Do Son A critical flaw in LangChainGo, a popular LLM framework, allows attackers to read sensitive files via server-side template injection. A patch has been released.
A new report reveals a major surge in phishing attacks targeting U.S. energy companies like Chevron, using cloned websites to steal credentials and financial data.
IBM X-Force reveals new findings on Hive0154, a China-aligned threat actor using an upgraded Toneshell backdoor and a new USB worm to target organizations.
Researchers have found a new Spectre-like attack called VMScape that allows a malicious VM to steal data from a hypervisor on Intel and AMD CPUs.
Trend Micro reveals a new global malware campaign, EvilAI, that impersonates productivity and AI tools to infiltrate organizations and steal data.
Apple's new N1 network chip for the iPhone has a key Wi-Fi 7 limitation, capping bandwidth at 160 MHz. This affects peak performance despite the upgrade.
At the recently held Apple “Awe Dropping” Fall Event, Apple unveiled a groundbreaking feature for the Apple...
New patches for CUPS, the open-source Linux printing system, fix two flaws that can lead to remote DoS and authentication bypass.
Microsoft is testing a full-screen "SCOOBE" interface in Windows 11 to remind users about Microsoft 365 subscriptions, and it may block access to the desktop.
Microsoft announced on its official blog that developers can now publish applications on the Microsoft Store free...
Microsoft Edge's new AI feature offers real-time video translation into your native language with audio output. Discover how this tech works and the hardware requirements.
Microsoft settles an EU antitrust case by agreeing to unbundle Teams from its Office suites, avoiding a massive fine and opening up the market.
Corsair has agreed to a $5.5M settlement over claims of misleading memory speed advertising. Find out who is eligible for compensation and how to file a claim.
The FTC is investigating Google and Amazon's online ad practices. The probe focuses on whether the tech giants misled advertisers on pricing and auction transparency.
A new Go-based remote access trojan, ZynorRAT, is targeting Linux and Windows. Its unique command and control is managed entirely through a Telegram bot.
OpenAI and Microsoft have reached a new agreement that gives both companies equal equity stakes, solidifying a long-term partnership in AI development.
After almost 30 years, Microsoft is retiring VBScript. The legacy language will be phased out of Windows by 2027, posing a challenge for enterprises.
After an 8-year wait, Firefox is finally adding native support for MKV video. The feature is available in Nightly builds and will support AVC/H.264 and AAC codecs.
Apple has issued new spyware alerts to French officials, journalists, and activists. These warnings are often tied to highly sophisticated, zero-click attacks.
The FTC has launched an investigation into AI chatbot companies to examine how their products affect children and to learn what safeguards are in place.
CISA has issued an advisory for a critical flaw in Daikin Security Gateway devices that could allow attackers to bypass authentication and gain full access.
A new vulnerability (CVE-2025-58754) in the Axios library could allow attackers to crash Node.js processes via crafted data: URIs, leading to a denial-of-service.