Do Son Google Drive for desktop is rolling out a redesigned UI, unifying notifications, settings, sync activities, and shared files into a single view for all users.
OpenAI postponed its open-weight AI model release due to security concerns. Separately, its WindSurf acquisition reportedly collapsed, with top executives joining Google DeepMind for $2.4B.
MoonPay CEO Ivan Soto-Wright lost $250K in a crypto scam where perpetrators impersonated a Trump Inaugural Committee co-chairman, highlighting executive-level deception.
Zoom's new Custom AI Companion ($12/month) brings agent-like AI to 16 business apps like ServiceNow, Jira, & Asana, offering real-time meeting summaries & task orchestration to boost productivity.
GPUHammer is the first Rowhammer attack on GDDR6 memory (NVIDIA A6000), successfully inducing bit flips that can degrade AI model accuracy. Enable System-Level ECC to mitigate.
A critical flaw (CVE-2025-7503, CVSS 10.0) in Shenzhen Liandian IP cameras allows root access via an undocumented, default-enabled Telnet service with hardcoded credentials. No patch available.
GMX was hacked for $40M via smart contract exploit. The hacker returned funds for a $5M bounty after GMX's on-chain appeal, sparking debate in the security community.
Evalian uncovers a phishing campaign spoofing Red Bull job offers using legitimate services, low-cost VPS, and "slow kill" tactics to steal credentials via fake Facebook logins.
Interlock RAT Gets PHP Makeover: New Variant Uses Steganography & ClickFix for Stealthy Infiltration
Interlock RAT Gets PHP Makeover: New Variant Uses Steganography & ClickFix for Stealthy Infiltration
The DFIR Report uncovers a new PHP-coded Interlock RAT variant, using compromised websites and ClickFix social engineering to deploy stealthy malware for recon and persistence.
SpaceX invests $2B in xAI to accelerate Grok AI development and Tesla integration. Grok 4 offers multimodal input/multi-agent support, but faced recent hate speech controversy.
Fortinet released a critical patch for FortiWeb (CVE-2025-25257). This unauthenticated SQL injection flaw allows remote code execution. PoC Releases!
A kernel-level UAF flaw (CVE-2025-38001) in Linux HFSC/NETEM allows root privilege escalation via RBTree manipulation. PoC available. Update now!
CYFIRMA unveils RenderShock, a zero-click attack strategy exploiting silent OS background processes like file previews and search indexing to execute malware and steal credentials without user interaction.
Unit 42 exposes SLOW#TEMPEST, a new malware variant using advanced CFG obfuscation and indirect function calls to evade static analysis, making it nearly impossible to detect.
CERT/CC warns of critical flaws in Gigabyte UEFI firmware, allowing SMRAM writes and SMM code execution. Patch immediately to prevent firmware implants and Secure Boot bypass.
Axis warns of a critical flaw (CVE-2025-30023, CVSS 9.0) in Camera Station Pro/5 and Device Manager, allowing authenticated RCE via protocol deserialization. Update immediately.
A supply chain attack injected backdoor malware into Gravity Forms plugin downloads from the official website. The backdoor allows RCE and creates admin accounts.
Google exposes a vast phishing campaign hijacking Booking.com reservation chats to steal credit card details from travelers, impacting thousands globally since Nov 2023.
Darktrace uncovers a crypto scam using fake software startups (AI, gaming, Web3 themes) with professional online presences to distribute Electron malware (Windows) and Atomic Stealer (macOS) for crypto theft.
A malicious campaign on GitHub is distributing Lumma Stealer via fake "Free VPN for PC" and "Minecraft Skin Changer" repositories, using obfuscation and process injection for stealthy delivery.
1Password offers a recurring free one-year Family Plan. Learn how to circumvent the expiration by exporting/importing data to a new account, extending free premium access.
Meta has finalized its acquisition of voice AI startup PlayAI, integrating its team to enhance Meta AI, virtual characters, and voice tech for smart glasses, boosting its "AI Superintelligence" initiative.