Do Son A critical vulnerability (CVE-2025-54576, CVSS 9.1) in OAuth2-Proxy allows attackers to bypass authentication by manipulating query parameters that match skip_auth_routes regex patterns.
Windows 11 Insiders can now access the Notification Center and calendar directly from the taskbar on secondary monitors, a long-requested multi-monitor enhancement.
Google confirms it will sign the EU's Code of Practice for General Purpose AI, aligning with the EU AI Act, contrasting Meta's refusal due to "excessive interference."
TikTok unveiled new trust and safety features on July 30, including enhanced Family Pairing, Well-being Missions to foster healthy habits, and creator support tools for a safer platform.
Kaspersky exposes a stealthy cyberespionage campaign targeting Russian IT firms and global businesses, using DLL hijacking, social media C2, and obfuscation to deploy Cobalt Strike.
Group-IB uncovers how UNC2891 used Linux bind mounts (MITRE T1564.013) to hide a physical ATM cyberattack, involving a Raspberry Pi and a plan to tamper with HSMs for fraudulent withdrawals.
Sophos uncovers a new infection chain for GOLD BLADE's RedLoader malware, combining LNK files, WebDAV, and DLL sideloading to bypass defenses and deploy payloads stealthily.
Check Point Research exposes JSCEAL, a stealthy malware campaign using malvertising and fake apps to steal crypto credentials and wallets via compiled JavaScript payloads.
Elastic Security Labs exposes NOVABLIGHT, a NodeJS-based infostealer-botnet MaaS disguised as an "educational tool," actively distributed via Telegram and targeting victims with fake game installers.
Opera has filed an antitrust complaint against Microsoft in Brazil, accusing it of anti-competitive practices by bundling Edge with Windows and hindering rival browsers.
onsemi and NVIDIA are collaborating to accelerate AI data centers' shift to an 800VDC power architecture, aiming for massive energy efficiency and power density gains.
cybernewswire
Menlo Park, United States, 30th July 2025, CyberNewsWire
Google's Veo 3 and Veo 3 Fast are now generally available on Vertex AI. These advanced AI models generate high-quality video with native audio, transforming text and images into compelling content for enterprises.
Apple officially opens its first US Manufacturing Academy in Detroit on Aug 19, offering free smart manufacturing and AI training to small and medium-sized businesses, part of its $500B US investment.
Elastic patched two local privilege escalation flaws (CVE-2025-0712, CVE-2025-25011) in APM Server and Beats for Windows, allowing local attackers to gain SYSTEM privileges.
YouTube is rolling out an AI system to automatically detect underage users in the US, restricting personalized ads, activating digital well-being tools, and limiting access to certain content.
Apple formally responded to the DOJ antitrust lawsuit, arguing the government's claims are misleading and would harm iPhone's security, privacy, and innovation.
Dropbox Passwords will be fully discontinued on October 28, 2025. Users must export all saved data before then, as all information will be permanently deleted.
OneNote Insiders are getting new features: cell merging for tables (Windows, Mac, iPad) and a "paste text only" option (Ctrl+Shift+V) for cleaner note-taking.
Google NotebookLM introduces "Video Overviews," an AI-powered feature that turns complex documents into narrated, slide-style videos for enhanced visual learning and presentations.
OpenAI launches "Study Mode" for ChatGPT, an AI feature designed to guide students through problem-solving with a Socratic method, aiming to foster deeper learning rather than just providing answers.
A critical SSRF vulnerability (CVE-2025-54381) in BentoML's file upload handling allows unauthenticated remote attackers to perform internal network reconnaissance and steal cloud metadata credentials from AI applications.