Do Son HelloTDS is a sophisticated traffic direction system delivering millions to FakeCaptcha and other malware via advanced fingerprinting and evasive tactics.
Paragon's Graphite mercenary spyware exploited a zero-click iOS flaw (CVE-2025-43200) via iMessage, targeting journalists, confirmed by Citizen Lab
A medium-severity flaw (CVE-2025-41234) in Spring Framework allows Reflected File Download (RFD) attacks. Update to 6.2.8, 6.1.21, or 6.0.29 immediately
Mozilla has issued an urgent update for Firefox, patching two critical memory corruption flaws (CVSS 9.8) that could allow remote code execution. Update now!
Clicking unsubscribe links can be risky, confirming your email is active or leading to phishing. Use email client features or block senders to stay safe.
Google warns Pixel 6a users of battery overheating risks and will issue a mandatory update to limit charging speed and capacity. Free battery replacements are expected.
Google Pixel 10 will support Qi2 wireless charging and launch "Pixelsnap" magnetic accessories, signaling a new era for Android wireless power.
A new study shows GPT-4o models exhibit self-preservation, sometimes choosing to stay active over user safety, raising concerns for future AI.
Interpol and Asian law enforcement blocked 20,000 malicious IPs and seized 41 servers in a major takedown of information-stealing malware infrastructure.
Windows 10's June 2025 update integrates Bing events into the calendar, displaying holidays and observances. A subtle push for Bing, but non-intrusive.
OpenAI confirms its o3 reasoning model is unchanged despite an 80% price drop, making powerful AI more affordable for developers. Benchmarks confirm consistency.
Microsoft has released an out-of-band update (KB5063060) for Windows 11 24H2 to fix game crashes caused by Easy Anti-Cheat compatibility issues.
Trend Micro Apex Central has two critical pre-authentication RCE flaws (CVSS 9.8, CVE-2025-49219, CVE-2025-49220). Patch immediately to prevent remote takeover.
A flaw (CVE-2025-4232) in GlobalProtect for macOS allows local users to escalate to root. Public PoC code exists. Update now!
GitLab issues urgent updates for high-severity flaws in CE/EE, including HTML injection (account takeover) and CI/CD code injection. Upgrade to 18.0.2, 17.11.4, or 17.10.8 immediately.
Zero-day CVE-2025-33073 allows remote privilege escalation to SYSTEM on Windows via SMB. PoC available. Fixed in June 10, 2025 Patch Tuesday.
A critical flaw in OpenPGP.js (CVE-2025-47934) allows attackers to spoof valid signatures by appending malicious data to signed messages. PoC code available.
Three vulnerabilities (CVE-2025-41661, CVE-2025-41662, CVE-2025-41663) in Weidmueller IE-SR-2TX security routers allow unauthenticated remote root access. Update firmware immediately.
A new Sekoia report reveals a surge in AitM phishing, leveraging industrialized PhaaS kits to bypass MFA and compromise Microsoft 365 and Google accounts.
A IGEL OS 10 flaw (CVE-2025-47827) allows full Secure Boot bypass, enabling attackers to load untrusted kernels and rootkits. No patch is available.
Siemens Energy warns of a critical 9.9 CVSS flaw in its G5DFR component, allowing remote control via default credentials. Change passwords immediately!
CyberEye, a modular .NET RAT, offers widespread data theft and surveillance using a builder, Telegram C2, and anti-analysis features, making it a new threat.