Do Son A high-severity BIND DNS server vulnerability allows remote attackers to crash servers using malformed TSIG signatures. Urgent update advised.
Windows 11 is enhancing admin protection by requiring Windows Hello for sensitive tasks and app access to camera, mic, and location.
Chrome can now automatically change compromised passwords for you, making your online accounts more secure after a data breach.
cybernewswire 
A nearly three-year intrusion at SK Telecom compromised 27 million users, stealing IMSI, USIM keys, and texts, prompting SIM card replacements.
A reflected XSS flaw in GlobalProtect (CVE-2025-0133) allows malicious JavaScript execution. PoC exploit code is available. Update your PAN-OS.
Pwn2Own Berlin saw VMware ESXi and Windows 11 compromised, along with Firefox. Researchers earned over $1M for 30+ zero-day exploits.
Microsoft is changing its nonprofit licensing, discontinuing free M365 Business Premium & E1, offering basic licenses and significant discounts instead.
Google Beam (formerly Project Starline) is launching with HP, bringing hyper-realistic 3D video conferencing to enterprises.
Google I/O 2025: Flow, Veo 3 (with audio), and Imagen 4 revealed for advanced AI-powered video and image creation.
Google AI Ultra is here at $249.99/month, offering advanced Gemini models, Flow, Veo 3, and 30TB Cloud storage.
Google's new FireSat satellite uses AI to detect wildfires in just 20 minutes, a major leap for rapid emergency response and monitoring.
Lexmark CVE-2025-1127 flaw allows remote code execution via embedded web server. Affects many printer models—patch firmware to version .240.206+ now.
Critical CVSS 9.8 flaw in vLLM allows remote code execution via PyNcclPipe. Patch to 0.8.5 now to protect your AI infrastructure.
A critical containerd flaw (CVE-2025-47290) allows malicious container images to hijack the host filesystem. Update to version 2.1.1 now.
CISA warns of critical CVSS 9.8 flaws in Vertiv Liebert devices allowing RCE and auth bypass—patch now to protect OT environments.
Hazy Hawk is exploiting DNS misconfigurations and CNAME hijacking to take over subdomains of high-profile organizations for scams and malware.
A critical vulnerability (CVE-2025-40634) in TP-Link Archer AX50 routers allows remote code execution as root. A public PoC increases the risk.
CVE-2025-22157 is a CVSS 7.2 Jira vulnerability allowing privilege escalation. Update Jira Data Center now to prevent unauthorized access.
A critical DNSdist vulnerability allows unauthenticated attackers to launch DoS attacks, disrupting DNS operations. Update now to secure your system.
Beware fake Kling AI sites! A new campaign uses deceptive filenames to trick users into downloading infostealers, stealing crypto and browser data.
A critical flaw in Broadcom's Automic Automation Agent for Unix exposes systems to privilege escalation. Check your version and update to stay secure.