Do Son
Zoom has released security updates addressing two significant vulnerabilities in its Windows-based clients—CVE-2025-49456 and CVE-2025-49457—that could enable...
A new Charon ransomware campaign is targeting the Middle East's public sector and aviation with APT-level tactics, including DLL sideloading and anti-EDR.
A targeted phishing campaign against Israeli organizations uses a PowerShell-based RAT and compromised internal emails for delivery, making detection difficult.
A new advanced phishing kit, PoisonSeed, bypasses MFA with AitM techniques to steal credentials and launch cryptocurrency scams. NVISO uncovers the tactics.
A new large-scale malware campaign is using GitHub repositories disguised as game cheats and software cracks to distribute SmartLoader and steal user data.
Chrome 139 fixes high-severity bugs in V8, libaom, and ANGLE that attackers could exploit. Update your browser now to stay protected.
Critical FortiSIEM flaw (CVE-2025-25256) allows remote unauthenticated command injection. Exploit code active in the wild—patch immediately.
SAP’s August 2025 Patch Day fixes critical code injection flaws in S/4HANA and SLT that could allow full ERP compromise via RFC exploits.
SafeBreach Labs reveals Win-DDoS, a new DoS technique that weaponizes Windows domain controllers to launch large-scale attacks, exploiting flaws patched by Microsoft.
A critical vulnerability (CVE-2025-32433, CVSS 10.0) in Erlang/OTP’s SSH daemon allows unauthenticated RCE and is actively exploited, with a focus on operational technology (OT) networks.
A critical flaw in Apache bRPC's Redis parser (CVE-2025-54472) allows unauthenticated remote attackers to crash services via a memory allocation bug. Update to 1.14.1 immediately!
Airbnb CEO Brian Chesky says AI won't replace Google Search but is key to personalizing customer service and attracting new users to the platform.
Microsoft's new Windows 365 Reserve service provides businesses with preconfigured cloud PCs for up to 10 days per year to ensure uninterrupted work during device failures.
Anthropic is adding a memory feature to its Claude AI chatbot. It remembers past conversation context and user details to provide more tailored responses.
Reddit is blocking the Internet Archive from crawling its site, citing concerns that AI companies are using it as a workaround to scrape data for free.
A new lawsuit accuses Microsoft of forcing users to buy new AI PCs by ending Windows 10 support, demanding free updates until the OS's market share falls below 10%.
GitHub CEO Thomas Dohmke is resigning as Microsoft moves to integrate the platform into its CoreAI division, ending GitHub's independent operations.
Google has paid out its highest-ever Chrome bug bounty of $250,000 for a critical sandbox escape flaw that could bypass multiple security layers.
BadCam: Critical Flaws in Lenovo Linux Webcams Allow Remote BadUSB Attacks and Persistent Infections
BadCam: Critical Flaws in Lenovo Linux Webcams Allow Remote BadUSB Attacks and Persistent Infections
Eclypsium researchers have uncovered a new class of BadUSB attacks, which leverage critical flaws in Linux-based Lenovo webcams to deliver persistent payloads and bypass security.
A new "EPM Poisoning" attack technique exploits a Windows RPC flaw (CVE-2025-49760) to hijack services, enabling unprivileged users to steal machine credentials and compromise Active Directory.
A critical flaw (CVE-2025-24103) in macOS InstallAssistant allows a normal user to bypass TCC, exposing private data. A PoC is public, urging users to update to 15.3.
Microsoft has announced that Edge for Windows 10 will receive security updates until October 2028, aligning with the Extended Security Updates (ESU) program.