Do Son A 22-year-old Oregon man has been charged with operating the RapperBot botnet, a network of 10,000s of devices that launched over 370,000 attacks.
A new report shows that AI bots, especially real-time inference queries from tools like ChatGPT, are causing server-overloading traffic that mimics DDoS attacks.
AMD accidentally uploaded the FSR 4 source code to GitHub before pulling it, sparking speculation about unofficial support for older graphics cards.
ouTube is now letting free users download videos. But what's the catch? We break down the new limits on resolution and content for free downloads.
A design flaw in xAI's Grok chatbot has led to over 370,000 private conversations being indexed by search engines and exposed to the public.
Microsoft and Phison are investigating reports that recent Windows 11 updates are causing some SSDs to lock up, disappear, and even corrupt data.
Google's new Gemini for Home is set to replace Google Assistant, bringing multimodal AI and a new subscription model to smart displays and speakers.
A new report from Trend Micro details how the Warlock ransomware group is exploiting a vulnerability in unpatched Microsoft SharePoint servers to attack organizations.
A new report reveals how criminals are using the AI website builder Lovable to create tens of thousands of convincing phishing, malware, and fraud websites.
A new report from Cisco Talos exposes Static Tundra, a Russian state-sponsored group that has exploited unpatched Cisco devices for over a decade.
IBM X-Force has exposed QuirkyLoader, a new malware loader that uses DLL side-loading and .NET AOT compilation to deliver Agent Tesla and other threats.
A new report uncovers the "Traffer" economy, a sophisticated cybercriminal ecosystem that uses business-like structures and SEO abuse to steal data at scale.
A critical flaw in the AI tool CodeRabbit allowed a researcher to gain RCE and write access to over a million repositories via a malicious pull request.
A Red Canary report reveals attackers are exploiting an Apache ActiveMQ flaw to breach Linux systems, then patching the vulnerability to hide their presence.
A new Mandiant report reveals a multi-stage USB malware campaign that uses DLL side-loading and stealthy loaders to deploy backdoors and coinminers.
A critical XXE flaw in Apache Tika's PDF parser could allow attackers to access sensitive data and pivot into internal networks via crafted PDF files.
A new report reveals a malicious Python package on PyPI that uses a stealthy dependency and DLL sideloading to deliver a multi-stage malware.
BI.ZONE Threat Intelligence uncovered a series of targeted cyber-espionage campaigns conducted by the Paper Werewolf (GOFFEE) cluster,...
Qualcomm’s new Snapdragon W5+ Gen 2 and W5 Gen 2 wearable chips are the first to support two-way satellite messaging, providing a new layer of safety.
Google has launched the Pixel 10 series, featuring the new Tensor G5 chip, advanced AI features, the Pixelsnap magnetic interface, and a new foldable.
A critical vulnerability (CVSS 9.3) in Docker Desktop could allow malicious containers to gain full control of the host system. Update now to version 4.44.3.
Apple has released an urgent security update to patch a zero-day vulnerability (CVE-2025-43300) in its Image I/O framework that is being actively exploited in targeted attacks.