Do Son Trustwave uncovers an Android malware cluster using fake Facebook & TikTok apps to lure victims via brand impersonation, abusing permissions for data collection and traffic monetization.
FortiGuard Labs unveils NailaoLocker, a new ransomware using Chinese SM2 encryption and a built-in, non-functional decryptor, suggesting a prototype or decoy.
wolfSSL 5.8.2 patches four vulnerabilities, including a critical Apple trust store bypass (CVE-2025-7395) and predictable randomness after fork(), impacting secure communications.
JPCERT/CC details a sophisticated, ongoing malware campaign exploiting Ivanti Connect Secure (CVE-2025-0282, -22457) using MDifyLoader, Cobalt Strike, vshell, and Fscan for stealthy persistent access.
AhnLab uncovers SVF Bot, a Python-based DDoS botnet abusing Discord as its C&C channel to target misconfigured Linux servers and launch HTTP/UDP floods.
LAB52 uncovers a sophisticated phishing campaign delivering DeedRAT, a modular backdoor by Chinese APTs, targeting Southeast Asian governments via vulnerable AV software.
eSentire uncovered a sophisticated attack on a US accounting firm, deploying PureRAT via the new Ghost Crypt crypter and a stealthy "Process Hypnosis" injection technique.
Apache Jena versions up to 5.4.0 are vulnerable (CVE-2025-49656, -50151), allowing admin users to compromise the server file system and manipulate configurations.
Kaspersky uncovers a sophisticated APT41 cyberespionage campaign targeting African government IT, showcasing the Chinese group's full TTPs, including Impacket and Cobalt Strike.
LARVA-208 is targeting Web3 developers with fake AI platforms (like Norlax AI) and job lures to deploy Fickle Stealer malware, aiming to steal crypto and sensitive data.
Mark Gurman reports Apple's first foldable iPhone is set for 2026, leveraging its "not the first, but the best" strategy to potentially boost growth in China.
Microsoft announces a paid 6-month ESU program for Exchange Server 2016/2019, offering critical security updates beyond October 2025 EOL to aid migrations.
Intel has officially discontinued Clear Linux OS, its high-performance distribution. This move, part of broader cost-cutting, ends a decade of innovation and requires users to migrate immediately.
WhatsApp's Windows 11 app beta has reverted from native UWP to a WebView2 web wrapper, leading to noticeable performance degradation and increased resource consumption.
Windows 11 is testing a new "shared audio" feature in Insider builds, allowing users to play sound through multiple connected audio output devices simultaneously.
Debian 13 "Trixie" is entering full freeze on July 27 and launching August 9, marking the first official release with RISC-V architecture support.
New iPad Pro models are rumored to feature a dual front-facing camera setup for improved Face ID and video calls, alongside the powerful M5 chip, debuting later this year.
Windows 11 is testing new OOBE features to restore data from the cloud to new PCs, but manual backup/migration for Win32 applications and their data remains a limitation.
Elon Musk announces "Baby Grok," a forthcoming xAI app dedicated to child-friendly AI content, aiming to offer safe, educational, and interactive experiences for children.
Sophos has patched three high-severity LPE vulnerabilities in Intercept X for Windows (CVE-2024-13972, CVE-2025-7433, CVE-2025-7472), allowing local users to gain SYSTEM privileges.
A critical RCE (CVE-2025-54068) in Livewire v3.6.3 and earlier allows unauthenticated attackers to execute arbitrary code on millions of Laravel applications. Update now!
Scanception campaign uses QR code-based phishing in PDFs to bypass traditional security, targeting high-value industries globally for credential and 2FA theft.