Do Son Akira ransomware is actively exploiting the unpatched/misconfigured SonicWall flaw (CVE-2024-40766) and using the rare "UnPAC the Hash" Kerberos technique for lateral movement.
Apple overhauled its Security Bounty program, offering a $2M base reward (up to $5M with bonuses) for zero-click exploits that match mercenary spyware attacks and bypass Lockdown Mode.
The UK's CMA gave Google Strategic Market Status (SMS) over its 90% search dominance. The designation grants the regulator new powers to mandate changes in Google's search and AI services.
A Critical (CVSS 9.4) flaw in Happy DOM allows untrusted JavaScript to escape the Node.js VM context and achieve RCE on the host system via the Function inheritance chain.
The Zero Day Initiative (ZDI) has published details of two critical vulnerabilities in the popular open-source compression...
North Korean actors launched "Contagious Interview," flooding npm with 338 malicious packages to deliver BeaverTail/InvisibleFerret. The campaign targets Web3 developers via fake job offers.
China's SAMR launched an antitrust probe into Qualcomm for acquiring Autotalks without filing a mandatory "operator concentration declaration," violating the Anti-Monopoly Law.
OpenAI's Sora video app hit 1 million downloads in under five days, faster than ChatGPT, despite being invite-only. The platform quickly introduced controls amid copyright concerns.
Microsoft Finally Fixes Windows 11 Bug Causing PCs to Auto-Restart Instead of ‘Update and Shut Down’
Microsoft Finally Fixes Windows 11 Bug Causing PCs to Auto-Restart Instead of ‘Update and Shut Down’
Microsoft is patching a Windows 11 bug that caused PCs to automatically restart after selecting "Update and shut down" instead of powering off. The fix is rolling out now to Insiders.
The US-sanctioned NSO Group, maker of Pegasus spyware, was acquired by an American investment firm for "tens of millions." The deal will keep operations in Israel but may lift sanctions.
Socket’s Threat Research Team has uncovered a massive supply-chain abuse campaign leveraging npm’s public registry and unpkg.com’s...
cybernewswire 
A UAF flaw in the Linux kernel TLS subsystem allows a low-privileged user to gain RCE by exploiting memory corruption during asynchronous decryption.
Google has confirmed that the Gemini Nano on-device AI model is blocked from running on Android devices with an unlocked bootloader, citing a feature not found error.
Google/Mandiant linked CL0P extortion to a Zero-Day RCE flaw (CVE-2025-61882) in Oracle E-Business Suite. Attackers exploited the bug since July to steal corporate data and deploy GOLDVEIN Java shells.
A Zero-Day LFI flaw (CVE-2025-11371) in Gladinet/Triofox is being actively exploited. Attackers retrieve the Web.config machine key to chain into an unauthenticated RCE exploit.
NVIDIA released an urgent update for its GPU Display Driver, fixing multiple high-severity flaws including RCE via an uncontrolled DLL loading path (CVE-2025-23309). Update now.
Trend Micro discovered RondoDox, a new botnet leveraging 50+ exploits (including the Pwn2Own TP-Link flaw) in an "exploit shotgun" approach to compromise routers, DVRs, and IoT globally.
Cisco Talos confirms Storm-2603 is abusing the DFIR tool Velociraptor for persistence and arbitrary code execution, deploying LockBit and Babuk ransomware against VMware and Windows servers.
MediaTek's October Security Bulletin discloses multiple High-severity flaws in its WLAN and GNSS chipsets, including buffer and stack overflows that risk RCE via memory corruption.
Expel uncovered a phishing attack using Cache Smuggling to deliver malware. The technique uses a fake Fortinet lure and PowerShell to execute a payload staged in the browser's cache, bypassing network detection.
Researchers from Palo Alto Networks Unit 42 have discovered a new phishing trend where attackers trick victims...