Do Son A local privilege escalation flaw in PyInstaller (CVE-2025-59042) could let attackers execute code. Check if your apps are at risk.
security
The renowned end-to-end encrypted messaging app Signal has announced the launch of a cloud backup feature, allowing...
Microsoft Access 2016 and 2019 will officially lose support on October 14, 2025. Learn why it’s critical to upgrade to a newer version to stay secure.
Google will require developers to verify their identity to enable app sideloading on Android, a move intended to enhance security but with potential consequences.
Google Play Services now backs up Android's anti-theft settings to the cloud. This small change ensures your phone stays protected even after a factory reset.
Ubuntu is replacing the classic sudo with sudo-rs, a memory-safe reimplementation in Rust. The change aims to enhance security and prevent vulnerabilities.
The makers of 2Fas Auth have launched 2Fas Pass, a local-first password manager with a zero-knowledge architecture and tiered security for maximum protection.
Google clarifies that recent claims of a "major Gmail security breach" affecting 2.5 billion users are entirely false and based on misinformation.
A critical vulnerability in ImageMagick's BMP encoder (CVE-2025-57803) could allow remote code execution. Update your 32-bit builds immediately.
Google will soon require all sideloaded Android apps to come from a verified developer. The move aims to combat malware, which is 50x more common in unverified apps.
Earlier, encrypted email provider ProtonMail introduced a standalone two-factor authentication (2FA) tool. One might wonder why, given...
Anthropic has partnered with the U.S. government to develop an AI classifier that can block attempts to use its Claude AI model for nuclear weapon construction.
A critical vulnerability in Plex Media Server, with a CVSS score of 10.0, has been patched. Users are urged to update immediately to prevent exploitation.
PyPI is now checking for expired domains to prevent "domain resurrection attacks," a major step in securing the Python Package Index from account takeovers.
Two critical remote code execution (RCE) vulnerabilities with CVSS scores of 9.8 were found in the open-source Flowise AI platform.
A phishing attack compromised the maintainer of a popular npm package, eslint-config-prettier, leading to the spread of malware to thousands of projects.
ImageMagick has patched four security vulnerabilities, including high-severity memory corruption bugs, that could affect applications using the toolkit.
A critical vulnerability (CVE-2025-20265) in Cisco Secure Firewall Management Center allows unauthenticated attackers to execute commands with high privilege.
Microsoft has permanently removed the outdated and insecure PowerShell 2.0 from Windows 11, a move that enhances security but may affect some enterprise scripts.
PyPI is implementing new restrictions to reject problematic ZIP archives and protect against "parser confusion" attacks, which could bypass security checks and smuggle malicious files.
Android 16's new Advanced Protection Mode adds a USB security feature that may require you to unlock your phone to enable fast charging.
Apple formally responded to the DOJ antitrust lawsuit, arguing the government's claims are misleading and would harm iPhone's security, privacy, and innovation.