Do Son Sophos uncovers a new infection chain for GOLD BLADE's RedLoader malware, combining LNK files, WebDAV, and DLL sideloading to bypass defenses and deploy payloads stealthily.
Check Point Research exposes JSCEAL, a stealthy malware campaign using malvertising and fake apps to steal crypto credentials and wallets via compiled JavaScript payloads.
Elastic Security Labs exposes NOVABLIGHT, a NodeJS-based infostealer-botnet MaaS disguised as an "educational tool," actively distributed via Telegram and targeting victims with fake game installers.
Opera has filed an antitrust complaint against Microsoft in Brazil, accusing it of anti-competitive practices by bundling Edge with Windows and hindering rival browsers.
onsemi and NVIDIA are collaborating to accelerate AI data centers' shift to an 800VDC power architecture, aiming for massive energy efficiency and power density gains.
cybernewswire
Menlo Park, United States, 30th July 2025, CyberNewsWire
Google's Veo 3 and Veo 3 Fast are now generally available on Vertex AI. These advanced AI models generate high-quality video with native audio, transforming text and images into compelling content for enterprises.
Apple officially opens its first US Manufacturing Academy in Detroit on Aug 19, offering free smart manufacturing and AI training to small and medium-sized businesses, part of its $500B US investment.
Elastic patched two local privilege escalation flaws (CVE-2025-0712, CVE-2025-25011) in APM Server and Beats for Windows, allowing local attackers to gain SYSTEM privileges.
YouTube is rolling out an AI system to automatically detect underage users in the US, restricting personalized ads, activating digital well-being tools, and limiting access to certain content.
Apple formally responded to the DOJ antitrust lawsuit, arguing the government's claims are misleading and would harm iPhone's security, privacy, and innovation.
Dropbox Passwords will be fully discontinued on October 28, 2025. Users must export all saved data before then, as all information will be permanently deleted.
OneNote Insiders are getting new features: cell merging for tables (Windows, Mac, iPad) and a "paste text only" option (Ctrl+Shift+V) for cleaner note-taking.
Google NotebookLM introduces "Video Overviews," an AI-powered feature that turns complex documents into narrated, slide-style videos for enhanced visual learning and presentations.
OpenAI launches "Study Mode" for ChatGPT, an AI feature designed to guide students through problem-solving with a Socratic method, aiming to foster deeper learning rather than just providing answers.
A critical SSRF vulnerability (CVE-2025-54381) in BentoML's file upload handling allows unauthenticated remote attackers to perform internal network reconnaissance and steal cloud metadata credentials from AI applications.
A joint advisory from US, UK, Canada, and Australia warns of Scattered Spider's evolving tactics, now using DragonForce ransomware, spearphishing, SIM swapping, and MFA fatigue to compromise systems.
Critical Flaw in Wix’s New AI Platform Base44 Allowed Unauthorized Access to Private Enterprise Apps
Critical Flaw in Wix’s New AI Platform Base44 Allowed Unauthorized Access to Private Enterprise Apps
Wiz Research uncovered a critical flaw in Wix's new AI platform, Base44, that allowed unauthorized access to private enterprise applications and sensitive data by bypassing SSO.
A critical RCE flaw (CVE-2025-5394, CVSS 9.8) in the Alone WordPress theme allows unauthenticated attackers to upload arbitrary files and gain full site control. Exploitation is confirmed in the wild.
Trend Micro reports Gunra ransomware has expanded to Linux, employing 100 parallel encryption threads, partial encryption, and stealthy keystore methods to target global enterprises.
Seychelles Commercial Bank (SCB) suffered a cyberattack exposing 1.4M+ customer PII, including government employee data. Resecurity suspects espionage, not just financial gain, given the low data sale price.
The EOL TP-Link Archer C50 router has a critical hardcoded DES key (CVE-2025-6982), allowing attackers to decrypt sensitive configuration files, including admin credentials and Wi-Fi passwords.