Do Son WARMCOOKIE has resurfaced post-Operation Endgame with new execution handlers, a MaaS model, and evasive techniques like disguised scheduled tasks using company names.
A High-severity TOCTOU race condition (CVE-2025-38352) in the Linux/Android POSIX CPU Timer subsystem can lead to kernel crashes and privilege escalation.
A high-severity flaw in the Linux ethtool netlink interface (CVE-2025-21701) enables a Use-After-Free attack to gain root privileges. A PoC has been publicly released.
Samsung announced a strategic partnership with OpenAI to supply high-performance DRAM and collaborate on global AI infrastructure, including the massive "Stargate" data center project.
Microsoft is rebranding Xbox Game Pass tiers. The Ultimate plan jumps to $29.99/month with the addition of Ubisoft+ Classics and Fortnite Crew, and enhanced 1440p cloud gaming.
Meta announced a new policy to use user-AI conversations for personalized ads and content recommendations on Facebook/Instagram. The change takes effect Dec. 16.
Google is overhauling its smart home: Gemini for Home replaces Assistant, powering new Echo speakers and Nest Cams with contextual AI, automation, and a faster app.
A U.S. court dismissed Arm's remaining lawsuit against Qualcomm and Nuvia, granting Qualcomm a "complete victory" and clearing the way for its high-performance CPU cores.
A critical flaw (CVE-2025-59951) in the Termix Docker image's reverse proxy logic allows unauthenticated attackers to steal sensitive SSH host credentials. Update to v1.7.0 now.
Google promoted Chrome 141 to Stable, patching 21 flaws including a High-severity Heap Buffer Overflow (CVE-2025-11205) in WebGPU that could lead to RCE.
Unit 42 disclosed a Critical unauthenticated RCE flaw (CVE-2025-52906) in TOTOLINK X6000R routers, allowing remote attackers to execute arbitrary commands. Update immediately.
Splunk issued patches for six flaws, including a High-severity blind SSRF (CVE-2025-20371) and XSS issues that could allow attackers to access sensitive data and crash the platform.
The Django team released urgent updates (v5.2.7, 5.1.13, 4.2.25) to fix a High-severity SQL Injection flaw (CVE-2025-59681) affecting QuerySet methods in MySQL/MariaDB.
Rhadamanthys stealer's v0.9.2 update adds new anti-analysis checks, a custom executable format, and uses noisy PNG files for payload delivery to bypass security tools.
Argo CD patches multiple High-severity DoS flaws. A single unauthenticated webhook request can crash the entire argocd-server process via improper JSON handling.
The Detour Dog campaign is using DNS TXT records for stealthy C2, infecting thousands of websites and quickly shifting infrastructure to evade sinkholing efforts.
Russian-speaking Lunar Spider group is using the sophisticated Latrodectus V2 loader and a FakeCaptcha lure to gain initial access for ransomware operations.
CISA warns of a Critical RCE flaw (CVSS 9.8) in Megasys Telenium Online Web Application. The vulnerability allows unauthenticated attackers to execute arbitrary OS commands.
A critical flaw (CVE-2025-10725) in Red Hat OpenShift AI allows low-privileged users to escalate to full cluster admin privileges, risking complete platform compromise.
NVIDIA patched multiple flaws, including a critical DLS bug (CVSS 8.7) allowing unauthenticated access and DoS, and a privilege escalation flaw (CVSS 7.8) in the NVIDIA App.
Amazon unveils Alexa+, an AI-powered upgrade for Echo, Fire TV, and Kindle, evolving from voice commands to a true digital concierge.
OpenAI launched Sora, a new short-video platform built on its Sora 2 model that generates video and audio content. The AI-first service is currently invite-only on iOS.