Do Son A critical vulnerability in Bubble.io allows attackers to bypass restrictions and extract all user data from Elasticsearch. The flaw remains unpatched.
Canonical releases Ubuntu 25.04 Plucky Puffin featuring Linux Kernel 6.14, GNOME 48, and enhanced hardware support. Download now!
A major Zoom outage occurred due to a domain registry error at GoDaddy. Learn about the cause and the risk of self-hosted status pages.
Facing overwhelming AI web scraping, Wikimedia releases a free, optimized dataset on Kaggle to encourage direct downloads and reduce server strain.
Google introduces a new tool for developers to monitor and optimize excessive wake lock usage, aiming to reduce unexplained Android battery drain.
OpenAI launches Flex API, offering cheaper access to AI models with trade-offs. Learn about pricing and how it compares to standard options.
OKX officially enters the US market with compliant crypto services after a regulatory settlement. Explore their Web3 wallet and low-fee trading platform.
PoC for CVE-2025-32433, a critical Erlang/OTP SSH flaw enabling unauthenticated RCE, has surfaced. Patch now to protect telecom and high-availability systems.
A vulnerability (CVE-2024-53141) in the Linux kernel's ipset component allows for privilege escalation and kernel-level code execution.
Hitachi Vantara addresses a critical resource injection vulnerability (CVE-2025-0756) in Pentaho Data Integration & Analytics, enabling RCE.
Kaspersky reports the resurgence of IronHusky APT, deploying an evolved MysterySnail RAT in espionage campaigns.
Siemens patches 66 SQL injection vulnerabilities in TeleControl Server Basic, urging users to upgrade and restrict access.
Unit 42 uncovers a sophisticated phishing campaign using multi-layered tactics to deliver malware like Agent Tesla, evading detection.
HarfangLab analysis details Gamaredon's PteroLNK malware, revealing its stealthy tactics and infrastructure used for espionage.
Prodaft analysis reveals Gorilla, a new Android malware evolving to steal data and potentially conduct espionage.
Sekoia TDR reveals Interlock ransomware's evolving tactics, including ClickFix social engineering, to evade detection and steal data.
Hunt.io reveals a server-side phishing campaign that evades detection to steal employee credentials, bypassing 2FA.
A critical vulnerability (CVE-2025-30911) in the RomethemeKit For Elementor WordPress plugin allows authenticated users to achieve RCE.
CISA warns of potential risks from Oracle cloud credential exposure. Urges password resets, MFA, and vigilance against phishing attacks.
EU & US sanctions hit Garantex, Russia's crypto exchange, freezing $30M in USDT. Russia now seeks a domestic stablecoin to bypass restrictions.
Synology restricts third-party drives in its 2025 Plus NAS series, limiting features like health reports. Learn about the new policy and workarounds.
Windows 11 update KB5055523 causes BSOD errors. Microsoft deploys Known Issue Rollback (KIR) to fix. Reboot device for faster resolution.