Do Son Darktrace uncovers a SocGholish campaign using obfuscated loaders and legacy Windows exploits to harvest NTLM hashes and deliver ransomware payloads.
FortiGuard reveals an Iranian APT's multi-stage intrusion into Middle Eastern critical infrastructure using custom malware and stealthy persistence.
Mozilla CFO warns that losing Google search default payments in the antitrust trial could jeopardize Firefox's future and the open web.
Top Chinese smartphone brands (Xiaomi, Huawei, OPPO, vivo, OnePlus) are reportedly developing an Android-based OS independent of Google amid US tech restrictions.
Microsoft announces a new "Copilot+ PC" and Surface device launch on May 6th. Expect a smaller Surface to rival iPad Pro and Snapdragon processors.
Recorded Future analysis exposes MintsLoader, a stealthy malware loader using advanced evasion to target industrial, legal, and energy sectors.
A critical vulnerability (CVE-2025-2774) in Webmin allows remote attackers to escalate privileges and execute code as root. Update to version 2.302 now.
Cisco Talos reports on AiTM attacks that bypass MFA by using reverse proxies to steal credentials and session cookies, leading to account takeover.
EclecticIQ report details Luna Moth's callback phishing attacks using legitimate RMM tools to breach US legal, financial firms for multi-million dollar ransoms.
PRODAFT report details Nebulous Mantis (Cuba/STORM-0978), a Russian-speaking group using RomCom RAT for espionage and ransomware.
CISA warns of critical flaws in KUNBUS Revolution Pi that allow remote code execution, authentication bypass, and XSS attacks in industrial systems.
E-commerce has seen a significant boom over the past few years thanks to its flexibility and convenience....
Microsoft is phasing out password saving and autofill in Authenticator. Saved passwords will sync to Edge starting June 2025. Plan your migration!
Google's Gemini now lets you edit images using text prompts! Change backgrounds, add elements, and more. Includes SynthID watermarking.
Apple updates U.S. App Store rules to allow external links and third-party payments after losing antitrust case brought by Epic Games.
Redis adopts AGPLv3 alongside its SSPL license, returning to open source for Redis 8. Aims to boost community and address cloud provider concerns.
Microsoft will soon default new accounts to passwordless login with passkeys & MFA. Existing users can still choose passwords. Learn more!
CVE-2025-47154 (CVSS 9.0) is a use-after-free flaw in the Ladybird browser engine that attackers can exploit. Update to the fixed build now.
Couchbase Server for Windows hit by LFI flaw CVE-2025-46619 (CVSS 8.7). Upgrade to 7.6.4 or 7.2.7 to prevent unauthorized file access.
SonicWall fixes CVE-2025-2170, an SSRF flaw in SMA1000 appliances. Users urged to update to platform-hotfix 12.4.3-02925 or later to stay secure.
Socket discovers Python packages abusing Gmail SMTP for covert C2 tunnels, evading firewalls and exfiltrating data through trusted email infrastructure.
Intrinsec reveals shared infrastructure between Eye Pyramid C2 and ransomware groups like Rhysida and Vice Society in new threat intelligence report.