Do Son HPE Aruba warns of critical flaws in Instant On Access Points (CVE-2025-37103) allowing unauthenticated admin bypass via hardcoded credentials and authenticated command injection.
An unsecured cloud database belonging to Rockerbox exposed 245,949 records, including plaintext SSNs, driver's licenses, and military IDs, due to misconfiguration.
GlobalFoundries is acquiring MIPS to bolster its RISC-V processor core and software capabilities, strengthening its competitive edge in AI, autonomous driving, and data centers.
iOS 26 introduces a new API allowing EU developers to create third-party phone and messaging apps with cellular call and SMS/MMS/RCS support, likely due to EU DMA compliance.
Apple COO Jeff Williams will retire, with Sabih Khan succeeding him later this month. Apple's industrial design team will now report directly to Tim Cook, marking a generational shift in leadership.
The MAS team suspended TSforge ZeroCID Windows activation, blaming a Microsoft coding error. While the bug persists, TSforge shifted to StaticCID, and other activation tools remain.
Android 6.0+ is getting a new "System Services" settings page, centralizing visibility and management of Google's essential background apps for enhanced transparency.
Google Gemini AI now accesses your Android phone, messages, and WhatsApp by default, overriding privacy settings. Users must manually disable this intrusive cross-app integration.
Intel's Arrow Lake Refresh desktop CPUs, expected H2 2025, will feature enhanced NPUs to meet Copilot+ PC specs, bringing advanced AI capabilities to more Windows desktops.
Zoom rolls out security updates for 6 newly disclosed flaws in Workplace, Rooms, and SDK, addressing DoS, info disclosure, and XSS across all platforms. Update now!
The Git Project has released updates addressing three significant vulnerabilities impacting Git versions up to v2.50.0, including...
ReversingLabs exposes a supply chain compromise of the VS Code ETHcode extension via two lines of malicious code in a GitHub PR, leading to malware deployment.
Siemens warns of critical flaws (CVE-2025-40736 CVSS 9.8 Auth Bypass, SQLi, Path Traversal) in SINEC NMS, allowing unauthenticated remote root access and RCE.
Citrix Warns of Privilege Escalation Vulnerability in Windows Virtual Delivery Agent (CVE-2025-6759)
Citrix Warns of Privilege Escalation Vulnerability in Windows Virtual Delivery Agent (CVE-2025-6759)
Citrix warns of a high-severity local privilege escalation flaw (CVE-2025-6759, CVSSv4 7.3) in Windows VDA, allowing low-privileged users to gain SYSTEM access.
Apache Tomcat 9.0.107 patches three critical DoS flaws (CVE-2025-52434, CVE-2025-52520, CVE-2025-53506) that can disrupt web services via HTTP/2, file uploads, and excessive streams.
The DOJ unsealed an indictment against OmegaPro founders for a $650M global crypto Ponzi scheme. They face charges for defrauding investors with fake forex trading promises.
Microsoft's July 2025 Patch Tuesday fixes 140 flaws, including a SQL Server zero-day (CVE-2025-49719), multiple RCEs, critical Office/Word bugs, and AMD CPU-level threats.
Chinese cybercriminals are escalating attacks on the Philippine financial sector, exploiting NFC technology and smishing to steal from mobile wallets, with a 230% surge in dark web activity.
Fortinet released a critical patch for FortiWeb (CVE-2025-25257, CVSS 9.6). This unauthenticated SQL injection flaw allows remote code execution; update immediately!
Chinese national Xu Zewei, linked to HAFNIUM, arrested in Italy for cyberespionage. He targeted US COVID-19 research & exploited Exchange zero-days, compromising 60,000+ US entities for China's MSS.
Anatsa, an advanced Android banking trojan, is targeting North America via Google Play. It steals credentials and conducts remote fraud through disguised apps and overlay attacks.
Phoenix Contact warns of critical flaws (CVE-2025-25270 CVSS 9.8 RCE, CVE-2025-25268 Auth Bypass, CVE-2025-25271 OCPP Reconfig, CVE-2025-25269 LPE) in CHARX SEC-3xxx EV controllers.