Short, verified tech briefings on AI, Cybersecurity, Infrastructure, Database, and Tech Updates — with the analysis and action steps engineering teams need.
A new survey finds two-thirds of companies are unfamiliar with the EU's Cyber Resilience Act, a major new law for hardware and software security. The first parts of the regulation are now in effect.
Multiple vulnerabilities in Pillow, a popular Python imaging library, could let attackers crash applications with specially crafted data. This creates a denial-of-service risk for any service using the library to process images or fonts.
South Korea will soon require online forums to scan every uploaded image using AI censorship tools. The law sets a significant global precedent for content moderation, raising concerns about costs, privacy, and platform architecture.
Attackers are using GitHub and SourceForge to distribute malware disguised as popular software like ChatGPT and Claude. Compromised YouTube channels promote these fake installers, which deploy a Deno-based backdoor called DinDoor that installs additional remote access trojans on infected systems.
Researchers have discovered a vulnerability in ChatGPT, dubbed ChatGPhish. The flaw exploits how the AI assistant processes Markdown links and images, allowing attackers to create convincing phishing attacks. This technique abuses the platform's implicit trust to trick users into clicking malicious links disguised within AI-generated responses.
A new, unpatched vulnerability has been found in the Windows Search URI handler. Researchers discovered the flaw, which can be exploited by attackers to steal a user's NTLMv2 hash. This issue is similar to a previously disclosed vulnerability that affected the Windows Snipping Tool's URI handler.
New research demonstrates a technique called "WiFi sensing," which uses standard Wi-Fi signals to identify people and monitor physical spaces. The method analyzes how signals are reflected and scattered by human bodies, effectively turning routers into surveillance devices without accessing cameras or other sensors.
Ubuntu has rolled back a recent security patch for the Python package manager, pip, on its 22.04, 24.04, and 26.04 LTS releases. The update, intended to fix a vulnerability, caused a regression that broke pip's functionality, forcing a temporary reversal.
A critical vulnerability in Ruby's Net::IMAP library allows attackers to bypass TLS encryption. This could expose sensitive data in applications that use the library to communicate with email servers, requiring an immediate update to prevent attacks.
A high-severity vulnerability named BadHost has been found in Starlette, a popular Python web framework. The flaw allows attackers to bypass authentication using malformed HTTP Host headers, potentially exposing sensitive systems like AI agents and LLM gateways to unauthorized access.
Dutch authorities arrested two co-owners of internet hosting companies and seized 800 servers. The companies allegedly provided infrastructure for Russian state-sponsored cyberattacks, influence operations, and disinformation campaigns targeting the European Union. This action disrupts a significant source of malicious online activity.
A software kit used in many free apps is secretly turning devices like smart TVs into web-scraping tools. This allows a data company to use your internet connection to gather data for the AI industry.
The Securly Chrome Extension, version 3.0.7, has multiple security vulnerabilities, including weak encryption and improper access controls. These flaws could allow attackers to expose sensitive filtering rules, manipulate configuration files, and gain unauthorized access to protected resources, potentially compromising student and school data.
Ubuntu has released a follow-up security update for the Apache HTTP Server on Ubuntu 18.04 LTS. A previous patch, intended to fix vulnerabilities, inadvertently broke HTTP/2 functionality. This new update corrects the regression, restoring full service while maintaining security.
A critical vulnerability in OpenStack's Mistral workflow service allows attackers to execute arbitrary code. The flaw stems from weak API access controls, potentially letting hackers steal sensitive service credentials from cloud infrastructure.
Australia will ban social media for children starting in late 2025 to protect them from cyberbullying and addiction. This landmark move signals a growing trend of strict regulation that will impact social platforms and data collection globally.
Microsoft has released its largest-ever security update, fixing 206 vulnerabilities. The patch addresses three publicly known zero-day flaws and dozens of critical bugs that could allow remote code execution, requiring immediate attention from IT teams.
A critical remote code execution (RCE) vulnerability has been found in Apache Commons BeanUtils, a popular Java library. The flaw allows attackers to access a specific property in Java enum objects, potentially letting them run arbitrary code on affected systems, requiring immediate attention.
Two critical vulnerabilities in systemd, a core Linux component, could allow attackers to escape containers or manipulate DNS records. The flaws affect widely used distributions, including Ubuntu 22.04 LTS.
A ransomware gang is sending fake IT workers into offices to steal data, according to a new warning from Google and the FBI. The attackers use USB drives and remote access tools to bypass digital security measures.
Google's Threat Intelligence Group reports a rapid rise in Chinese-language Phishing-as-a-Service (PhaaS) platforms. These services are evolving beyond simple credential theft, now using real-time interception and token hijacking to bypass multi-factor authentication, marking a significant shift in the threat landscape.
The FBI, with help from Google, shut down a massive Phishing-as-a-Service operation called Outsider Enterprise. The platform used thousands of sites to steal credit card data, highlighting the growing scale of automated cybercrime tools.
US agencies, including CISA, the FBI, and the NSA, have issued a joint advisory about active cyberattacks targeting automatic tank gauge (ATG) systems. These devices, used to monitor fuel and liquid storage, are being compromised when exposed to the internet, posing a risk to critical infrastructure.
Attackers are exploiting a critical ServiceNow flaw to gain access to customer systems without needing a password. The company has released a security update for its hosted instances to address the active threat.