Do Son A vulnerability (CVE-2025-8194, CVSS 7.5) in Python's tarfile module allows attackers to cause infinite loops and DoS by processing maliciously crafted archives. Patch immediately!
Claude AI Hits Weekly Rate Limits: Anthropic Caps Usage for Subscribers, Sparking Developer Backlash
Claude AI Hits Weekly Rate Limits: Anthropic Caps Usage for Subscribers, Sparking Developer Backlash
Anthropic introduces new weekly rate limits for Claude AI subscribers, particularly impacting heavy users of Claude Code, sparking backlash over transparency and usage caps.
The women-only Tea dating app experienced a second data breach, exposing over 1 million private messages, including sensitive discussions on abortion and infidelity, along with user IDs and selfies.
Linux Kernel 6.16 is officially out, bringing significant enhancements to hardware support, new drivers, and optimizations for filesystems and networking, including Intel TDX and Nvidia GPU support.
GitHub is experiencing a widespread service outage, affecting Git operations, API requests, pull requests, and issue tracking. The engineering team is actively working on restoration.
Cyble uncovers RedHook, a new Android banking trojan targeting Vietnamese users with sophisticated phishing, remote access, screen capture, and keylogging for full device takeover.
A critical vulnerability (CVE-2025-54419, CVSS 10.0) in Node-SAML allows attackers to bypass SAML 2.0 authentication by manipulating unsigned assertion data.
Netskope uncovers XWorm 6.0, a new variant using VBScript droppers, AMSI bypass, and critical process marking to evade detection and force system reboots if terminated.
A new stealthy campaign uses Windows LNK files to deploy the REMCOS backdoor via multi-stage PowerShell commands, bypassing antivirus and gaining full system control.
PyPI warns of a new phishing campaign using "pypj.org" to spoof its login page, tricking maintainers into revealing credentials. PyPI itself is not compromised.
Security researcher Vasilis Orlof exposes QWINS LTD, a suspected bulletproof hosting provider registered in the UK, allegedly fueling global malware campaigns with Lumma, Mirai, and more.
Unlock faster threat detection with a Malware Sandbox. Enhance visibility and automate responses in your security operations.
Elon Musk confirms a $16.5B, nine-year deal with Samsung for AI6 chip production at its Texas foundry, a crucial win for Samsung's struggling chip business and Tesla's AI future.
Neuralink has joined an AI-powered "Smart Bionic Eye" research initiative led by UCSB, aiming to restore sight to the blind by integrating brain-computer interface technology.
An EU open-source Android age verification app is sparking controversy due to its reliance on Google Play Integrity API, raising concerns over digital sovereignty and excluding users with custom ROMs.
A critical command injection flaw (CVE-2025-54418, CVSS 9.8) in CodeIgniter's ImageMagick handler allows remote code execution via malicious filenames or text.
Debian Linux is proactively addressing the Year 2038 Problem by adopting a 64-bit time_t format on 32-bit architectures, preparing for the timestamp overflow set to impact legacy systems globally.
Allianz Life confirms a data breach impacting over 1.4 million individuals after attackers used social engineering to access a cloud-based CRM system. ShinyHunters is suspected.
vivo launches BlueOS, a new open-source OS kernel written in Rust, emphasizing security, minimalism, and broad support for Arm and RISC-V architectures in various terminal devices.
The women-only dating app, Tea, suffered a data breach, leaking 72,000 images, including 13,000 selfies and ID documents, from users who registered before February 2024.
Microsoft has fully resolved Windows 11 24H2 compatibility issues with Easy Anti-Cheat, lifting the update block. Gamers can now upgrade without crashes.
Not every threat is equal. Within the world of executive protection, this fact comes clearly into focus...