Do Son Bitdefender uncovers a large network of convincing mystery box scams on social media stealing credit card data via hidden subscriptions. Watch out!
NVIDIA patches CVE-2025-23245 in TensorRT-LLM, fixing a high-risk flaw that could allow code execution. Users urged to update to v0.18.2 immediately.
Amazon introduces Nova Premier, its most powerful generative AI model with a 1 million token context window, available on Amazon Bedrock.
Google funds training for 100,000 electricians to meet rising energy demands from AI growth, while also backing alternative energy and grid efficiency efforts.
Samsung expresses concern over US tariffs and AI export controls impacting future product launches and costs, despite record Q1 revenue driven by Galaxy S25.
Mark Zuckerberg predicts AI will develop most of Meta's code within 1-1.5 years and announces premium Meta AI App features with a likely subscription.
SonicWall warns of active attacks on SMA 100 devices via CVE-2023-44221 and CVE-2024-38475. Users urged to update firmware immediately.
CVE-2024-10442 allows unauthenticated RCE on Synology DS1823xs+ via Replication Service flaw. Patch now to avoid exploit risk.
Finit's internal getty flaw lets users bypass /bin/login and access Linux systems without authentication. Patch to version 4.11 or use external getty.
ANSSI reveals sustained cyber espionage by APT28 (Fancy Bear) targeting French institutions since 2021. Learn about their tactics and targets.
CVE-2025-32444 (CVSS 10): Critical RCE Flaw in vLLM’s Mooncake Integration Exposes AI Infrastructure
CVE-2025-32444 (CVSS 10): Critical RCE Flaw in vLLM’s Mooncake Integration Exposes AI Infrastructure
CVE-2025-32444 exposes vLLM’s Mooncake integration to RCE via insecure pickle deserialization over ZeroMQ. Patch to v0.8.5 now.
Trustwave uncovers a fake CAPTCHA campaign delivering NodeJS backdoors via PowerShell and TryCloudflare, with SOCKS5 tunneling and RAT capabilities.
Gremlin Stealer malware, written in C#, exfiltrates browser data, crypto wallets, and VPN credentials, distributing stolen data via a Telegram-based backend.
Outlaw botnet targets Linux servers via weak SSH, using Perl scripts and XMRig miners for crypto mining and backdoor access, Kaspersky warns.
Sophos researchers detail a complex campaign using Cobalt Strike, DLL sideloading, and clever techniques like expired certificates
Earth Kasha targets Taiwan and Japan in a March 2025 spear-phishing campaign using ANEL and NOOPDOOR backdoors for stealthy cyber espionage.
Commvault updates its March advisory after detecting nation-state threat activity in Azure; no data breach confirmed, advanced defenses deployed.
cybernewswire
Frankfurt am Main, Germany, 30th April 2025, CyberNewsWire
Microsoft CEO Satya Nadella reveals AI is now responsible for 20-30% of the company's internal code generation, boosting development speed.
LG will cease all software updates and support for its smartphones starting June 30, 2025, marking its final exit from the mobile market.
Meta introduces the Llama API toolkit, empowering developers with flexible access to its Llama large language model for easy AI integration.
Meta unveils Meta AI, a standalone app offering direct access to its conversational AI, competing with ChatGPT. Explore social prompts and personalized responses.