Do Son Samsung unveiled its thinnest Galaxy Z Fold7 (4.2mm unfolded) and Z Flip7 at Galaxy Unpacked 2025. A tri-fold phone is teased for unveiling by year-end, with new AI features.
A US court dismissed an antitrust lawsuit accusing Apple, Mastercard, and Visa of monopolistic practices in mobile payments, citing lack of evidence for "bribery" claims.
Russian basketball player Daniil Kasatkin was arrested in France on a US warrant for allegedly acting as a ransomware negotiator in attacks on 900+ organizations.
Microsoft enables JScript9Legacy by default in Windows 11 24H2, replacing the deprecated JScript. This enhanced engine offers improved security against XSS and maintains backward compatibility.
Google Gemini app now features image-to-video generation powered by Veo 3! AI Ultra & Pro subscribers can turn photos into dynamic videos with sound and watermarks.
Ubuntu 24.10 "Oracular Oriole" reaches End of Life today, July 10, 2025. Upgrade to Ubuntu 25.04 or 24.04 LTS to ensure continued security and support!
Windows 11's new black BSOD is here, rolling out to Release Preview. It promises faster reboots and includes "Quick Machine Recovery" for enterprise users.
Google introduces Android Canary, replacing Developer Preview, for earlier and continuous access to new Android features and APIs, ideal for developers.
CISA adds critical CitrixBleed 2 (CVE-2025-5777, CVSS 9.2) to KEV, confirming active exploitation. Attackers are extracting session tokens to bypass MFA and hijack sessions on NetScaler ADC/Gateway
Apache HTTP Server 2.4.64 patches 8 vulnerabilities, including HTTP Response Splitting, SSRF, DoS, and TLS desync attacks. Upgrade immediately!
Huntress witnessed active exploitation of a critical RCE flaw (CVE-2025-47812) in Wing FTP Server, allowing root/SYSTEM access via null byte injection and Lua code execution.
Juniper warns of a critical flaw (CVE-2025-52950, CVSS 9.6) in Security Director 24.4.1, allowing unauthenticated attackers to read or tamper with sensitive resources. Update immediately.
Synacktiv reveals Laravel’s APP_KEY vulnerability allows RCE via deserialization attacks when the key is leaked or guessable, risking full application compromise.
SentinelOne uncovers a new macOS.ZuRu variant using a trojanized Termius app. It gains persistence via LaunchDaemon and deploys a Khepri C2 beacon for remote control.
SafePay, a new centralized ransomware group linked to LockBit 3.0, has hit 200+ MSPs/SMBs via RDP. It bypasses Defender, encrypts files, and exfiltrates data using WinRAR and FileZilla.
DoNot APT (APT-C-35) expands its cyber-espionage to a European foreign affairs ministry, using spear-phishing with Google Drive links to deliver the LoptikMod backdoor.
Iranian-backed "Pay2Key.I2P" ransomware resurfaced on I2P, offering 80% profit for attacks on Western targets. Linked to Fox Kitten & Mimic, it merges cybercrime with geopolitical motives.
A flaw in Helm (CVE-2025-53547, CVSS 8.5) allows local code execution when updating dependencies via a malicious Chart.yaml and symlinked Chart.lock file
cybernewswire
Cary, North Carolina, 10th July 2025, CyberNewsWire
xAI unveils Grok 4 and Grok 4 Heavy, claiming superior performance in benchmarks and multi-agent capabilities. A new era of AI for enterprise and power users.
OpenAI acquires Jony Ive's startup io to develop groundbreaking AI-powered devices. The partnership aims to redefine human-technology interaction.
Google's AI Overview is impacting publisher traffic with no opt-out. Cloudflare is pushing for a separate AI crawler to protect content creators.