A new report reveals Chinese-speaking smishing syndicates are using phishing-as-a-service, MFA bypass, and stolen cards to conduct a multi-billion dollar fraud campaign targeting digital wallets.
Silent Push exposes SocGholish as a MaaS platform for Initial Access Brokers. The malware, disguised as fake updates, fuels top-tier Russian ransomware groups like Evil Corp.
Google introduces "Guided Learning" mode for Gemini, an AI framework designed to help students learn with step-by-step guidance. A free subscription is also offered.
Google claims AI Overviews have not hurt website traffic, but a new study shows users click links significantly less when AI summaries are present.
The PCI-SIG is developing PCIe 8.0, which aims for 1TB/s of bandwidth, but it's designed for data centers and AI—not for your next gaming PC.
Steam is ending support for macOS 11 Big Sur on October 15. Due to security risks, users must upgrade their OS to continue using the platform.
OpenAI's GPT-5 is officially launching! Get the details on the different versions, from GPT-5 Mini to GPT-5 Chat, and how they will be rolled out.
Ubiquiti has issued an advisory for a critical flaw (CVE-2025-24285, CVSS 9.8) in its UniFi Connect EV Stations, allowing remote command injection and unauthenticated RCE.
OpenAI has scheduled a livestream for August 8, with a teaser on X hinting at the formal unveiling of its next-generation model, GPT-5, expected to bring significant advancements in reasoning and logic.
Apple commits an additional $100 billion to US industries, bringing its total investment to $600B. The move is a strategic response to new 25% tariffs on goods from India.
The latest iOS 26 beta introduces new AirPods low-battery alerts and an updated color-coded guide for the charging case's LED, making it easier to monitor status.
OpenAI will provide ChatGPT to over 2 million US federal employees for just $1 per agency, per year, a symbolic price to secure dominance in government AI.
Google confirms a June Salesforce breach by UNC6040 (ShinyHunters). The attack used social engineering to steal credentials, a tactic also used against Chanel and Allianz.
A new ChatGPT feature exposed over 100,000 private conversations to search engines. The links remain accessible on the Internet Archive and elsewhere.
Microsoft warns of a critical flaw (CVE-2025-53786) in Exchange hybrid environments, allowing attackers with on-prem admin access to escalate privileges in Exchange Online.
JPCERT/CC warns of critical flaws (CVSS 9.8) in SATO industrial label printers that allow unauthenticated remote attackers to upload malicious Lua scripts for root access.
CISA issues an urgent warning about "ToolShell," a sophisticated exploit chain targeting SharePoint servers with multiple vulnerabilities to install webshells and steal crypto keys.
A critical PHP object injection flaw (CVE-2025-52709, CVSS 9.8) in Everest Forms allows RCE when an admin views form submissions on PHP versions below 7.1. Update to v3.2.3 immediately.
NVIDIA states its GPUs have no backdoors or kill switches, arguing such controls are a security risk and would be a "gift to hackers," referencing the failed Clipper Chip.
Kaspersky exposes a new AV killer leveraging the legitimate ThrottleStop.sys driver to disable antivirus software and deploy MedusaLocker ransomware in a BYOVD attack.
Two malicious npm packages disguised as WhatsApp libraries contain a kill switch that remotely wipes a developer's system if their phone number isn't whitelisted.