Do Son LineageOS 23.0, based on Android 16 QPR0, introduces a rewritten Camera app, the Catapult TV Launcher to remove ads, and enhanced virtualization capabilities.
Oracle issued an emergency alert for a critical flaw (CVE-2025-61884) in E-Business Suite. The bug allows unauthenticated remote access to sensitive EBS resources.
FortiGuard Labs identified a new Stealit malware variant abusing Node.js SEA for stealthy distribution. The campaign features a public C2 panel and uses Telegram for data exfiltration.
Forescout found pro-Russian hacktivist group TwoNet fabricated critical infrastructure attacks after compromising a honeypot, exploiting a default login, and pushing the false claim on Telegram.
A Critical RCE flaw (CVE-2025-61929) in Cherry Studio allows attackers to execute arbitrary commands by exploiting a one-click weakness in its custom URL protocol handler.
Microsoft warns of Storm-2657, a financial crime group exploiting MFA flaws to hijack university employee accounts, rerouting salary payments through third-party HR platforms like Workday.
A Critical (CVSS 9.3) flaw (CVE-2025-61928) in Better Auth allows unauthenticated attackers to create/modify API keys for any user, risking full account compromise.
Trend Micro discovered that Axis Communications leaked hardcoded Azure SAS tokens in a signed DLL for its Autodesk Revit plugin, exposing three cloud storage accounts to unauthorized access.
A malware campaign is spoofing Homebrew installer websites to trick macOS developers. The sites use clipboard injection to hide a malicious payload alongside the install command.
GreyNoise warns of a massive, synchronized RDP botnet using 100,000+ IPs from over 100 countries for RDP scanning and enumeration, with US infrastructure as the primary target.
eSentire discovered ChaosBot, a Rust-based malware deployed via DLL sideloading that uses Discord channels as a covert C2 platform to perform reconnaissance and command execution.
DomainTools exposed a Cryptocurrency Drain Conspiracy using a single IP to host scams like MedAI Genesis. Attackers use copied CSS and malicious MobileConfig profiles to drain crypto wallets.
Akira ransomware is actively exploiting the unpatched/misconfigured SonicWall flaw (CVE-2024-40766) and using the rare "UnPAC the Hash" Kerberos technique for lateral movement.
Apple overhauled its Security Bounty program, offering a $2M base reward (up to $5M with bonuses) for zero-click exploits that match mercenary spyware attacks and bypass Lockdown Mode.
The UK's CMA gave Google Strategic Market Status (SMS) over its 90% search dominance. The designation grants the regulator new powers to mandate changes in Google's search and AI services.
A Critical (CVSS 9.4) flaw in Happy DOM allows untrusted JavaScript to escape the Node.js VM context and achieve RCE on the host system via the Function inheritance chain.
The Zero Day Initiative (ZDI) has published details of two critical vulnerabilities in the popular open-source compression...
North Korean actors launched "Contagious Interview," flooding npm with 338 malicious packages to deliver BeaverTail/InvisibleFerret. The campaign targets Web3 developers via fake job offers.
China's SAMR launched an antitrust probe into Qualcomm for acquiring Autotalks without filing a mandatory "operator concentration declaration," violating the Anti-Monopoly Law.
OpenAI's Sora video app hit 1 million downloads in under five days, faster than ChatGPT, despite being invite-only. The platform quickly introduced controls amid copyright concerns.
Microsoft Finally Fixes Windows 11 Bug Causing PCs to Auto-Restart Instead of ‘Update and Shut Down’
Microsoft Finally Fixes Windows 11 Bug Causing PCs to Auto-Restart Instead of ‘Update and Shut Down’
Microsoft is patching a Windows 11 bug that caused PCs to automatically restart after selecting "Update and shut down" instead of powering off. The fix is rolling out now to Insiders.
The US-sanctioned NSO Group, maker of Pegasus spyware, was acquired by an American investment firm for "tens of millions." The deal will keep operations in Israel but may lift sanctions.