Do Son A new ChatGPT feature exposed over 100,000 private conversations to search engines. The links remain accessible on the Internet Archive and elsewhere.
Microsoft warns of a critical flaw (CVE-2025-53786) in Exchange hybrid environments, allowing attackers with on-prem admin access to escalate privileges in Exchange Online.
JPCERT/CC warns of critical flaws (CVSS 9.8) in SATO industrial label printers that allow unauthenticated remote attackers to upload malicious Lua scripts for root access.
CISA issues an urgent warning about "ToolShell," a sophisticated exploit chain targeting SharePoint servers with multiple vulnerabilities to install webshells and steal crypto keys.
A critical PHP object injection flaw (CVE-2025-52709, CVSS 9.8) in Everest Forms allows RCE when an admin views form submissions on PHP versions below 7.1. Update to v3.2.3 immediately.
NVIDIA states its GPUs have no backdoors or kill switches, arguing such controls are a security risk and would be a "gift to hackers," referencing the failed Clipper Chip.
Kaspersky exposes a new AV killer leveraging the legitimate ThrottleStop.sys driver to disable antivirus software and deploy MedusaLocker ransomware in a BYOVD attack.
Two malicious npm packages disguised as WhatsApp libraries contain a kill switch that remotely wipes a developer's system if their phone number isn't whitelisted.
CISA warns of critical flaws in Tigo Energy's Cloud Connect Advanced devices, including hard-coded credentials and command injection, that could allow remote attackers to take full control of solar systems.
Beware of fake Binance ads! This multi-stage malware campaign uses Facebook to trick crypto users, stealing credentials and sensitive data. Stay safe with our tips.
New infrastructure linked to Israeli spyware firm Candiru has been uncovered, exposing active surveillance clusters in Hungary and Saudi Arabia, with malware targeting Windows devices.
CERT-UA uncovers a new UAC-0099 campaign targeting Ukraine's defense sector. The group uses a toolkit of MATCHBOIL, MATCHWOK, and DRAGSTARE malware for reconnaissance and data exfiltration.
Unit 42 reveals Project AK47, a toolkit used by Storm-2603 to exploit SharePoint. It includes a custom AK47C2 framework and links to both LockBit and Warlock ransomware.
cybernewswire
Austin, TX, USA, 6th August 2025, CyberNewsWire
A critical integer overflow in VirtualBox (CVE-2025-30712) allows an attacker to escape the VM and execute code on the host, with a public proof-of-concept available.
Elon Musk's xAI will open source the Grok 2 model next week, finally fulfilling a long-standing promise amid new competition from OpenAI's own open-weight GPT-OSS models.
JetBrains launches Kineto, a no-code AI platform that lets users build functional websites and apps from natural language prompts, aiming to democratize development.
Server patching is a crucial part of SysOps and DevOps operations. To do it efficiently, you need automated server patching tools to save time and reduce cybersecurity risks.
Legendary GPU architect Raja Koduri launches Oxmiq Labs to challenge NVIDIA’s CUDA. The startup will offer RISC-V GPU IP and software like OXPython to run CUDA workloads on non-NVIDIA hardware.
NVIDIA has finally acknowledged long-standing performance issues for VKD3D/DirectX 12 games on Linux, with engineers confirming a fix is in development for a future driver update.
SanDisk unveiled a 256TB UltraQLC NVMe SSD, the world's largest, built for AI data lakes and high-speed analytics, promising unprecedented capacity and efficiency.
Anthropic has released Claude Opus 4.1, a drop-in replacement for Opus 4, offering superior performance in coding and agentic tasks at the same price. It is now available to paid subscribers and via GitHub Copilot.