Apple is rumored to be launching a new, more affordable MacBook with an A18 Pro chip to compete with Chromebooks in the education market.
NVIDIA and AMD have a new deal to sell AI chips in China: they will pay 15% of the revenue to the U.S. government to get export licenses.
After 34 years, AOL is officially shutting down its iconic dial-up internet service on September 30, 2025, marking the end of a digital era.
HBO Max is intensifying its crackdown on password sharing, with plans to use more aggressive technology to identify and block unauthorized users by late 2025.
Dashlane is ending its free plan on Sept. 16. Free users are being moved to a trial and must upgrade to a paid plan or switch to an alternative.
Elon Musk announces that the Grok 4 AI model is now available to all users for free, with a limit of five queries per 12 hours for non-subscribers.
Linus Torvalds rejected a late code submission from a Google engineer for Linux 6.17, calling it "garbage" and criticizing its timing during the merge window.
Firefox's new AI tab grouping feature, while private, is causing major CPU spikes and battery drain on laptops, leading to a sluggish user experience.
CISA warns of a critical authentication bypass flaw (CVE-2025-8284, CVSS 9.8) in Packet Power devices, allowing unauthenticated remote attackers to gain full access.
The OLED MacBook Pro is reportedly delayed until late 2026 or 2027. It's expected to feature a new design, an M6 chip, and a Dynamic Island.
A critical vulnerability (CVE-2025-55188, CVSS 2.7) in 7-Zip allows remote attackers to perform arbitrary file writes via a crafted archive, potentially leading to code execution.
Apple is testing an updated App Intents framework to deepen Siri's integration with major apps like Uber and Amazon, aiming for a "voice-first" interaction experience.
A new Japanese law will force Apple to allow third-party browsers like Chrome and Firefox to use their own rendering engines on iOS, mirroring and expanding on the EU’s Digital Markets Act.
Xerox has patched two critical vulnerabilities (CVE-2025-8355, CVE-2025-8356) in FreeFlow Core 8.0.4, allowing attackers to exploit XML and path traversal flaws to achieve RCE and SSRF.
CISA warns of a critical authentication bypass flaw (CVE-2025-5095, CVSS 9.8) in ARC Solo devices, allowing attackers to change passwords and take full remote control without authentication.
Kaspersky exposes Efimer, a new crypto-stealer using fake legal threats and malicious torrents from compromised WordPress sites to hijack wallets and brute-force other sites.
IBM X-Force exposes CastleBot, a new MaaS framework that deploys infostealers and backdoors like NetSupport and WarmCookie via trojanized installers and phishing.
A critical UAF flaw in the Linux kernel (CVE-2025-38236) allows for privilege escalation. A PoC exploit is now public, demonstrating how to escape the Chrome sandbox and gain kernel control.
A coordinated campaign by GreedyBear used 150+ malicious Firefox extensions and fake sites to steal over $1M in crypto. They are now using a new technique called Extension Hollowing to evade detection.
S2W TALON exposes ScarCruft (APT37), a North Korean APT using a new campaign disguised as a postal notice, deploying NubSpy and VCD ransomware via PubNub C2.
ESET warns of an actively exploited WinRAR zero-day (CVE-2025-8088). The path traversal flaw allows attackers to execute code by crafting malicious archives.