Microsoft blocked all known commands to skip login during Windows 11 OOBE. Users must now sign in with a Microsoft Account to complete setup.
Google launched the Gemini 2.5 Computer Use model, enabling AI agents to interact directly with web interfaces (clicking, typing) to execute complex, multi-step tasks.
The Supreme Court denied Google's appeal, forcing the company to revise Play Store policies by Oct 22. Developers must now be allowed to use alternative payment systems.
Qualcomm acquired open-source hardware platform Arduino to accelerate its Edge AI strategy. The partnership debuts the UNO Q dual-brain dev board for industrial and maker applications.
Microsoft expanded its partnership with Shizen Energy, signing three new solar PPAs for 100 MW to power its cloud/AI infrastructure, accelerating Japan's energy transition.
Meta announced a $570 Tbps "Candle" submarine cable to connect Taiwan, Japan, Philippines, Indonesia, Malaysia, and Singapore, strengthening Asia-Pacific AI data capacity by 2028.
Evernote v11 is a massive relaunch under Bending Spoons, adding an OpenAI AI Assistant and long-awaited Semantic Search to redefine the note-taking experience for users.
AWS patched a Critical (CVSS 9.3) local flaw (CVE-2025-11462) in its Client VPN for macOS. A non-admin user can gain root privileges via a symlink manipulation attack.
A Critical (CVSS 9.9) flaw (CVE-2025-44823) in Nagios Log Server allows any authenticated user to retrieve plaintext administrative API keys, leading to full system compromise. Update now.
CISA added the Zimbra XSS zero-day (CVE-2025-27915) to its KEV Catalog due to active exploitation since January. Attackers use malicious .ICS files to steal mail data.
OpenSSH (before 10.1) has a flaw (CVE-2025-61984) that allows RCE when ProxyCommand is used. Attackers exploit control characters in usernames to inject commands.
Chrome 141.0.7390.65/66 is released, patching High-severity memory flaws: CVE-2025-11458 (Sync Heap Overflow) and CVE-2025-11460 (Storage UAF), risking RCE. Update immediately.
A China-nexus APT, Mustang Panda, is targeting the Tibetan community using DLL sideloading and the EnumFontsW API to launch the stealthy Publoader backdoor and achieve persistence.
Point Wild uncovered Shuyal Stealer, a sophisticated infostealer targeting 19 browsers. It disables Windows Task Manager via a registry key and exfiltrates data via Telegram Bot API.
Wordfence warns a Critical (CVSS 9.8) flaw (CVE-2025-5947) in Service Finder Bookings is being actively exploited to bypass authentication and gain full admin access.
Explore LockBit 5.0, a new ransomware evolution with stronger obfuscation and expanded capabilities targeting critical infrastructure.
OpenAI unveils the Apps SDK, transforming ChatGPT into a powerful “super app” where users can connect apps like Spotify, Canva, and Uber.
OpenAI selected AMD as a "core strategic computing partner," adopting Instinct MI450 GPUs for a 6 GW AI infrastructure. OpenAI can acquire a 10% equity stake in AMD.
OpenAI CEO Sam Altman announced at DevDay that ChatGPT now has 800 million weekly active users, making it the world's most dominant generative AI platform.