Do Son Google is expanding its AI Mode search to five new languages, including Japanese and Korean. The move brings advanced, localized AI to new markets.
Plex has confirmed a data breach that exposed user data, including hashed passwords. All users are being urged to reset their passwords as a security precaution.
Intel has announced a major executive reshuffle, including the departure of a key leader and the creation of a new division, in a move to accelerate its transformation.
SanDisk is raising prices on all consumer products by 10%, a move the company blames on surging demand for flash memory from AI and data centers.
Qualcomm and Google Cloud are teaming up to bring Gemini AI and other agentic experiences to vehicles, promising a new era of smarter, connected cars.
A critical SQL injection flaw (CVE-2025-58450) in pREST allows attackers to read sensitive files, steal credentials, and manipulate databases. Patching is urgent.
A key npm maintainer's account was compromised, leading to a supply chain attack. Malicious code in popular packages is stealing crypto during transactions.
Adobe has released an emergency patch for a critical Magento flaw, SessionReaper (CVE-2025-54236). The bug could allow automated attacks against thousands of online stores.
A new phishing campaign is spreading MostereRAT, a sophisticated RAT that uses a Chinese scripting language and advanced evasion to bypass antivirus and EDR solutions.
A new report uncovers 45 previously unknown domains linked to the Chinese APT group Salt Typhoon. The findings reveal a long-term, multi-year espionage infrastructure.
A critical flaw in Spring Cloud Gateway (CVE-2025-41243) has a CVSS 10.0 score. The bug allows property modification when actuator endpoints are exposed. Update now.
A critical flaw (CVSS 9.8) in macOS file copy APIs allows apps to bypass sandboxing and TCC protections to access protected user data. A PoC is public.
Salat Stealer, a new Go-based MaaS, is hijacking browsers and crypto wallets. The malware is sold by Russian-speaking operators on the dark web.
A new report reveals a supply chain attack on Ethereum. Four malicious npm packages impersonating Flashbots were used to steal private keys and mnemonic seeds from developers.
A new report reveals TAG-150, a sophisticated new threat actor with evolving malware and a resilient multi-tiered infrastructure, including a new RAT called CastleRAT.
Mozilla has announced that it will officially end support for 32-bit Linux with Firefox 145. Versions 144 and earlier will no longer receive security updates.
Microsoft is officially discontinuing its Outlook Lite email client on October 6. Learn why they are phasing it out and what your alternatives are.
The future of Nova Launcher is in doubt after its founder, Kevin Barry, left the company, and the new owner, Branch, blocked plans to open-source the project.
Mozilla continues to extend Firefox ESR support for Windows 7, despite a small user base. This ensures that users on the outdated OS can still receive security updates.
A high-severity vulnerability (CVE-2025-9636) in pgAdmin could allow attackers to hijack OAuth flows, leading to account takeover and data breaches.
A critical vulnerability (CVE-2025-57807) was found in ImageMagick's blob subsystem, allowing attackers to corrupt memory and potentially execute arbitrary code.
Microsoft will begin enforcing mandatory MFA for all Azure resource management operations starting October 1, 2025, to enhance cloud security.