Do Son A critical Cyrus IMAP vulnerability (CVSS 9.8) on openSUSE allows unprivileged users to gain root access, risking full system compromise.
Amazon Redshift Python Connector has a high severity vulnerability allowing OAuth2 token interception due to missing SSL validation.
A critical Firefox vulnerability in libvpx allows remote code execution without user interaction beyond normal Browse. Update immediately!
Iranian national Sina Gholinejad pleaded guilty for his role in the Robbinhood ransomware attacks targeting U.S. cities like Baltimore.
Google Chrome 137 is out, patching 11 vulnerabilities including high-severity use-after-free (CVE-2025-5063) and V8 flaws. Update now!
Microsoft identified Void Blizzard, a new Russia-affiliated cyberespionage group, targeting critical sectors in NATO countries and Ukraine.
The Catena malware loader is using trojanized app installers (QQBrowser, LetsVPN) to deploy the memory-resident Winos v4.0 RAT.
Critical flaws (CVSS 9.8) in Weidmueller industrial switches allow unauthenticated remote attackers full system compromise. Update firmware.
Mimo (Hezb) is exploiting an unauthenticated RCE (CVE-2025-32432) in Craft CMS to deploy webshells, cryptominers, and proxyware. Patch now!
A critical GitHub MCP server vulnerability allows AI agent hijacking via prompt injection, leading to data exfiltration from private repositories.
Lenze VPN Client for x500 IoT gateways has critical flaws allowing arbitrary code execution via local privilege escalation.
Earth Lamia, a China-linked APT, is targeting critical industries worldwide using SQL injection, CVEs, and custom backdoors like PULSEPACK.
Critical (CVSS 10) unpatched flaw in TI WooCommerce Wishlist allows unauthenticated RCE via file upload. Affects 100K+ sites.
Microsoft updated Windows 11 Task Manager to show consistent CPU usage across all tabs by adopting an industry-standard calculation method.
OpenAI partners with G42, offering all UAE residents free ChatGPT Plus as part of a major AI infrastructure collaboration and Project Stargate.
Microsoft's Aurora AI, an open-source model, achieves breakthrough accuracy in weather forecasting and cyclone prediction using deep learning.
Google executives reportedly visited TSMC, discussing a potential shift for Pixel's Tensor G5 processor manufacturing for the Pixel 10 series.
Red Hat and AMD expand their partnership to deliver agile and optimized AI and virtualization solutions for enterprise hybrid cloud and generative AI.
Exploit BadSuccessor to take over domains with PoC code. No patch, full AD compromise via dMSAs in Windows Server 2025.
New CrossPUSH & CrossSXG attacks exploit HTTP/2 and SXG to bypass Same-Origin Policy, enabling XSS and cookie manipulation.
New research reveals a high-severity mesh Wi-Fi vulnerability (CVSS 9.1) enabling frame injection even without credentials. PoC available.
GIMP versions before 2.99.16 & 3.0.0 are vulnerable to RCE from crafted image files. Patch now to protect your system.