Do Son A new campaign uses a malicious LNK shortcut sent via Discord to deploy a multi-functional RAT that hijacks legitimate Windows binaries to evade detection.
Security researcher Puja Srivastava from Sucuri uncovered two malicious files designed to guarantee persistent attacker access by...
Researchers have uncovered a Russian-linked disinformation campaign targeting Moldova’s upcoming elections, attempting to undermine its pro-EU trajectory.
A new phishing campaign is targeting PyPI maintainers with emails from a fraudulent pypi-mirror.org domain to steal credentials and compromise accounts.
A critical flaw (CVE-2025-41715) in WAGO Device Sphere allows an unauthenticated remote attacker to gain unauthorized access and potentially compromise its database.
Apple has expanded Tap to Pay on iPhone to Estonia, Latvia, Lithuania, Monaco, and Norway, allowing merchants to accept contactless payments with no extra hardware.
A new DDoS-as-a-service botnet, ShadowV2, uses GitHub CodeSpaces and Docker to mimic legitimate cloud apps, bypassing traditional defenses and enabling powerful attacks.
Microsoft has unveiled a microfluidics-based cooling system that brings fluid directly to the chip, offering up to 3x more efficiency for AI data centers.
The Secret Service has dismantled a vast telecom network near the UN capable of disabling cell towers, disrupting communications, and aiding foreign threats.
Qualcomm unveils its vision for an "AI as the UI" future, with Agentic AI and a 2028 roadmap for commercial-ready 6G mobile network solutions.
Intel is changing its graphics driver strategy, moving older 11th-14th Gen CPUs to a quarterly update schedule and ending day-one game support.
A massive 10TB unprotected database belonging to ClaimPix exposed over 5M files, including sensitive insurance records, powers of attorney, and vehicle VINs.
CISA has added a high-severity V8 zero-day (CVE-2025-10585) to its exploited vulnerabilities catalog. An urgent Chrome update is available to patch the flaw.
OpenSSF and other foundations warn that they can no longer be the unpaid gatekeepers of the software supply chain and that enterprises must contribute financially.
A high-severity flaw in the Salesforce CLI installer (CVE-2025-9844) allows for arbitrary code execution and privilege escalation on affected systems.
A critical, unpatched OnePlus flaw (CVE-2025-10184) allows any app to read SMS data without permission, breaking MFA protections. PoC is available.
Microsoft is reportedly building a pilot program to pay publishers when their content is used by its AI, signaling a new path for content monetization.
Apple has confirmed its new Digital ID feature for iOS 26 will support U.S. passports, allowing users to store a digital version in their Wallet app.
A critical XSS flaw (CVE-2025-59545) in DNN's Prompt module allows attackers to execute code and hijack admin sessions. All users must update immediately.
Cisco Talos uncovers a long-running espionage campaign using a new PlugX backdoor. The malware shows strong links to Chinese APT groups Naikon and BackdoorDiplomacy.
Zscaler ThreatLabz has uncovered a new backdoor malware, YiBackdoor, that shares extensive code with IcedID and Latrodectus and is being tested for ransomware ops.
LinkedIn will begin using user data to train its AI models by default on Nov. 3. Users must manually opt out, but data already collected will not be deleted.