Microsoft's "Edit" command-line text editor is set to be pre-installed in Windows 11, offering simple text file manipulation.
Mozilla's Firefox Add-ons now auto-detects malicious crypto wallet extensions, enhancing user security and preventing theft.
Microsoft proposes a new browser policy to pause iframe media when hidden, preventing unexpected audio from unmuting.
Apple plans a major SwiftUI overhaul at WWDC 2025, simplifying rich text and web content integration for developers.
macOS 26 "Cheer" launches June 9. Find out if your older MacBook Pro or iMac will support Apple's next-gen OS.
Samsung, Galaxy Z Fold7, Foldable Phone, Galaxy Ultra, AI, Virtual Reality, Project Moohan, Smartphone, Snapdragon 8 Elite
OpenAI upgrades Codex with internet access for dependency installation, package upgrades, and more. Free for ChatGPT Plus!
Broadcom's Tomahawk 6, a 102.4 Tbps switch chip, revolutionizes AI data centers, boosting GPU utilization to 90% and cutting training costs.
CISA adds 3 actively exploited Qualcomm Adreno GPU flaws to KEV catalog. Android devices at risk from memory corruption and use-after-free bugs.
Two unpatched CVSS 9.8 flaws in telecom gear enable remote code execution via buffer overflows, exposing critical infrastructure to attack.
Critical CVSS 9.6 vulnerability in IBM QRadar & Cloud Pak for Security exposes systems to RCE & DoS. Patch immediately to secure your platforms.
PoC reveals how a Linux vsock driver flaw enables local users to escalate privileges to root via a dangerous Use-After-Free vulnerability.
Crocodilus, a rapidly evolving Android banking trojan, now targets global users, stealing crypto seed phrases and bypassing defenses.
Samba vulnerability (CVE-2025-0620) exposes stale group data in Kerberos SMB sessions. Learn how this impacts security and mitigation.
Socket uncovers malicious RubyGems impersonating Fastlane plugins, stealing sensitive CI/CD data by rerouting Telegram API calls. Beware of fastlane-plugin-telegram-proxy!
Sysdig uncovers a campaign exploiting misconfigured Open WebUI instances to deploy AI-assisted cryptominers and infostealers, showcasing new threat vectors.
Wordfence uncovers a sophisticated WordPress malware disguised as a legitimate plugin, stealing admin credentials & enabling remote code execution.
Socket discovers 4 malicious npm packages designed to drain crypto wallets on BSC & Ethereum, downloaded over 2,100 times.
Discover VulBinLLM, a groundbreaking LLM-powered framework by UCLA & Cisco Research, revolutionizing binary vulnerability detection in stripped software.