Do Son Apple and Google are reportedly finalizing a deal to integrate Gemini AI into Siri, a move that would provide Apple's voice assistant with more advanced capabilities.
Three anomalous TLS certificates were improperly issued for Cloudflare’s 1.1.1.1 DNS. The certificates were trusted by Microsoft and went undetected for months.
A critical RCE flaw (CVSS 10.0) in the DeepDiff Python library allows for arbitrary code execution via class pollution. A PoC is public, and patching is urgent.
Perplexity AI has partnered with PayPal and Venmo to offer users complimentary access to a Perplexity Pro subscription and its AI-powered Comet browser.
The GNU Guix team has issued an urgent advisory for a privilege escalation flaw in guix-daemon. Local users could gain control of build outputs, risking system integrity.
A new report reveals that Stealerium, an open-source infostealer, is being used in phishing campaigns to steal credentials, crypto wallets, and sensitive data.
A new report reveals a critical flaw in the AI supply chain where attackers can hijack model namespaces on Hugging Face to deploy malicious models on major cloud platforms.
A new report reveals a high-severity SQL injection flaw (CVE-2025-57833) in Django's FilteredRelation. The bug allows attackers to manipulate queries.
A new report reveals that malicious npm packages are using Ethereum smart contracts as resilient command-and-control servers, a new tactic in open-source attacks.
A coordinated disclosure by Mandiant and Sitecore has revealed the active exploitation of a critical configuration vulnerability...
A new Go-based ransomware, Obscura, is abusing domain controllers by placing its executable in the NETLOGON folder, ensuring it gets replicated across the network.
CISA has added two TP-Link router flaws to its KEV Catalog, including an RCE vulnerability in end-of-life devices. Both are being actively exploited in the wild.
“Virtual business licensing” in the UK crypto scene really means stitching together a set of regulatory permissions,...
A set of ten critical flaws, dubbed "Frostbyte10," were found in industrial controllers. These bugs could allow attackers to tamper with global food and medicine supply chains.
A new ransomware group, DireWolf, has rapidly emerged to target global businesses with a powerful new strain of malware and a double extortion model.
Securing data warehouses and server rooms is as important as protecting the physical infrastructure of data centres....
Google will host a special event to unveil Gemini for Home, a new AI-powered assistant that promises a more integrated and proactive smart home experience.
The Envoy Project has patched two new vulnerabilities: a use-after-free bug that can lead to DoS (CVE-2025-54588) and a session-hijacking flaw in its OAuth2 filter.
Google Play Services now backs up Android's anti-theft settings to the cloud. This small change ensures your phone stays protected even after a factory reset.
OpenAI has acquired Statsig for $1.1 billion and announced a major restructuring of its leadership, signaling a new focus on its applications business.
Google has released Chrome 140, patching six vulnerabilities including a high-severity use-after-free flaw in the V8 JavaScript engine that could allow for remote code execution.
A new report reveals a critical one-click RCE flaw (CVSS 8.8) in the Dive desktop app. A malicious URL could hijack a user's machine. Update to v0.9.4 now.