Do Son iFAX Solutions discloses a critical remote code execution vulnerability (CVE-2025-1782) affecting HylaFAX and AvantFAX due to improper sanitization
Trend Micro uncovers BPFDoor backdoor used in cyberespionage across Asia and the Middle East, attributing it to the Red Menshen APT group
NVISO's report details BRICKSTORM, a China-linked backdoor targeting European industries, using sophisticated techniques to evade detection
Apple uses differential privacy and synthetic data to refine its AI models behind Apple Intelligence, Siri, Genmoji, and other creative features.
Japan’s antitrust watchdog sues Google for restricting Android device makers from using rival search services, citing monopolistic market practices.
Learn about ResolverRAT, a new remote access trojan using advanced evasion to avoid detection. This malware employs sophisticated techniques.
Android introduces auto-reboot after 72 hours of inactivity, enhancing data security. Google Play Services update implements this feature
Google ends security updates for Android 12. Users face increased vulnerability. OEMs unlikely to provide patches. LineageOS offers an alternative.
Google mandates 32GB minimum storage for Android 15 devices, impacting GMS certification. This change addresses growing storage needs
OpenAI phases out GPT-4.5 from its developer API, replacing it with the more efficient GPT-4.1. GPT-4.1 offers enhanced features and lower costs.
Samsung suspends One UI 7 rollout due to lockscreen issues. Galaxy S24 users report unresponsiveness. New release date pending.
Meta announces plans to use EU user data for AI training, providing an opt-out form. Public posts only, no private data or under-18 data used.
PyPI resolved a security issue on April 14, 2025, where users retained team privileges after organization removal. The swift 2-hour fix prevented potential escalation.
CrushFTP vulnerabilities CVE-2025-32102 & CVE-2025-32103 enable SSRF and directory traversal. Update now to secure your file transfer server
Coinspect reveals flaws in browser wallets like Freighter and Coin98 that let attackers drain crypto without phishing, clicks, or wallet connection.
Apache Roller has a security vulnerability (CVE-2025-24859) where sessions aren't invalidated after password changes, risking unauthorized access
A Forescout report reveals critical vulnerabilities in solar power systems that could be exploited to destabilize power grids and compromise user data.
The Knownsec 404 team reports on the DarkHotel APT group's latest attacks, featuring upgraded frameworks and sophisticated evasion techniques.
A China-nexus APT group exploited Ivanti Connect Secure VPN vulnerabilities to infiltrate organizations globally, deploying the SPAWNCHIMERA malware toolkit
Sucuri discovered a credit card skimming attack using a fake font domain to steal credit card data from a WordPress website.
Subdomain takeovers are evolving into a serious supply chain threat, allowing attackers to inject malicious content.
The NCSC reveals DAMASCENED PEACOCK, a sophisticated malware targeting the UK MOD, using spear-phishing, code signing, and COM Hijacking.