Do Son Google has released Chrome 140, patching six vulnerabilities including a high-severity use-after-free flaw in the V8 JavaScript engine that could allow for remote code execution.
A new report reveals a critical one-click RCE flaw (CVSS 8.8) in the Dive desktop app. A malicious URL could hijack a user's machine. Update to v0.9.4 now.
Microsoft is retiring its Editor AI extension on Oct 31, 2025. The core functionality is being integrated into Edge, forcing Chrome users to switch browsers.
Ubuntu is replacing the classic sudo with sudo-rs, a memory-safe reimplementation in Rust. The change aims to enhance security and prevent vulnerabilities.
A critical RCE flaw (CVE-2025-53772) in IIS Web Deploy allows an authenticated attacker to execute arbitrary code. A PoC is public, and patching is urgent.
NVIDIA has released a critical security update for BlueField, DOCA, and other products, fixing multiple high-severity flaws that could lead to privilege escalation and DoS.
An unprotected database potentially linked to Navy Federal Credit Union was discovered, exposing internal system data and hashed passwords, creating a risk of future attacks.
JetBrains has made its RubyMine IDE free for non-commercial use. The move is designed to lower the barrier for new developers and content creators.
Cloudflare confirms it was hit by the Salesforce supply chain attack, exposing customer support data. The company is urging users to rotate credentials.
Dolby Vision 2 is a new imaging standard that uses AI to deliver "beyond HDR" quality. Hisense will be the first brand to support it, with content from Canal+.
The makers of 2Fas Auth have launched 2Fas Pass, a local-first password manager with a zero-knowledge architecture and tiered security for maximum protection.
Switzerland launches Apertus, a fully open-source LLM. The model is built as public infrastructure, emphasizing transparency and compliance over commercial goals.
The DOJ has won a landmark antitrust case against Google. A U.S. court has prohibited exclusive deals and ordered Google to share data to promote competition.
Google's new Android update patches dozens of flaws, including two actively exploited vulnerabilities and a critical RCE that can be triggered without user interaction.
CISA warns of a critical flaw (CVE-2025-9696) in SunPower PVS6 solar inverters. Hardcoded Bluetooth encryption parameters allow attackers to gain full control.
CISA adds two flaws to its KEV Catalog: a TP-Link factory reset flaw and a WhatsApp zero-click vulnerability used in targeted spyware attacks. Patching is urgent.
A new report reveals Inf0s3c Stealer, a stealthy Python malware that abuses Discord to exfiltrate passwords, crypto wallets, and other sensitive data from victims.
A new report from Sekoia.io reveals how the global commercial spyware industry is thriving despite sanctions, selling sophisticated zero-click surveillance tools to governments.
Cloudflare has successfully mitigated the largest DDoS attack on record, peaking at an unprecedented 11.5 Tbps and highlighting a new era of cyber threats.
A critical flaw (CVE-2025-6507) in the H2O-3 machine learning platform allows attackers to bypass security filters, leading to remote code execution.
Are antivirus warnings when downloading a Linux ISO a conspiracy? This article explains why security software might flag these files as dangerous.
Apple is reportedly making robotic assembly a requirement for its suppliers, forcing partners to invest in costly automation to remain in its ecosystem.