Ming-Chi Kuo reports that the iPhone Fold's critical hinge mechanism cost has been reduced to $70-$80 per unit, improving profit margins and accelerating its mass production feasibility.
MIT & Toyota unveiled Steerable Scene Generation, an AI tool that uses Monte Carlo Tree Search (MCTS) to autonomously create 44M+ realistic 3D virtual scenes for training robots.
Windows Copilot's new Connector feature allows users to link Google (Gmail, Drive, Calendar) and Microsoft cloud accounts, enabling cross-platform AI search and document generation.
Apple is expected to unveil the M5 iPad Pro, updated Vision Pro, and 14-inch MacBook Pro this week via press release. Leaks show the M5 chip is up to 36% faster in GPU performance.
Mark Gurman reveals Apple is developing the H3 chip for future AirPods, including a special camera-equipped Pro edition planned for 2026 to enhance Vision Pro and AI integration.
OpenAI Wins Reprieve: Court Vacates Order Forcing Indefinite Preservation of All ChatGPT Output Data
A US federal court vacated the controversial order requiring OpenAI to indefinitely preserve all ChatGPT output data in The New York Times copyright infringement lawsuit.
Apple has officially discontinued its Clips short-form video app, removing it from the App Store. Existing users can redownload it but are advised to back up unsaved projects.
Microsoft offers Windows 10 ESU free for one year, but users must enroll via a Microsoft account and enable OneDrive cloud backup, signaling a push toward cloud integration.
Mozilla is developing a new, browser-only Firefox VPN feature, similar to IP Protection, that will encrypt in-browser traffic and conceal the user's IP address as a premium subscription service.
LineageOS 23.0, based on Android 16 QPR0, introduces a rewritten Camera app, the Catapult TV Launcher to remove ads, and enhanced virtualization capabilities.
Oracle issued an emergency alert for a critical flaw (CVE-2025-61884) in E-Business Suite. The bug allows unauthenticated remote access to sensitive EBS resources.
FortiGuard Labs identified a new Stealit malware variant abusing Node.js SEA for stealthy distribution. The campaign features a public C2 panel and uses Telegram for data exfiltration.
Forescout found pro-Russian hacktivist group TwoNet fabricated critical infrastructure attacks after compromising a honeypot, exploiting a default login, and pushing the false claim on Telegram.
A Critical RCE flaw (CVE-2025-61929) in Cherry Studio allows attackers to execute arbitrary commands by exploiting a one-click weakness in its custom URL protocol handler.
Microsoft warns of Storm-2657, a financial crime group exploiting MFA flaws to hijack university employee accounts, rerouting salary payments through third-party HR platforms like Workday.
A Critical (CVSS 9.3) flaw (CVE-2025-61928) in Better Auth allows unauthenticated attackers to create/modify API keys for any user, risking full account compromise.
Trend Micro discovered that Axis Communications leaked hardcoded Azure SAS tokens in a signed DLL for its Autodesk Revit plugin, exposing three cloud storage accounts to unauthorized access.
A malware campaign is spoofing Homebrew installer websites to trick macOS developers. The sites use clipboard injection to hide a malicious payload alongside the install command.
GreyNoise warns of a massive, synchronized RDP botnet using 100,000+ IPs from over 100 countries for RDP scanning and enumeration, with US infrastructure as the primary target.
eSentire discovered ChaosBot, a Rust-based malware deployed via DLL sideloading that uses Discord channels as a covert C2 platform to perform reconnaissance and command execution.
DomainTools exposed a Cryptocurrency Drain Conspiracy using a single IP to host scams like MedAI Genesis. Attackers use copied CSS and malicious MobileConfig profiles to drain crypto wallets.