Do Son Apple is reportedly expanding its smart home lineup with a 7-inch smart display in 2026 and a desktop robotic device in 2027. All new devices are expected to be manufactured in Vietnam.
Japan formally requested OpenAI to stop Sora 2 from infringing on its "irreplaceable" anime and manga IP after users generated videos of Dragon Ball and Pokémon.
Apple upgraded Vision Pro ($3,499) with the M5 chip for 50% faster AI and 120Hz rendering. It debuts a Dual Knit Band for enhanced comfort and 3 hours of video playback.
Apple unveiled the M5 iPad Pro ($999+), featuring 3.5X faster AI performance, Wi-Fi 7 connectivity, and the new C1X modem for 50% faster cellular speeds. Pre-orders start today.
Apple unveiled the M5 MacBook Pro ($1,599), featuring 3.5X faster AI performance, 1.6X faster graphics, and an industry-leading 24-hour battery life. Pre-orders open now.
Broadcom is shifting VMware Workstation Pro/Fusion to year-based versioning (e.g., 25H2). The new release adds dictTool for .vmx editing, USB 3.2 support, and Hyper-V VM detection.
Apple unveiled the M5 chip built on 3nm technology with a 10-core GPU boasting 4X faster AI performance than M4. It features a 15% faster CPU and powers the new Pro devices.
ChatGPT Plus/Pro subscribers now get Automatic Memory Management. The new feature automatically deletes older memories based on priority to prevent "memory full" errors and simplify maintenance.
Wiz found 550+ secrets (PATs, API keys) leaked in 500+ VSCode extensions, enabling an attacker to push malicious updates to 100K+ developers. Dotfiles were the main culprit.
CISA added a Critical (CVSS 10.0) RCE flaw (CVE-2025-54253) in Adobe Experience Manager Forms to its KEV Catalog due to active exploitation. Patch is mandatory by Nov 5.
F5 disclosed a breach by a "highly sophisticated nation-state" that stole BIG-IP source code and internal vuln info. CISA issued an Emergency Directive mandating immediate patching of 44 flaws.
"Operation Zero Disco" exploits a critical Cisco SNMP flaw (CVE-2025-20352) to deploy Linux rootkits on switches. The malware sets a universal "disco" password and hides configuration to maintain persistence.
Samba released an urgent fix for a Critical (CVSS 10.0) RCE flaw (CVE-2025-10230) allowing unauthenticated command injection on AD DCs when the WINS hook is enabled. Update to 4.23.2.
Unit 42 exposed PhantomVAI Loader, a stealthy MaaS tool that uses steganography (hiding DLL in images) and VM detection to deploy Katz Stealer in MSBuild.exe and exfiltrate crypto credentials globally.
Symantec exposed China's Jewelbug APT in an unprecedented 5-month intrusion on a Russian IT provider. The group used Yandex Cloud for data exfiltration and Graph API for stealthy C2 via custom malware.
Apache issued a critical fix for ActiveMQ NMS AMQP Client (CVE-2025-54539). The deserialization flaw allows untrusted AMQP servers to execute remote code on client systems.
Multiple major online services, including YouTube, X/Twitter, and Steam, suffered simultaneous outages suspected to be caused by a temporary datacenter route failure primarily affecting the U.S. East Coast.
Kaspersky exposed the Mysterious Elephant APT targeting South Asia. The group uses MemLoader and custom tools (BabShell) to steal sensitive WhatsApp desktop data and exfiltrate documents.
ReliaQuest exposed Flax Typhoon for a year-long breach, where the China-backed APT turned a legitimate ArcGIS Java SOE into a web shell and embedded it in backups to ensure persistence.
cybernewswire
New York, United States, 15th October 2025, CyberNewsWire
New York, USA, New York, 15th October 2025, CyberNewsWire
Samsung will unveil Project Moohan (expected as Galaxy XR) at its "Worlds Wide Open" event on Oct 21. The headset runs on the Android XR platform co-developed with Google and Qualcomm.