Do Son A critical RCE flaw in DrayTek Vigor routers can be exploited without authentication via the web interface if EasyVPN is enabled, granting remote root access.
Oracle issued an emergency alert for a Critical RCE flaw (CVE-2025-61882) in E-Business Suite that requires no authentication.
Trend Micro uncovered "Water Saci," a self-propagating malware (SORVEPOTEL) that hijacks WhatsApp Web sessions to spread aggressively and steal Brazilian banking credentials.
QNAP patches NetBak Replicator and Qsync Central. Flaws include a DLL hijacking risk and critical SQL Injection that allows remote attackers to execute code.
Apple's supply chain in India has created 350,000 jobs and grown to include 45 local partners. The entire iPhone 17 series is set to be fully assembled in India.
OpenAI’s recently launched short-video platform “Sora”—though still available only by invitation in the United States and Canada—has...
Redis patched a Critical (CVSS 10.0) RCE flaw (CVE-2025-49844) in Lua scripting. An authenticated attacker can exploit a Use-After-Free bug to gain code execution.
Cloudflare launched a Content Signals Policy to update robots.txt, giving creators machine-readable controls to specify if their content can be used for AI training or search summarization.
Apple removed ICEBlock and Google removed Red Dot after the DOJ cited safety risks to ICE agents. The apps allowed users to crowdsource agent locations.
Microsoft is internally testing a free, ad-supported tier for Xbox Cloud Gaming. The service includes pre-roll ads, limited sessions, and 1080p max resolution.
Red Hat confirmed a breach of its consulting arm's GitLab instance. Hackers stole 570 GB of data, including Customer Engagement Reports that detail client network infrastructure.
Ransomware groups are hijacking legitimate RATs like AnyDesk and Splashtop to gain stealthy persistence, spread laterally, and disable antivirus software in enterprise networks.
XWorm V6.0 has resurfaced with 35+ plugins, including ransomware functionality. The modular RAT uses stealth injection and obfuscated PowerShell to bypass AMSI.
Shahid Latif Looking for the best iPhone unlocker? Learn how iPhone unlocking evolved from jailbreak hacks to secure recovery tools like Dr.Fone. Read this guide for a safe and easy unlocking process.
A Dutch court ruled that Meta's algorithmic feed violates the DSA and ordered Meta to provide a persistent, non-algorithmic viewing option for Facebook and Instagram users.
Google announced a $4B investment in Arkansas, building its first data center in West Memphis and a 600 MW solar plant to power its expanding cloud and AI infrastructure.
A Critical (CVSS 9.8) flaw (CVE-2025-6388) in the Spirit Framework WordPress plugin is being actively exploited, allowing unauthenticated attackers to hijack admin accounts.
Yoast SEO Premium has a stored XSS flaw (CVE-2025-11241) that allows Contributor+ users to inject malicious scripts into posts. All users are urged to upgrade to v26.0 immediately.
GreyNoise observed a sudden, coordinated surge of 110 unique IPs exploiting the Grafana path traversal flaw (CVE-2021-43798), targeting only the US, Slovakia, and Taiwan.
The Cavalry Werewolf APT is using FoalShell reverse shells and StallionRAT backdoors, controlled via Telegram, to target Russian state agencies and energy/mining firms.
The Confucius APT group is evolving, abandoning WooperStealer for the sophisticated AnonDoor Python backdoor to maintain stealthy, long-term espionage in South Asia.
Cisco Talos exposed UAT-8099, a Chinese group compromising IIS servers for SEO fraud, using BadIIS malware and Cobalt Strike to steal credentials and manipulate search rankings.