Do Son A fileless AsyncRAT campaign, dubbed "Clickfix," targets German-speaking users, luring them into executing obfuscated PowerShell payloads via fake verification prompts.
Water Curse is using GitHub to distribute malicious open-source projects, weaponizing 76 accounts with multi-stage malware targeting developers, red teamers, and gamers.
Apache Tomcat patched four vulnerabilities affecting versions 9.0, 10.1, and 11.0, ranging from DoS to privilege bypass. Update immediately
CISA adds two actively exploited zero-days to KEV: an iOS zero-click flaw used by spyware (CVE-2025-43200) and a command injection in TP-Link routers
A critical flaw in OneLogin's AD Connector exposed API keys, allowing attackers to impersonate users across organizations via unclaimed S3 buckets and forged JWT tokens.
PoCGen is a new AI tool using LLMs, static, and dynamic analysis to automate PoC exploit generation for npm vulnerabilities, achieving high success rates at low cost.
Zyxel firewalls are under a coordinated attack exploiting critical RCE flaw CVE-2023-28771 (CVSS 9.8) via UDP port 500, likely by Mirai botnets. Patch immediately
Hackers leaked 7.4 million Paraguayan citizen records on the dark web, demanding a $7.4M ransom. The breach likely stems from infostealer malware, sparking national security concerns.
GrayAlpha, linked to FIN7, escalates tactics with fake browser/7-Zip updates and TAG-124 TDS, spreading NetSupport RAT in a multi-pronged infection campaign.
A critical RCE flaw (CVE-2025-3248) in Langflow is being actively exploited to deploy the stealthy Flodrix botnet for reconnaissance and diverse DDoS attacks on AI app servers.
Online fraud is rising, and cybercriminals are coming up with ever more inventive ways to separate you...
Apple confirms iPhone Mirroring is restricted in the EU due to fears regulators might mandate Android mirroring support under the Digital Markets Act, undermining exclusivity.
MIT researchers unveiled an AI-powered technique for reversible restoration of historical paintings, creating a "damage map" and reproducing colors on a removable film.
YouTube is expanding 30-second non-skippable ads, forcing more users to watch full commercials unless they subscribe to Premium or use an ad-blocker.
Malicious phishing apps are bypassing Google Play Store security, tricking users into revealing crypto wallet seed phrases and draining funds. Beware and never share your seed
LibreOffice 25.8 Beta 2 officially ends support for Windows 7, 8, 8.1, and all 32-bit operating systems, focusing development on 64-bit platforms.
Apple will release public betas for iOS 26, macOS Tahoe, and, for the first time, AirPods firmware in July, bringing new features like remote camera control.
Microsoft is testing an enhanced Windows Backup feature (KB5061087) for Windows 10, aiming to streamline data migration to new Windows 11 PCs.
OpenAI Codex now generates multiple code solutions per task, with enhanced monitoring, task cancellation, and improved handling of network restrictions for developers.
OpenAI upgraded ChatGPT Search for smarter, more comprehensive responses, better conversational context, multi-search for complex queries, and image search.
Google Search is testing "Audio Overviews," allowing users to listen to AI-generated spoken summaries of search results for a more comprehensive understanding
Apple is offering free repairs for M2 Mac Mini models manufactured between June-November 2024 that experience power-on issues. Check your serial number for eligibility