Do Son A critical flaw (CVE-2025-6328) in D-Link's EOL DIR-815 router allows remote code execution via a stack-based buffer overflow. No patches will be issued.
Citrix Bleed 2 (CVE-2025-5777, CVSS 9.2) is actively exploited to hijack sessions and bypass MFA on NetScaler ADC/Gateway. Patch immediately to prevent covert access and data theft.
Six critical flaws in D-Link's EOL DIR-816 routers are exposed. No patches will be issued; replace device immediately to avoid remote code execution.
Sucuri uncovers a complex multi-stage malware campaign infecting WordPress sites via header.php to deliver a hidden RAT (client32.exe) and evade detection.
Meta AI is testing a feature to access unuploaded photos from your camera roll for content suggestions, sparking privacy concerns despite claims it's opt-in and not for ad targeting
A flaw (CVE-2025-4679) in Synology ABM leaked a static client_secret, allowing unauthenticated attackers read-only access to all Microsoft 365 tenants with ABM installed.
Google launches Doppl, an experimental AI app in the US. It creates personalized digital avatars for virtual try-ons and animated videos of users wearing different outfits.
ASEC uncovers sophisticated attacks targeting South Korean Windows IIS and Linux systems, deploying WogRAT, MeshAgent, and SuperShell for cyber-espionage and lateral movement.
Meta is reportedly in talks to acquire PlayAI, a voice-generation AI startup, to strengthen its AI voice tech and multimodal capabilities, following its Scale AI investment and superintelligence push.
Apple has launched the Swift on Android Workgroup to bring formal Swift support to Android, aiming for seamless cross-platform app development and enhanced tooling.
A new Snake Keylogger campaign exploits an undocumented DLL sideloading technique via jsadebugd.exe to target energy and logistics sectors with fake oil deals.
Google unveils Gemma 3n, a groundbreaking open-source, on-device multimodal AI model. It brings high-end performance to mobile devices via MatFormer architecture and memory optimizations.
Microsoft unveils Windows 11 25H2 as the 2025 annual update, offering seamless upgrades via Enablement Packages and extending support for consumer and enterprise editions
Windows 11 25H2 Dev Build introduces deeper password manager integration, starting with 1Password, allowing Windows Security to use and save passkeys in 1Password vaults.
In the era of online presence, using several accounts or maintaining more than one online account is...
CYFIRMA uncovers "Odyssey Stealer," a new macOS malware using fake App Store prompts & typosquatting to steal crypto wallets, passwords, and browser data from Western users.
Varonis uncovers a widespread phishing campaign abusing Microsoft 365's Direct Send, spoofing internal users to bypass email security and harvest credentials.
Netskope uncovers Sainbox RAT (Gh0stRAT variant) and Hidden rootkit delivered via fake software installers to Chinese users, leveraging DLL sideloading and sRDI for stealth.
cybernewswire 
At a time when the cryptocurrency market is booming, Winner Mining cloud mining is reshaping the cryptocurrency...
Microsoft's 2011 Secure Boot certificates expire in 2026, impacting all supported Windows versions. Update now via Windows Update to avoid boot failures, especially on isolated systems.
Google's "Ask Photos" feature relaunches in the US, blending traditional image search with Gemini AI for faster, more contextual natural language queries within your photo library.