A critical RCE flaw in QNX SDP's PCX image codec exposes systems to DoS or code execution. Patch immediately if using affected versions.
A TPM 2.0 flaw (CVE-2025-2884) allows local attackers to access sensitive memory or cause DoS. Update TPM firmware to protect trusted computing.
Rapid7 reveals BlackSuit ransomware affiliates are adopting Black Basta tactics, using email bombing, fake Quick Assist scams, and evolving Java RATs.
OpenAI has slashed its o3 model API prices by 80%, dropping output costs to $8/million tokens. This makes o3 highly competitive in the AI market.
Android 16 is here for Pixel devices, featuring Material Design 3 Expressive, enhanced Gemini AI, Auracast, new camera tools, and the Pixel VIP widget.
OpenAI unveils o3-pro, a new reasoning AI model with enhanced capabilities for ChatGPT Pro/Teams and API users, offering deeper contemplation and precision.
Qualcomm's Snapdragon AR1+ Gen 1 enhances smart glasses with on-device AI, enabling smaller designs, dual-eye displays, and seamless voice interactions.
Windows 11 24H2 Update Alert: Microsoft Pulls & Reissues June 2025 Patch Due to Compatibility Issues
Microsoft's June 2025 cumulative update for Windows 11 24H2 was briefly pulled due to compatibility issues and has now been reissued with a throttled rollout.
Mark Zuckerberg is personally recruiting top AI talent with multi-million dollar offers, investing billions to develop superintelligent AI at Meta.
A high-severity flaw (CVE-2025-37100) in HPE Aruba Private 5G Core allows unauthorized access to sensitive system files. Update to 1.25.1.1 immediately!
Apache CloudStack LTS updates patch five security flaws, including two critical vulnerabilities in Kubernetes and admin access, risking full system compromise.
A critical Konsole vulnerability allows arbitrary code execution via a telnet:// URL scheme. Linux users must update to 25.04.2 immediately.
Two Windows Kernel vulnerabilities allow SYSTEM-level privilege escalation. PoC exploit code is publicly available.
A high-severity flaw (CVE-2024-43706) in Kibana's Synthetic Monitoring allows unauthorized access. Upgrade to 8.12.1 or apply mitigations immediately.
Ivanti patches three Workspace Control flaws exposing sensitive credentials due to hardcoded keys. Update immediately to secure your enterprise.
A Insyde H2O UEFI flaw (CVE-2025-4275) allows Secure Boot bypass via NVRAM, enabling attackers to inject undetectable malware and rootkits. Update firmware now!
High-severity flaws in Salesforce OmniStudio's FlexCard and Data Mapper expose encrypted customer data. Learn how to protect your organization.
A new report reveals over 40,000 internet-connected security cameras are exposed online, streaming live footage without protection, risking privacy globally.
Google Chrome 137.0.7151.103/.104 fixes two high-severity flaws in media and V8. Update now to protect your system from potential compromise.
A critical CVSS 9.8 flaw (CVE-2025-49653) in Backend.AI allows account takeover via PoC, impacting all versions. Vendor has not issued a patch.
DanaBot's "DanaBleed" memory leak, active for 3 years, exposed C2 server data, aiding law enforcement in Operation Endgame takedown.
A DoS flaw in CoreDNS (CVE-2025-47950) allows unauthenticated attackers to crash servers using DNS-over-QUIC. Update to 1.12.2 immediately or disable QUIC.