Do Son Starting June 20, the EU will require smartphones & tablets to display repairability, energy, & durability labels, aiding consumer decisions.
Google acknowledges Pixel 7a battery swelling issue, offers free repairs in many countries. Check eligibility and available compensation options.
Google is tightening its remote work policy, requiring many employees to return to the office or face consequences. Learn about the new mandates.
Critical security flaw (CVE-2024-54085) in AMI BMC software threatens PCs. ASUS releases urgent firmware updates for workstation motherboards. Update now!
CVE-2025-31324 lets attackers exploit SAP NetWeaver to upload webshells and deploy C2 tools like Brute Ratel, affecting patched enterprise systems.
OpenAI boosts ChatGPT Plus quotas—o3 model now allows 100 messages/week, o4-mini 300/day—giving paid users more access while free-tier limits remain.
A flaw in Windows tied to the inetpub folder (CVE-2025-21204) allows attackers to block updates without admin rights, exposing systems to future threats.
Perplexity.ai shows interest in acquiring Chrome amid DOJ antitrust case, raising concerns about OpenAI's stewardship and Google's Android restrictions.
The EU fines Apple €500M and Meta €200M for violating the Digital Markets Act, citing user rights restrictions and coercive data-for-service models.
Trend Micro reveals how Russian IP networks support North Korea’s cybercrime—from crypto theft to malware-laced fake job interviews and potential espionage.
A vulnerability (CVE-2024-27876) in Apple's libAppleArchive allows arbitrary file writes and can bypass Gatekeeper on macOS and iOS. Patches are available.
Power Parasites targets users with job and investment scams using fake domains mimicking Siemens, Repsol, Netflix, and more, Silent Push reports.
A new phishing campaign targets WooCommerce users with fake security alerts. Learn how attackers use IDN homographs and malicious plugins to compromise stores.
Trellix analysis reveals Lumma Stealer's latest tactics: code obfuscation, API hashing, ETW evasion, anti-VM. Learn how this InfoStealer avoids detection.
Kimsuky revives PebbleDash malware using spear-phishing and patched RDP DLLs for stealthy access and control, warns new ASEC March 2025 report.
Cisco Talos uncovers ToyMaker's IAB activity, paving the way for Cactus ransomware. Learn how LAGTOY backdoor & credential theft led to a major breach.
CISA confirms stability of the CVE Program, dispelling funding concerns and reaffirming its commitment to cybersecurity and vulnerability management.
High-severity Redis vulnerability (CVE-2025-21605) allows unauthenticated users to cause DoS. Upgrade to patched versions or apply mitigations to protect your server.
GitLab releases critical security updates 17.11.1, 17.10.5, 17.9.7 to fix high-severity XSS, account takeover risks. Upgrade now to protect your GitLab instance.
Critical SonicWall flaw (CVE-2025-32818) in SSLVPN can crash firewalls, leading to DoS. Update your Gen7 devices now!
CVE-2025-32965: A backdoor in xrpl.js SDK allows theft of crypto wallet keys. Users must upgrade and rotate compromised credentials immediately.
A critical vulnerability (CVE-2025-34028) in Commvault Command Center allows remote code execution. Patch immediately or isolate vulnerable instances.