Do Son Wasp framework's OAuth implementation had a critical flaw allowing user impersonation due to case-insensitivity. Update to v0.16.6 now!
Silent Push uncovers "GhostVendors," a massive online fraud operation using 4,000+ fake domains and Facebook ads to impersonate brands and scam consumers.
A UEFI Secure Boot flaw (CVE-2025-3052) allows attackers to bypass security and execute untrusted code on millions of devices. Patch now!
Stealth Falcon APT is exploiting a Windows WebDAV zero-day (CVE-2025-33053) in a sophisticated cyberespionage campaign targeting defense entities in the Middle East & Africa.
Microsoft's June 2025 Patch Tuesday fixes 69 vulnerabilities, including two exploited zero-days in WebDAV and Windows SMB Client. Patch immediately!
Avaya CMS hit by CVSS 9.9 flaw allowing remote command execution via web request. Affected versions must upgrade to avoid system compromise.
A patched Google flaw allowed researchers to extract linked phone numbers without user notification. The vulnerability is now fixed, and no exploits were detected.
PayPal partners with Selfbook, letting users book hotels directly in the app with exclusive discounts and seamless checkout. An 84% booking increase noted!
SAP's June 2025 Security Patch Day reveals critical and high-severity vulnerabilities in NetWeaver, GRC, BW, and BI. Immediate patching is crucial to protect your enterprise.
Microsoft Edge is rolling out an AI-powered history search that uses on-device AI for fuzzy search. It comes with privacy safeguards, and IT can disable it.
iOS 26 introduces a new feature displaying estimated battery charging time for iPhone, similar to Android. Find it in Settings; widget likely coming.
macOS 26 "Tahoe" is the last version supporting Intel Macs. They'll get security updates for 3 years, but Apple pushes for Apple Silicon transition.
An international operation led by JC3 and Microsoft DCU has dismantled a large tech support scam ring in India, primarily targeting elderly Japanese citizens.
iOS 26 introduces "Liquid Glass" design and major updates to Phone, Maps, CarPlay, and Camera, powered by Apple Intelligence, emphasizing privacy.
Apple unifies OS versions to "26" and introduces "Liquid Glass," a new design language with depth and transparency across all platforms.
A critical XXE vulnerability (CVSS 9.9) in GeoTools llows data disclosure and RCE. Update immediately to patched versions!
A critical privilege escalation flaw (CVE-2025-4601) in RealHomes WordPress theme allows low-privilege users to become admins. Update now!
CISA adds two critical vulnerabilities to KEV: Erlang/OTP (RCE) and Roundcube (XSS). Actively exploited, these flaws pose severe risks to systems and email accounts.
SentinelLABS exposes China-nexus APTs (ShadowPad, PurpleHaze) targeting SentinelOne and over 70 organizations in extensive cyber-espionage.
Librarian Ghouls APT launches a new cyber-espionage and cryptojacking campaign targeting Russia and CIS, using legitimate tools for stealth.
A critical RLS vulnerability (CVSS 9.3) in the Lovable low-code platform exposes sensitive user data and allows unauthorized modification.
Kimsuky's AppleSeed campaign targets Korean Facebook, email, and Telegram users with evolved social engineering and stealthy malware.