Do Son Microsoft has begun beta testing "Copilot for Gaming," an AI assistant for Xbox on Android and iOS, offering real-time gameplay support and strategic guidance.
A critical Tenda W18Ev2 router flaw allows unauthenticated RCE via admin password change. PoC available, no patch yet.
A critical XSS vulnerability (CVSS 9.1) in Argo CD allows attackers to hijack user sessions and control Kubernetes resources. Update to fix
Redis versions 7.0+ are vulnerable to RCE via a stack buffer overflow in redis-check-aof. Update to 8.0.2, 7.4.4, or 7.2.9.
A stealthy campaign is persistently hacking ASUS routers via undocumented bypasses and CVE-2023-39780, building a backdoor network without malware.
Java applications face a critical risk! A flaw in Apache Commons BeanUtils (CVSS 8.8) can lead to arbitrary code execution. Update immediately.
Zanubis, a sophisticated Android malware, exploits Accessibility Services to steal banking data, intercept 2FA codes, and lock devices.
Threat actor UTG-Q-015 is escalating operations, using 0-days and watering hole attacks against government, finance, and AI in Asia.
A malware campaign is hijacking WordPress sites with fake Java update pop-ups, tricking visitors into downloading malicious executables.
A new campaign by UNC6032 uses fake AI video generator sites and social media ads to distribute a malware cocktail including STARKVEIL.
New campaigns by Silent Werewolf leverage custom C# loaders and advanced delivery to target entities in Russia and Moldova for cyber-espionage.
CHOICEJACKING, a new USB attack, bypasses existing JuiceJacking mitigations on Android and iOS by simulating user input via malicious chargers.
Attackers compromised an MSP's RMM tool (SimpleHelp) to deploy DragonForce ransomware across customer environments.
Katz Stealer, a new MaaS infostealer, targets browsers, crypto wallets, and Discord using advanced evasion and UAC bypass techniques.
Microsoft released an out-of-band update (KB5061906) for Windows Server 2022 to fix unexpected freezing/rebooting of Hyper-V confidential VMs.
Meta has launched an official WhatsApp app for iPad, offering features like video calls, multitasking, and end-to-end encryption.
The Arc browser is being discontinued. Its creator, The Browser Company, is now focusing on a new browser called Dia. Arc will still get security updates.
AlmaLinux OS 10 "Purple Lion" is out, offering RHEL 10 compatibility, extended x86_64-v2 support, and new features like SPICE protocol.
Claude AI now offers free web search for all users, providing more accurate and up-to-date responses. Voice mode is also in testing.
Transferring eSIMs from iPhone to Android may soon be seamless. Android 16 beta hints at a "Quick Transfer" feature with iOS 19.
The EU has issued a new warning to Apple for non-compliance with the Digital Markets Act regarding external developer payments and commissions.
Citrix has patched high-severity flaws in XenServer VM Tools for Windows that could allow attackers to compromise guest VMs. Update to version 9.4.1.