Do Son A Chinese APT, RedNovember, is using backdoors like Pantegana and SparkRAT to expand its global espionage, targeting U.S. defense, aerospace, and tech firms.
Huntress details a multi-stage attack that uses DLL sideloading and obfuscated Python to deliver PureRAT, a commercial-grade remote access trojan linked to PXA Stealer.
A new XCSSET variant targets macOS developers by infecting Xcode projects. It now steals Firefox data, hijacks clipboards for crypto theft, and enhances its persistence.
A new Morte botnet campaign is exploiting command injection flaws to hijack SOHO routers and enterprise apps. The Loader-as-a-Service model saw a 230% spike this summer.
Russia-linked APT COLDRIVER is using a new multi-stage malware campaign (BAITSWITCH/SIMPLEFIX) with a ClickFix lure to target journalists and activists for espionage.
Shahid Latif Is your Android phone stuck saying "Authentication Required" after an update? Learn easy ways to fix this common post-update lock and regain access quickly.
Formbricks has a critical auth flaw (CVSS 9.4) in its JWT validation. Attackers can forge tokens to reset user passwords and achieve full account takeover.
Apple is internally testing a ChatGPT-like tool, codenamed "Veritas," to accelerate the development of a more capable, AI-driven Siri with personalized features.
Meta's CTO Andrew Bosworth reveals a new strategy to create a licensable robotics software platform—a move akin to Google's Android—to power humanoid AI.
Meta is launching "Meta Lab" pop-up stores in Las Vegas, LA, and NYC to give consumers hands-on demos of its new Ray-Ban Display smart glasses with a built-in heads-up display.
Google petitions the Supreme Court to pause a legal injunction that would force it to open its Play Store to third-party app stores, arguing it would cause "irreparable harm."
Trump signs an executive order to transfer TikTok's U.S. operations to American investors like Oracle, with ByteDance keeping a minority stake and the core algorithm.
OpenAI's new ChatGPT Pulse feature delivers daily, personalized updates based on your interests, chats, and calendar. The proactive AI assistant is now available for Pro users.
LockBit 5.0 resurfaces with advanced Windows, Linux, and ESXi variants, boasting heavy obfuscation and anti-forensic techniques, making it more dangerous than ever.
Salt Typhoon, a China-MSS linked APT, targets global telecoms and military networks for long-term espionage, exploiting network edge devices for future cyber warfare ops.
Rack patches CVE-2025-59830 (CVSS 7.5), a flaw where attackers could use semicolon separators to bypass the parameter count limit and trigger DoS attacks.
Apple claims the EU’s DMA is delaying features like iPhone Mirroring and increasing user security risks by forcing interoperability with third-party, non-Apple products.
Microsoft is offering Windows 10 Extended Security Updates (ESU) for free in the European Economic Area (EEA), removing conditional requirements after regulatory pressure.
Microsoft disabled certain Azure and AI services used by a unit of Israel’s Ministry of Defense after finding evidence of mass civilian surveillance in Gaza and the West Bank.Export to Sheets
A PoC has been released for two High-severity flaws in the Linux HID core, allowing malicious USB devices to leak up to 64KB of kernel memory.
Cisco patches a Critical 9.9 zero-day (CVE-2025-20333) in ASA/FTD VPN web servers. Authenticated attackers can exploit the flaw for root-level Remote Code Execution.