Do Son A new vulnerability in Apache Jackrabbit (CVE-2025-58782) exposes enterprise systems to JNDI injection, which could lead to remote code execution.
Microsoft is giving a free one-year subscription to Microsoft 365 Personal to all U.S. university students, including access to Copilot and 1TB of storage.
Apple is set to unveil the iPhone 17 Air, an ultra-thin phone with a single camera and potentially a small battery. Is the trade-off for design worth it?
Qualcomm's CEO says Intel's foundry technology isn't advanced enough for its needs, signaling continued reliance on TSMC and Samsung for chip production.
Apple's new iOS 26 beta finally removes the 1920-pixel cap on screen recordings, allowing you to capture full-resolution video on your iPhone.
A new report reveals Noisy Bear, an APT group targeting Kazakhstan’s oil and gas sector with spear-phishing and multi-stage malware, mimicking internal communications.
Progress Software has patched a high-severity RCE flaw (CVE-2025-7388) in OpenEdge AdminServer. The bug allows authenticated attackers to execute commands via Java RMI.
A new botnet, NightshadeC2, is using a technique called "UAC Prompt Bombing" to bypass sandboxes and Windows Defender by relentlessly looping UAC prompts.
A high-severity flaw (CVE-2025-9566) in Podman allows malicious containers to overwrite host files via a symlink traversal attack. A patch is available in Podman v5.6.1.
A new report reveals how a compromised AWS key was used to bypass security controls in Amazon SES, enabling a 50,000-email-per-day phishing campaign.
A critical flaw in the cJSON library (CVE-2025-57052) allows attackers to bypass array bounds checking with a malformed JSON pointer. The bug has a CVSS 9.8 score.
Anthropic has agreed to pay a record $1.5 billion to settle a lawsuit with authors who accused the company of using their books to train its Claude model.
Google will require developers to verify their identity to enable app sideloading on Android, a move intended to enhance security but with potential consequences.
A high-severity flaw (CVE-2025-58179) in Astro's Cloudflare adapter allows attackers to bypass domain restrictions, leading to SSRF and XSS attacks.
Microsoft Azure cloud services were disrupted after multiple international cables in the Red Sea were severed. Rerouted traffic may increase latency.
The EU has fined Google €2.95B for favoring its own ad tech services, a practice that distorted competition and harmed rivals, advertisers, and publishers.
Unity's new 6000.3.0a5 alpha release adds native support for screen readers on macOS and Windows, making it easier and cheaper to create accessible games.
OpenAI is partnering with Broadcom to mass-produce its own AI chips starting in 2026, a move aimed at reducing its reliance on NVIDIA.
Qualcomm and BMW have partnered to create Snapdragon Ride AD, a new software stack for autonomous driving that's debuting in the all-new BMW iX3.
Apple is the latest tech giant to face a copyright lawsuit. Authors claim the company used a dataset of pirated e-books to train its new AI models.
A new security advisory reveals two high-severity flaws in FreePBX, including a stored XSS and a shared OAuth key that could allow for API token forgery and admin compromise.
A new report reveals the AMOS infostealer is targeting macOS. The malware is spread via fake apps and malicious Terminal commands that bypass Gatekeeper.