Do Son Microsoft released an emergency update for Windows 11 (24H2/25H2) to fix the critical bug that broke localhost/127.0.0.1 authentication for developers.
The official Xubuntu website was compromised, replacing the torrent download with a malicious Windows executable to steal data.
Tor Browser v15.0a4 removes all of Mozilla's built-in AI/ML components, prioritizing user anonymity and privacy over potential black-box risks.
Microsoft's latest Windows 11 update, KB5066835, broke USB keyboard/mouse input in the critical Windows Recovery Environment (WinRE).
A Reddit user lost 3TB of data after a Windows reinstall and automatic BitLocker encryption locked their drives without saving the recovery key.
A major AWS service outage in the US-EAST-1 region (Northern Virginia) crippled countless websites and applications, underscoring cloud dependency risks.
X is testing a new iOS feature that keeps the original post visible when users tap a link, aiming to solve low engagement rates for creators.
Apple engineers are reportedly concerned about the performance of the next-gen Siri set to debut in iOS 26.4, fearing an exodus of AI talent.
In today’s digital age, businesses depend heavily on technology to operate efficiently, but that reliance also introduces...
A Critical (CVSS 10.0) flaw in Squid proxy (CVE-2025-62168) leaks HTTP authentication credentials and security tokens through error messages.
Koi Security exposed GlassWorm, the first VSCode worm that spreads autonomously, using invisible Unicode to hide malicious code. It uses Solana blockchain and Google Calendar for a resilient C2.
SEQRITE exposed CAPI, a .NET trojan targeting Russian FinTech with malicious LNK resumes. It uses rundll32 for execution and a hidden "Security" scheduled task for persistence.
Mandiant exposed UNC5142 for using EtherHiding—hiding malicious JavaScript in BNB Smart Chain smart contracts—to create a resilient C2 and distribute VIDAR/ATOMIC to 14,000+ sites.
A spamware network of 131 cloned Chrome extensions (YouSeller, Botflow) is abusing WhatsApp Web for automated messaging. The DBX Tecnologia reseller scheme affects 20K+ users.
FortiGuard exposed a cross-regional campaign that expanded to Malaysia using HoldingHands malware. The malware hijacks Task Scheduler via TimeBrokerClient.dll to achieve stealthy persistence.
NTT exposed WaterPlum APT's multi-platform OtterCandy RAT (v2), which uses Node.js for remote control, targets 7 browser extensions, and now includes anti-forensic trace deletion.
Moxa patched five critical flaws in its industrial routers, including a CVE-2025-6950 (CVSS 9.9) bug where hard-coded JWT credentials allow unauthenticated attackers to impersonate any user. Update to v3.21.
Google Project Zero disclosed a zero-click RCE flaw (CVE-2025-54957, CVSS 7.0) in Dolby's Audio Decoder. The integer overflow can be triggered by a single audio file and affects Android, iOS, and macOS.
Google exposed UNC5342 (DPRK APT) using EtherHiding—hiding JADESNOW/INVISIBLEFERRET malware in BNB/Ethereum smart contracts—for a resilient, nation-state C2 infrastructure.
Google officially terminated its Privacy Sandbox initiative due to low adoption of its new ad technologies (FLoC, Topics API). The decision marks the end of Google's plan to replace third-party cookies in Chrome.
NVIDIA CEO Jensen Huang unveiled the first Blackwell wafer produced at TSMC's Arizona fab. The move, a landmark for the US supply chain, signals volume production of the next-gen AI chip in America.
Apple signed a 5-year exclusive deal for Formula 1 US rights starting 2026. All races will stream on Apple TV, with F1 TV Pro's multi-angle features included for subscribers.