Do Son A new security advisory reveals two high-severity flaws in FreePBX, including a stored XSS and a shared OAuth key that could allow for API token forgery and admin compromise.
A new report reveals the AMOS infostealer is targeting macOS. The malware is spread via fake apps and malicious Terminal commands that bypass Gatekeeper.
Google is updating Circle to Search with continuous translation that works as you scroll. The update also adds one-tap actions for phone numbers and URLs.
Google has been fined €325M by a French regulator for violating data protection laws by displaying ads in Gmail without consent and making it harder to decline cookies.
Tesco is suing Broadcom for £100M, alleging the company breached its perpetual license agreements for VMware, a move that could disrupt the retailer's operations.
Microsoft's August security updates are causing unexpected UAC prompts and app installation issues. The problem affects all Windows versions and stems from a fix for CVE-2025-50173.
The once-familiar “poke” feature on Facebook, long thought to be a relic of the platform’s early days,...
Cloudflare’s 1.1.1.1 was hit by 12 unauthorized certificates from Fina CA, raising PKI concerns and spotlighting Microsoft’s continued trust.
A critical macOS flaw (CVE-2025-24204) in gcore allows a user to read any process memory and bypass TCC. A PoC is public, and patching is urgent.
A critical flaw in Argo CD (CVE-2025-55190) with a CVSS 10 score allows low-privileged API tokens to retrieve sensitive repository credentials. Admins should patch now.
CISA adds three new vulnerabilities to its KEV Catalog, including flaws in the Linux kernel, Android Runtime, and Sitecore CMS. All are being actively exploited.
A new report reveals that the Lazarus Group is actively monitoring CTI platforms to evade detection and sustain a ClickFix phishing campaign against the cryptocurrency sector.
A critical flaw in Ruijie Reyee RG-ES series switches allows unauthenticated remote attackers to modify login credentials and gain full admin access. CVE-2025-56752 has a CVSS 9.4 score.
A new report reveals that the North Korean Kimsuky APT is using social engineering on Facebook and Telegram to deliver AppleSeed malware to targets in South Korea.
A new GreyNoise report warns of two massive scanning spikes targeting Cisco ASA devices, raising concerns that attackers may be preparing to exploit a new vulnerability.
A new campaign is abusing the legitimate RMM tool ScreenConnect to deliver RATs like AsyncRAT and PureHVNC, a trend that is on the rise, targeting US organizations.
A critical flaw in ABB ASPECT BMS (CVE-2025-53187) allows unauthenticated remote attackers to achieve RCE with a CVSS 9.8 score. Admins must patch or disconnect systems.
A new report reveals a sophisticated XWorm backdoor campaign that uses .lnk files and a multi-stage infection chain to gain stealthy and persistent control of Windows systems.
A new report reveals NotDoor, a backdoor by Russia's APT28 that hides in Microsoft Outlook macros and uses specific email triggers to exfiltrate data and execute commands.
cybernewswire
Wilmington, United States, 4th September 2025, CyberNewsWire
OpenAI has made its "Projects" feature available to all ChatGPT users, enabling everyone to organize chats, set custom instructions, and manage files.
A jury has ordered Google to pay $425 million in a class-action lawsuit for allegedly continuing to track users' app activity despite them opting out.