A CoinDCX software engineer, Rahul Agarwal, has been arrested in connection with a $44M crypto heist after an internal probe linked the breach to his compromised work laptop.
CISA issues an urgent advisory on CVE-2025-8286, a critical vulnerability in Güralp FMUS seismic devices exposing an unauthenticated Telnet interface that allows remote attackers to reconfigure, tamper with, or factory reset devices.
Cloudflare exposes a phishing campaign that abuses link wrapping services like Proofpoint and Intermedia, making malicious URLs appear legitimate to bypass security and trick users.
Microsoft reveals Russian state actor Secret Blizzard is targeting foreign embassies in Moscow with ISP-level AiTM attacks, deploying ApolloShadow malware to spy on diplomats.
Cisco Talos' Q2 2025 report reveals phishing is the top access method. Ransomware, including Qilin, dominated, with a surprising trend of attackers abusing PowerShell 1.0 to evade security.
Symantec's report reveals LockBit is using evolved tactics, including DLL sideloading and process masquerading with legitimate executables, to evade detection and deploy payloads.
Google launches AlphaEarth Foundations, an AI model that functions as a "virtual satellite," integrating vast data to monitor and analyze changes across Earth with unprecedented speed and detail.
Palo Alto Networks is acquiring identity security leader CyberArk for nearly $25B. The deal marks Palo Alto's strategic entry into identity security, a critical pillar for the AI era.
Qualcomm's Q2 fiscal results exceeded expectations despite Apple's in-house modem. The company's strategic pivot to automotive, IoT, and data center markets is fueling growth.
Proton introduces a new, open-source MFA app, Proton Authenticator, designed to separate 2FA codes from passwords for enhanced security with end-to-end encryption.
Arm CEO Rene Haas confirms the company is exploring developing its own chips and chiplets, marking a strategic pivot that could put it in direct competition with long-time partners like Qualcomm and NVIDIA.Arm, Chip Development, AI, Chiplets, Semiconductors, Qualcomm, NVIDIA, Rene Haas, Licensing, Tech Industry
WithSecure uncovers a stealthy campaign using legitimate RMM tools embedded in PDFs to target European organizations, bypassing security with zero malware at initial entry.
Gen Digital has released a free decryptor for FunkSec ransomware, allowing victims to recover files. The group appears dormant, with no new victims since March 2025.
Rtpengine's critical flaws (CVE-2025-53399, CVSS 9.3) allow attackers to intercept or inject audio into active VoIP calls, even without a MitM position, by exploiting SRTP validation.
Microsoft PlayReady DRM certificates (SL2000 & SL3000) have been leaked to GitHub. Microsoft issued a DMCA for SL3000, and Amazon is suspending accounts using the leaked keys to bypass DRM.
Figma has relaunched its IPO plans, aiming to raise $1.2 billion and achieve a $19.3 billion valuation after its $20 billion acquisition by Adobe collapsed due to regulatory scrutiny.
A critical vulnerability (CVE-2025-46811, CVSS 9.8) in SUSE Manager allows unauthenticated remote command execution with root privileges on all managed Linux clients.
Microsoft plans a record $30B+ investment next quarter to expand cloud and AI infrastructure, further cementing its competitive edge and meeting surging demand for generative AI models.
Mark Zuckerberg asserts AI-powered smart glasses will be the dominant interface, claiming those without them will face a "cognitive disadvantage," despite Reality Labs' ongoing losses.
North Korea's Lazarus Group is waging a covert cyberespionage campaign, poisoning 234+ open-source packages on npm/PyPI to steal secrets from CI/CD pipelines and developer environments.