Do Son Perplexity launches Comet, an AI-powered browser for Max subscribers. Experience automated tasks, natural language interaction, and enhanced workflow.
Gmail's new subscription management feature is rolling out globally, allowing users to easily view active subscriptions and unsubscribe from frequent senders with one click.
OpenAI is launching an AI-powered browser, deeply integrating ChatGPT to enable users to complete tasks via conversational interactions, aiming to challenge Google Chrome's market dominance.
Google Maps navigation is now free on select Garmin smartwatches via Connect IQ! Get turn-by-turn directions on your wrist for adventures and commutes.
JEDEC unveils LPDDR6, the next-gen memory standard for AI and mobile. Expect higher bandwidth, lower power, and enhanced security in future devices.
Linda Yaccarino has resigned as X CEO after two years, reigniting speculation about the platform's future under Elon Musk, particularly its ad business and AI ambitions (Grok).
A critical flaw (CVE-2025-6691, CVSS 8.8) in the SureForms WordPress plugin allows unauthenticated arbitrary file deletion (e.g., wp-config.php), leading to full site takeover.
GitLab releases urgent security updates to fix critical vulnerabilities, including an 8.7 CVSS score XSS flaw. Update your instances now to prevent attacks.
A Windows Update flaw (CVE-2025-48799) allows SYSTEM privilege escalation via arbitrary folder deletion using symlinks on multi-drive systems. PoC available. Patch now!
A critical flaw (CVE-2025-7206, CVSS 9.8) in D-Link DIR-825 firmware 2.10 allows unauthenticated remote buffer overflow, crashing the web interface.
Multiple critical flaws (CVE-2025-44954, -44957, -44963, -44955, -6243) in Ruckus vSZ/RND allow unauthenticated RCE, auth bypass via hardcoded SSH keys and JWT.
AMOS malware just leveled up—now a backdoor, it poses a serious threat to macOS with persistent access and remote command execution.
The Opossum Attack is a new desynchronization flaw exploiting implicit/opportunistic TLS in protocols like HTTP, allowing MitM to compromise encrypted connections. Over 3M servers affected.
Schneider Electric warns of critical flaws (CVSS 10.0 RCE, SSRF, EoP) in EcoStruxure IT Data Center Expert. Patch to v9.0 immediately to prevent data center disruption.
OFAC sanctioned Song Kum Hyok (Andariel) and others for orchestrating North Korea's remote IT worker scheme, which used stolen identities to fund DPRK weapons programs.
GeoServer's RCE flaw (CVE-2024-36401) is actively exploited to deploy NetCat reverse shells and XMRig CoinMiners on Windows/Linux, hijacking resources.
CISA warns of critical flaws in Emerson ValveLink software, exposing cleartext data, allowing code execution, and compromising industrial systems. Update to v14.0 now.
Unit 42 reveals "Gold Melody" uses leaked ASP.NET Machine Keys to achieve in-memory RCE via View State deserialization and privilege escalation via GodPotato, compromising web servers.
cybernewswire
Boston, Massachusetts, 9th July 2025, CyberNewsWire
HPE Aruba warns of critical flaws in Instant On Access Points (CVE-2025-37103) allowing unauthenticated admin bypass via hardcoded credentials and authenticated command injection.
An unsecured cloud database belonging to Rockerbox exposed 245,949 records, including plaintext SSNs, driver's licenses, and military IDs, due to misconfiguration.
GlobalFoundries is acquiring MIPS to bolster its RISC-V processor core and software capabilities, strengthening its competitive edge in AI, autonomous driving, and data centers.