Do Son Microsoft's September Patch Tuesday addresses 86 flaws, including two zero-days and nine critical vulnerabilities in Windows, Office, Hyper-V, and Azure.
Google has released Chrome 140, patching two vulnerabilities including a critical use-after-free flaw in ServiceWorker and a high-severity flaw in Mojo.
Siemens has disclosed a critical flaw in its SIVaaS platform. A network share is exposed without authentication, allowing unauthenticated attackers to access or alter sensitive data.
A new AI scam network is targeting Indian social media users. It uses deepfakes of celebrities and fake news sites to promote fraudulent investment schemes.
CERT/CC warns of critical flaws in the Hiawatha web server. The vulnerabilities could allow attackers to bypass authentication and hijack sessions.
A new report reveals GONEPOSTAL, a backdoor by Russia's APT28 that hides in Outlook macros and uses email itself as a covert command-and-control channel for espionage.
The Lazarus Group is using a new campaign to steal crypto by exploiting a vulnerability (CVE-2025-48384) with fake interviews and poisoned code repositories.
A new malware strain is targeting exposed Docker APIs, evolving from a cryptominer into a stealthy botnet that blocks ports to "own" a victim's system for exclusive use.
A new report reveals North Korea's APT37 is using Rust-based malware called Rustonotto, marking a shift toward modern languages and multi-platform attacks.
Siemens has disclosed a critical flaw in its SIVaaS platform. A network share is exposed without authentication, allowing unauthenticated attackers to access or alter sensitive data.
Ivanti has released a security update for Endpoint Manager, patching two high-severity RCE flaws (CVSS 8.8) that could allow unauthenticated attackers to execute code.
First detected in early 2024, ClickFix attacks initially focused on distributing basic Remote Access Trojans (RATs) like NetSupport RAT
cybernewswire
Frankfurt am Main, Germany, 9th September 2025, CyberNewsWire
The renowned end-to-end encrypted messaging app Signal has announced the launch of a cloud backup feature, allowing...
Google Gemini now supports audio file uploads for transcription and summarization, a top-requested feature with different usage limits for free and paid users.
A new Android banking trojan, RatOn, merges overlay fraud with NFC relay attacks, automated money transfers, and crypto wallet theft, posing a new threat to users.
A critical CSRF flaw in Rockwell Stratix switches (CVE-2025-7350) could allow unauthenticated remote attackers to achieve RCE. The flaw has a CVSS score of 9.6.
Today, SAP released 21 new Security Notes and 4 updates as part of its monthly Security Patch...
A major breach at Salesloft's Drift platform exposed customer authentication tokens, leading to unauthorized access of Salesforce data at over 750 companies.
Intel's upcoming 14A process node will be more expensive than its predecessor due to the use of advanced high-NA EUV lithography machines.
Google is expanding its AI Mode search to five new languages, including Japanese and Korean. The move brings advanced, localized AI to new markets.
Plex has confirmed a data breach that exposed user data, including hashed passwords. All users are being urged to reset their passwords as a security precaution.