Do Son Broadcom has patched three flaws in VMware Aria Operations and VMware Tools. The vulnerabilities include privilege escalation and information disclosure.
A new PoC reveals a race condition in Qualcomm's KGSL GPU driver (CVE-2024-38399). Two threads can access the same list simultaneously, leading to a Use-After-Free vulnerability.
Stormshield CTI uncovers ongoing APT35 phishing infrastructure impersonating video conferencing services to target organizations in Israel and other regions.
NCSC exposes RayInitiator, a bootkit for Cisco ASA 5500-X devices without Secure Boot, which deploys the LINE VIPER shellcode loader for persistent and stealthy attacks.
Silent Push details how cybercriminals and APTs are misusing DDNS services for stealthy C2 servers, phishing, and malware delivery. Dozens of high-profile groups are involved.
The new infostealer Acreed is rapidly gaining market share post-Lumma takedown. It uses BNB Smart Chain and Steam profiles for C2, with a focus on crypto theft.
Olymp Loader, a new assembly-based MaaS, has emerged in underground markets. It's a turnkey solution for cybercriminals, with stealth and persistence features.
Apple is updating its retail cleaning protocols and MagSafe display stands to prevent marks on the new iPhone 17 Pro, which were being mistaken for scratches.
Elon Musk says Tesla's Optimus robot could make up 80% of the company's value, but the path to mass production faces major technical and manufacturing challenges.
cybernewswire
Singapore, Singapore, 29th September 2025, CyberNewsWire
A public PoC has been released for CVE-2025-24085, a zero-day flaw in Apple's Core Media framework that allows a malicious app to elevate its privileges. Update now.
New experimental flags in Microsoft Edge suggest that Microsoft may soon allow Windows Search results to open in your default browser and search engine.
Mark Gurman reports Apple is nearing mass production of M5 MacBook Pro and MacBook Air models. A new Studio Display refresh is also expected in early 2026.
Microsoft is testing a new Photos app update for Copilot+ PCs that uses on-device AI to automatically categorize images like screenshots and receipts, keeping data private.
Domain registrar NameCheap is raising prices on 231 domains, including .NEWS, .LIVE, and .WORLD, beginning Oct. 6, 2025. Renew now to avoid the price hike.
SUSE patches three flaws in Rancher Manager. A phishing vulnerability (CVSS 8.1) can steal admin tokens, while a DoS flaw can lock out administrators.
Meta has launched Vibes, a new platform for creating and sharing AI-generated short videos. It's an all-in-one app that rivals TikTok and Instagram Reels.
Google mandates a 16KB memory page size for all Android apps by Nov. 1, 2025, to improve performance. .NET MAUI 9 now natively supports the new standard.
The TamperedChef malware campaign uses trojanized apps and digitally signed binaries to steal browser data. Attackers use SEO poisoning to trick users into downloading.
A phishing campaign is impersonating Ukrainian police via malicious SVG files to deliver Amatera Stealer and PureMiner, a stealthy cryptominer, to victims.
A new DarkCloud infostealer variant uses VB6 obfuscation and anti-analysis techniques to steal credentials and crypto wallets from MetaMask, Exodus, and more.
A new report shows LAPSUS$, Scattered Spider, and ShinyHunters have formed a collaborative alliance, sharing tactics like social engineering and MFA bypass to launch global attacks.