Do Son The U.S. DoD is investing up to $200M in AI firms like OpenAI, Google, Anthropic, and xAI to develop advanced AI for military applications and "superintelligence."
Microsoft extends Windows 10 security updates via ESU until Oct 2028 and Microsoft 365 support, giving users more time to migrate to Windows 11.
Meta's multi-billion dollar investment in gigawatt-scale AI data centers is raising alarms over massive water consumption and escalating community tensions.
Jack Dorsey launches "Sun Day," a new iOS app for tracking personal sun exposure, UV radiation, and estimating Vitamin D synthesis based on user data.
AWS replaced its 1-year free tier with a credit-based model (up to $200 credits, 6 months max) for new users, effective July 15, 2025. Accounts close if not upgraded.
A Russian crypto developer lost $500K after installing a fraudulent "Solidity Language" extension for Cursor AI IDE from Open VSX, which deployed malware for remote access and data theft.
A critical SSTI flaw (CVE-2025-53833, CVSS 10.0) in LaRecipe allows unauthenticated RCE on affected servers via template injection. Update to v2.8.1 immediately!
Google officially confirmed plans to unify Android and ChromeOS into a single platform, aiming for seamless cross-device experiences and streamlined development for its AI-driven future.
CISA adds critical Wing FTP Server RCE flaw (CVE-2025-47812, CVSS 10.0) to KEV. Actively exploited via null byte and Lua code injection; patch to 7.4.4 immediately!
A flaw (CVE-2025-53101) in ImageMagick allows stack buffer overflows via filename templates, risking memory corruption and remote code execution. Patch now!
North Korean APTs are using XORIndex malware in a new npm supply chain attack, infiltrating developers via 67 malicious packages to steal crypto wallets and credentials.
Unit 42 uncovers HazyBeacon, a novel backdoor using AWS Lambda URLs for stealthy C2. It's deployed via DLL sideloading, targeting Southeast Asian govts for trade documents.
A flaw (CVE-2025-43856) in Immich allows account hijacking via a broken OAuth2 implementation (missing state parameter check). Update to v1.132.0 immediately!
BlackSuit, a rebranded Royal/Conti ransomware, unleashes destructive multi-stage attacks. It uses Cobalt Strike, rclone for data exfil, and deletes shadow copies for stealth and speed.
cybernewswire 
A critical RCE flaw (CVE-2025-5333) in Symantec Endpoint Management (Altiris) allows unauthenticated attackers to execute arbitrary code via insecure .NET Remoting deserialization.
A critical XXE flaw (CVE-2025-53689) in Apache Jackrabbit allows blind XXE attacks for data exfiltration, DoS, or internal file exposure. Update to patched versions immediately!
Moonshot AI open-sourced its Kimi K2 model, a 1T-parameter MoE AI, showing exceptional performance (outperforming Grok) and prompting Perplexity AI to use it for post-training.
Tim Cook is expected to remain Apple CEO for 5 more years amid a generational leadership transition. Apple faces AI and product innovation challenges as senior executives eye retirement.
Google Drive for desktop is rolling out a redesigned UI, unifying notifications, settings, sync activities, and shared files into a single view for all users.
OpenAI postponed its open-weight AI model release due to security concerns. Separately, its WindSurf acquisition reportedly collapsed, with top executives joining Google DeepMind for $2.4B.
MoonPay CEO Ivan Soto-Wright lost $250K in a crypto scam where perpetrators impersonated a Trump Inaugural Committee co-chairman, highlighting executive-level deception.