Do Son Salesforce patched eight critical flaws in Tableau Server, including RCE, database exposure, and SSRF vulnerabilities, urging users to update immediately.
eSentire unveils Cyber Stealer, a new infostealer-botnet hybrid offered as a service, fusing data theft, remote control, crypto mining, and DDoS attacks into one scalable toolkit.
Hybrid Analysis reveals SHUYAL, a new stealthy infostealer that harvests browser credentials, system data, and screenshots, exfiltrating it all via a Telegram bot.
Cisco Talos reveals "Chaos," a new RaaS operation likely formed by former BlackSuit members, using vishing and Quick Assist to conduct big-game hunting and double extortion campaigns.
A critical privilege escalation flaw (CVE-2025-6241) in Lakeside Software's SysTrack allows low-privileged local users to gain SYSTEM access via DLL hijacking. Patch immediately.
A critical flaw (CVE-2025-54369) in Node-SAML allows attackers to bypass SAML 2.0 authentication by manipulating unsigned assertion data. Update to v5.1.0 immediately!
OT-ISAC warns that China-linked APT group UNC3886 is actively targeting Singapore's critical infrastructure, exploiting zero-day vulnerabilities for stealthy, long-term access.
IBM X-Force warns that Russian-aligned Hive0156 is intensifying spear-phishing campaigns against Ukrainian government and military, delivering Remcos RAT via LNK/PowerShell files.
Microsoft is replacing its MSN News feed in Windows 11's widgets panel with "Copilot Discover," an AI-driven experience offering personalized content and smoother interactions.
Apple introduces more granular age ratings for the App Store, enhancing family safety tools and requiring developers to complete new content questionnaires by Jan 2026.
Intel's new CEO indicates the company may exit advanced chip manufacturing (14A/18A) if external demand falters, highlighting struggles to compete with TSMC and ongoing cost-cutting efforts.
Google introduces "Opal" in Google Labs, an experimental AI service allowing users to build web applications using natural language prompts, simplifying app creation for non-technical users.
Christina Marie Chapman was sentenced to 8.5 years for facilitating a $17M scheme that allowed North Korean IT operatives to pose as US citizens and secure remote jobs at over 300 US companies.
The U.S. Department of Government Efficiency (DOGE) is using an AI tool to review 200,000 federal regulations, flagging 100,000 for deletion to streamline bureaucracy.
Tesla's Optimus humanoid robot production is far behind its 2025 target, with only hundreds built. Bottlenecks in hand and forearm development are major challenges.
The Internet Archive has officially joined the US Federal Depository Library Program, enhancing public access to government information and solidifying its role in digital preservation.
Aqua Security's Nautilus team discovered Koske, an advanced Linux cryptojacker likely crafted by AI, hiding in panda images and using rootkits for stealthy operations.
European cloud providers (CISPE) are suing the EU Commission, alleging it failed to prevent Broadcom from abusing its market dominance after the VMware acquisition, leading to unfair competition.
Google invests in Energy Dome's CO₂ battery technology for long-duration energy storage, a strategic move towards powering all its global operations with carbon-free energy by 2030.
Google's new "Web Guide" (Search Labs) uses Gemini AI to organize search results into thematic clusters, aiming for efficiency but reigniting "content theft" debates with publishers.
Meta will cease all political, electoral, and issue-based advertising in the EU from October 2025, citing "unworkable complexity" of the new Transparency and Targeting of Political Advertising (TTPA) regulation.
Apple is bolstering its Apple One subscription with new iOS 26 features like "Emoji Game" and "Ready-Made Custom Plans," plus the new AppleCare One device protection plan, to boost revenue.