A critical flaw (CVE-2025-6000) in HashiCorp Vault allows privileged operators to achieve remote code execution on the host via misconfigured plugin directories.
Amazon's Q2 2025 earnings hit $167.7B as generative AI powers growth in AWS, Alexa+, and retail—Alexa+ to launch conversational ad monetization soon.
Microsoft will end support for Windows 11 SE in October 2026, signaling the quiet retirement of its cloud-first education OS and a continued struggle against Google's Chrome OS dominance.
Google has launched "Deep Think" for Gemini 2.5 Pro, an advanced reasoning mode that uses parallel thinking to deliver more accurate and creative responses, available now for Google AI Ultra subscribers.
In response to the GENIUS Act, the SEC launches "Project Crypto," an initiative to modernize US crypto regulation, reclassify digital assets, and bring crypto innovation onshore.
A DomainTools report exposes how North Korean IT workers use fake IDs, AI, and shell companies to infiltrate remote tech jobs globally, funding the regime's military and compromising corporate infrastructure.
eSentire exposes Interlock, a new ransomware group using multi-stage payloads and the ClickFix social engineering technique to deploy ransomware and backdoors via compromised websites.
Proofpoint reveals an AiTM phishing campaign using fake OAuth apps and the Tycoon platform to bypass MFA, hijack Microsoft 365 accounts, and steal credentials.
NVIDIA will extend Game Ready driver support for Windows 10 until October 2026, a year beyond Microsoft's EOL, but only Windows 11 users will receive new feature and optimization updates after that date.
Apple reports strong Q2 2025 earnings with $94B in revenue. iPhone and Mac sales drove growth, and CEO Tim Cook confirmed a significant surge in AI investments.
OpenAI has disabled a ChatGPT feature that leaked private conversations to Google Search after users unknowingly enabled indexing, exposing sensitive data and resumes.
NVIDIA will end feature and game optimization updates for Maxwell and Pascal GPUs (GTX 7XX, 9XX, 10XX series) in October, transitioning to security-only updates for three years.
A CoinDCX software engineer, Rahul Agarwal, has been arrested in connection with a $44M crypto heist after an internal probe linked the breach to his compromised work laptop.
CISA issues an urgent advisory on CVE-2025-8286, a critical vulnerability in Güralp FMUS seismic devices exposing an unauthenticated Telnet interface that allows remote attackers to reconfigure, tamper with, or factory reset devices.
Cloudflare exposes a phishing campaign that abuses link wrapping services like Proofpoint and Intermedia, making malicious URLs appear legitimate to bypass security and trick users.
Microsoft reveals Russian state actor Secret Blizzard is targeting foreign embassies in Moscow with ISP-level AiTM attacks, deploying ApolloShadow malware to spy on diplomats.
Cisco Talos' Q2 2025 report reveals phishing is the top access method. Ransomware, including Qilin, dominated, with a surprising trend of attackers abusing PowerShell 1.0 to evade security.
Symantec's report reveals LockBit is using evolved tactics, including DLL sideloading and process masquerading with legitimate executables, to evade detection and deploy payloads.
Google launches AlphaEarth Foundations, an AI model that functions as a "virtual satellite," integrating vast data to monitor and analyze changes across Earth with unprecedented speed and detail.
Palo Alto Networks is acquiring identity security leader CyberArk for nearly $25B. The deal marks Palo Alto's strategic entry into identity security, a critical pillar for the AI era.