Do Son A new report reveals a critical flaw in Harness Gitness that allows authenticated attackers to write arbitrary files to the server, risking a full system compromise.
Supply Chain
Apple has reportedly secured nearly half of TSMC's 2nm chip production for the iPhone 18's A20 processor, a move that highlights the fierce competition for cutting-edge silicon.
A new phishing campaign called ZipLine reverses the attack by tricking victims into initiating contact. It targets supply chains and deploys a custom in-memory implant.
Apple is reportedly manufacturing all four iPhone 17 models in India for the first time, marking a major shift in its strategy to reduce reliance on China.
A new vulnerability in AMI Aptio UEFI firmware allows for arbitrary code execution in System Management Mode, a privileged environment that can bypass OS controls.
A phishing attack compromised the maintainer of a popular npm package, eslint-config-prettier, leading to the spread of malware to thousands of projects.
Apple commits an additional $100 billion to US industries, bringing its total investment to $600B. The move is a strategic response to new 25% tariffs on goods from India.
A study reveals Python's ecosystem is a "labyrinth of dependencies" that propagates vulnerabilities. Over 145,000 packages are at risk, with urllib3 accounting for 41% of all exposures.
A DomainTools report exposes how North Korean IT workers use fake IDs, AI, and shell companies to infiltrate remote tech jobs globally, funding the regime's military and compromising corporate infrastructure.
Apple officially opens its first US Manufacturing Academy in Detroit on Aug 19, offering free smart manufacturing and AI training to small and medium-sized businesses, part of its $500B US investment.
India aims to launch its first "Made in India" chip and open six fabs by late 2025 to boost domestic semiconductor manufacturing and reduce 90% import reliance.
Proofpoint reveals a surge in China-aligned cyber espionage targeting Taiwan's semiconductor industry with spearphishing, Cobalt Strike, and new malware like Voldemort.
Apple commits $500M to MP Materials to boost U.S. rare earth magnet production and recycling. This partnership strengthens Apple's supply chain and U.S. resource autonomy.
Apple COO Jeff Williams will retire, with Sabih Khan succeeding him later this month. Apple's industrial design team will now report directly to Tim Cook, marking a generational shift in leadership.
Apple has reportedly paused foldable iPad development, shifting resources to a foldable iPhone due to yield/cost challenges, aiming for an earlier market entry.
Amazon is investing $4B to expand same-day/next-day delivery to over 4,000 smaller US communities by 2026, leveraging AI and new hubs to boost e-commerce dominance.
CISA warns of critical flaws in Kaleris Navis N4 terminal OS: unauthenticated RCE (CVSS 9.8) via Java deserialization and cleartext data transmission.
A critical CVSS 10.0 vulnerability (CVE-2025-5086) in DELMIA Apriso threatens global manufacturing. Urgent action needed to protect production.
An active npm malware campaign uses over 60 packages to steal internal/external IP addresses, hostnames, and user paths, designed for enterprise network mapping.
Malicious npm packages have been silently destroying files and corrupting data in React, Vue.js, and Vite projects for over two years.
Deceptive VS Code extensions like 'solaibot' are stealing crypto wallet credentials, disabling Defender, and deploying persistent spyware on Windows.
A high-severity path traversal flaw in setuptools can allow RCE, exposing millions of Python users. Update to 78.1.1 now.