Do Son ConnectWise patched two high-severity flaws in Automate RMM. CVE-2025-11492 (CVSS 9.6) allows MiTM attack to intercept unencrypted agent communications and inject malicious updates. Update to 2025.9.
Cisco Talos exposed Famous Chollima using fake job offers and a trojanized Node.js app (Chessfi) to infect developers. The OtterCookie RAT steals crypto wallets, credentials, and source code.
Cisco released updates for its Desk and IP Phone series, fixing a High-severity DoS flaw (CVE-2025-20350) from buffer overflow and a Medium XSS flaw (CVE-2025-20351).
Seqrite exposed Operation Silk Lure, a campaign using a malicious Chinese resume (.LNK) to implant ValleyRAT on FinTech systems. It achieves persistence via a “Security” scheduled task and uninstalls AV.
Resecurity exposed Qilin RaaS's reliance on bulletproof hosting (BPH) in Russia/HK. The same network was linked to the Asahi Group Holdings ransomware attack that stole 27 GB of data.
Kaspersky exposed Maverick, a sophisticated fileless banking Trojan targeting Brazil. It hijacks WhatsApp Web using WPPConnect for self-propagation and installs phishing overlays to steal UPI/banking data.
Google Cloud launched Gemini Enterprise, a platform unifying models, governance, and a no-code workbench. It empowers employees to build AI agents to optimize factories and supply chains.
A new Zero-Click NTLM leak bypasses Microsoft's LNK patch, allowing unauthenticated NTLM hash theft on patched systems. The PoC works by exploiting UNC paths and the default shell32.dll icon reference.
Meta announced a $1.5B investment for a 1-gigawatt AI data center in El Paso, Texas, operational in 2028. It's part of a massive $72B CapEx plan to lead the global AI infrastructure race.
Google released Veo 3.1, an advanced AI video model with stronger prompt adherence, Image-to-Video generation from start/end frames, and a new capability for generating synchronized audio.
Apple is reportedly expanding its smart home lineup with a 7-inch smart display in 2026 and a desktop robotic device in 2027. All new devices are expected to be manufactured in Vietnam.
Japan formally requested OpenAI to stop Sora 2 from infringing on its "irreplaceable" anime and manga IP after users generated videos of Dragon Ball and Pokémon.
Apple upgraded Vision Pro ($3,499) with the M5 chip for 50% faster AI and 120Hz rendering. It debuts a Dual Knit Band for enhanced comfort and 3 hours of video playback.
Apple unveiled the M5 iPad Pro ($999+), featuring 3.5X faster AI performance, Wi-Fi 7 connectivity, and the new C1X modem for 50% faster cellular speeds. Pre-orders start today.
Apple unveiled the M5 MacBook Pro ($1,599), featuring 3.5X faster AI performance, 1.6X faster graphics, and an industry-leading 24-hour battery life. Pre-orders open now.
Broadcom is shifting VMware Workstation Pro/Fusion to year-based versioning (e.g., 25H2). The new release adds dictTool for .vmx editing, USB 3.2 support, and Hyper-V VM detection.
Apple unveiled the M5 chip built on 3nm technology with a 10-core GPU boasting 4X faster AI performance than M4. It features a 15% faster CPU and powers the new Pro devices.
ChatGPT Plus/Pro subscribers now get Automatic Memory Management. The new feature automatically deletes older memories based on priority to prevent "memory full" errors and simplify maintenance.
Wiz found 550+ secrets (PATs, API keys) leaked in 500+ VSCode extensions, enabling an attacker to push malicious updates to 100K+ developers. Dotfiles were the main culprit.
CISA added a Critical (CVSS 10.0) RCE flaw (CVE-2025-54253) in Adobe Experience Manager Forms to its KEV Catalog due to active exploitation. Patch is mandatory by Nov 5.
F5 disclosed a breach by a "highly sophisticated nation-state" that stole BIG-IP source code and internal vuln info. CISA issued an Emergency Directive mandating immediate patching of 44 flaws.
"Operation Zero Disco" exploits a critical Cisco SNMP flaw (CVE-2025-20352) to deploy Linux rootkits on switches. The malware sets a universal "disco" password and hides configuration to maintain persistence.