Do Son Facing backlash, Broadcom has reversed its 72-core minimum licensing for VMware, reinstating the lower core count. Future licensing changes remain uncertain.
Linux Kernel 6.13 has reached its end-of-life after just three months. Users should upgrade to Kernel 6.14 or an LTS version for continued support.
Cellebrite's Android zero-day exploit (CVE-2024-53104) used in alleged spyware attempt on activist. Details, technical analysis, and patch info.
CVE-2025-32434: Critical RCE vulnerability in PyTorch’s torch.load(weights_only=True) affects ≤2.5.1. Update to v2.6.0 to patch this major flaw
The Billbug group targeted Southeast Asian organizations using advanced tools & DLL sideloading. This report details their sophisticated espionage campaign.
Yokogawa recorders have a critical vulnerability (CVE-2025-1863) due to insecure default settings. Attackers can manipulate data. Update security now!
ASUS routers have a critical vulnerability (CVE-2025-2492) allowing unauthorized access. Update firmware and strengthen security now.
State-sponsored hackers from North Korea, Iran, and Russia are now using ClickFix, a cybercrime-born social engineering trick.
ASEC report details Kimsuky's Larva-24005 campaign targeting South Korea and globally with RDP exploits, MySpy malware, and keyloggers.
Critical vulnerability (CVE-2025-42599) in Active! mail allows remote code execution. Update to the latest version immediately to protect your systems.
A misconfiguration exposed APT41 tools targeting Shiseido, revealing Fortinet exploit scripts, webshells, and reconnaissance tactics.
Critical RCE vulnerability (CVE-2025-24797) in Meshtastic allows remote takeover. Update to 2.6.2 immediately to stay safe.
North Korean IT workers infiltrated Web3 platforms like OnlyDust using fake identities to earn payments, gain credibility, and enable future cyberattacks.
Google offers US university students a free year of Google One AI Premium, including 2TB storage and Gemini 2.5. Sign up by June 30!
GitHub patches CVE-2025-3509 and more in Enterprise Server. Flaws allow code execution, XSS, and data exposure. Admins urged to update immediately.
Cisco Talos reveals a new VIP version of XorDDoS with centralized control, enabling global DDoS attacks. U.S. targeted in over 70% of observed campaigns.
Google introduces Gemini 2.5 Flash, a low-latency, cost-efficient AI model optimized for real-time tasks like virtual assistants and content summarization
A U.S. court ruled Google illegally monopolized the ad tech market, harming competition and limiting ad choices.
GCVE introduces a decentralized system for vulnerability IDs, empowering organizations with autonomy and speed. Complements CVE for smoother vulnerability management.
CISA warns of actively exploited vulnerabilities in Apple and Microsoft products. Urgent patching is required to mitigate risks from these attacks.
A critical vulnerability in Bubble.io allows attackers to bypass restrictions and extract all user data from Elasticsearch. The flaw remains unpatched.
Canonical releases Ubuntu 25.04 Plucky Puffin featuring Linux Kernel 6.14, GNOME 48, and enhanced hardware support. Download now!