Do Son CISA warns of critical flaws in Tigo Energy's Cloud Connect Advanced devices, including hard-coded credentials and command injection, that could allow remote attackers to take full control of solar systems.
Beware of fake Binance ads! This multi-stage malware campaign uses Facebook to trick crypto users, stealing credentials and sensitive data. Stay safe with our tips.
New infrastructure linked to Israeli spyware firm Candiru has been uncovered, exposing active surveillance clusters in Hungary and Saudi Arabia, with malware targeting Windows devices.
CERT-UA uncovers a new UAC-0099 campaign targeting Ukraine's defense sector. The group uses a toolkit of MATCHBOIL, MATCHWOK, and DRAGSTARE malware for reconnaissance and data exfiltration.
Unit 42 reveals Project AK47, a toolkit used by Storm-2603 to exploit SharePoint. It includes a custom AK47C2 framework and links to both LockBit and Warlock ransomware.
cybernewswire
Austin, TX, USA, 6th August 2025, CyberNewsWire
A critical integer overflow in VirtualBox (CVE-2025-30712) allows an attacker to escape the VM and execute code on the host, with a public proof-of-concept available.
Elon Musk's xAI will open source the Grok 2 model next week, finally fulfilling a long-standing promise amid new competition from OpenAI's own open-weight GPT-OSS models.
JetBrains launches Kineto, a no-code AI platform that lets users build functional websites and apps from natural language prompts, aiming to democratize development.
Server patching is a crucial part of SysOps and DevOps operations. To do it efficiently, you need automated server patching tools to save time and reduce cybersecurity risks.
Legendary GPU architect Raja Koduri launches Oxmiq Labs to challenge NVIDIA’s CUDA. The startup will offer RISC-V GPU IP and software like OXPython to run CUDA workloads on non-NVIDIA hardware.
NVIDIA has finally acknowledged long-standing performance issues for VKD3D/DirectX 12 games on Linux, with engineers confirming a fix is in development for a future driver update.
SanDisk unveiled a 256TB UltraQLC NVMe SSD, the world's largest, built for AI data lakes and high-speed analytics, promising unprecedented capacity and efficiency.
Anthropic has released Claude Opus 4.1, a drop-in replacement for Opus 4, offering superior performance in coding and agentic tasks at the same price. It is now available to paid subscribers and via GitHub Copilot.
OpenAI has released gpt-oss-120b and gpt-oss-20b, its first open-weight models since GPT-2. The release, under an Apache 2.0 license, aims to democratize access to AI.
Google DeepMind’s Genie 3 brings real-time scene control and enhanced stability to AI training, marking a leap toward more adaptive, interactive world models.
CISA adds three D-Link vulnerabilities (CVE-2020-25078, -25079, -2022-40799) to its KEV Catalog, confirming active exploitation of EOL IP cameras.
A critical vulnerability (CVE-2025-54594, CVSS 9.1) in React Native Bottom Tabs’ GitHub Actions allowed RCE and secret exfiltration. The flaw was patched, and no packages were affected.
The DFIR Report details a destructive attack: Bumblebee malware, delivered via SEO poisoning in Bing search results, led to a full Akira ransomware deployment in under 44 hours.
Mustang Panda, a China-aligned APT, is using the ToneShell backdoor to target government and military sectors with phishing and DLL sideloading, masquerading as a legitimate Chrome component.
Adobe released urgent patches for two critical flaws (CVE-2025-54253, -54254) in AEM Forms on JEE, allowing unauthenticated RCE & file reads, with public PoCs available.
SentinelLABS exposes a crypto scam using AI-generated YouTube videos to trick users into deploying malicious smart contracts, siphoning off hundreds of thousands in ETH.