chrome extensions (YouSeller, Botflow) is abusing WhatsApp Web for automated messaging. The DBX Tecnologia reseller scheme affects 20K+ users.
FortiGuard exposed a cross-regional campaign that expanded to Malaysia using HoldingHands malware. The malware hijacks Task Scheduler via TimeBrokerClient.dll to achieve stealthy persistence.
NTT exposed WaterPlum APT's multi-platform OtterCandy RAT (v2), which uses Node.js for remote control, targets 7 browser extensions, and now includes anti-forensic trace deletion.
Moxa patched five critical flaws in its industrial routers, including a CVE-2025-6950 (CVSS 9.9) bug where hard-coded JWT credentials allow unauthenticated attackers to impersonate any user. Update to v3.21.
Google Project Zero disclosed a zero-click RCE flaw (CVE-2025-54957, CVSS 7.0) in Dolby's Audio Decoder. The integer overflow can be triggered by a single audio file and affects Android, iOS, and macOS.
Google exposed UNC5342 (DPRK APT) using EtherHiding—hiding JADESNOW/INVISIBLEFERRET malware in BNB/Ethereum smart contracts—for a resilient, nation-state C2 infrastructure.
Google officially terminated its Privacy Sandbox initiative due to low adoption of its new ad technologies (FLoC, Topics API). The decision marks the end of Google's plan to replace third-party cookies in Chrome.
NVIDIA CEO Jensen Huang unveiled the first Blackwell wafer produced at TSMC's Arizona fab. The move, a landmark for the US supply chain, signals volume production of the next-gen AI chip in America.
Apple signed a 5-year exclusive deal for Formula 1 US rights starting 2026. All races will stream on Apple TV, with F1 TV Pro's multi-angle features included for subscribers.
A Critical (CVSS 9.8) RCE flaw in Keras 3’s Torch backend (CVE-2025-49655) allows attackers to execute arbitrary code by loading a malicious model due to insecure deserialization.
The Wikimedia Foundation reported an 8% drop in page views, blaming AI chatbots and search summaries for siphoning traffic. It warns the decline threatens the sustainability of its volunteer community.
MinIO patched a privilege escalation flaw (CVE-2025-62506) where restricted service accounts could bypass session policies during account creation to gain full parent privileges.
CAD Assistant represents a sophisticated solution for professionals who demand reliable 3D model visualization capabilities. Originally developed...
DeepMind is partnering with CFS to optimize its SPARC fusion reactor for net energy gain (Q>1) by 2027. The AI uses TORAX simulations and AlphaEvolve agents to control extreme plasma heat.
Zimbra issued an emergency patch (v10.1.12) for a Critical SSRF vulnerability in the chat proxy that lets attackers manipulate internal server requests. Update is urged immediately.
A consortium including NVIDIA, Microsoft, and BlackRock acquired Aligned Data Centers for a record $40 billion. The move secures 5 GW of capacity for the AI Infrastructure Partnership.
Apple is poised for a major shift, with the MacBook Pro reportedly getting a Touchscreen OLED display and M6 chip in late 2026. The redesign will also eliminate the notch and retain the keyboard/trackpad.
Meta is discontinuing the Messenger desktop app for macOS/Windows on Dec 15, pushing users to the web/Facebook app. Users must enable Secure Storage to save their chat history.
Google CEO Sundar Pichai admitted at Dreamforce that ChatGPT briefly surpassed Google's AI, but insists the "Code Red" moment fueled the company's long-term pursuit of generative AI innovation.
Microsoft rolls out “Hey, Copilot” voice activation and visual context features in Windows 11. The assistant can now analyze your screen and automate system actions with optional Copilot Actions.
Spring fixed two flaws: CVE-2025-41253 allows SpEL injection in Cloud Gateway to expose secrets, and CVE-2025-41254 allows STOMP CSRF to send unauthorized WebSocket messages. Update immediately.