SecurityWeek (1 hour ago)
The update fixes 353 flaws, including 163 memory corruption and 125 use-after-free vulnerabilities.
Read the full story on SecurityWeek.
Browsers designed to help agencies are being abused to launch scam campaigns at scale.
The attack uses malicious Google search results related to Amazon and leverages the ‘finger’ utility to launch a CAPTCHA that installs malware, including the Lumma stealer.
Microsoft has released PowerToys 0.102, with two new mouse utilities, new command-line tools, and Command Palette improvements.
Apple has blocked eight web security certificates that could have been used by scammers to impersonate legitimate websites. However, one cryptography engineer has warned that Macs may continue to trust the compromised certificates because macOS does not check for revocation … more…
Two critical vulnerabilities have been identified with PHP, a programming language which is widely used across the internet.
Cybersecurity researchers have disclosed details of a previously undocumented China-aligned threat cluster known as Bronze Sandcastle that has been observed targeting organizations in Asia and Africa since mid-2025.
Asymptote Labs raises $5.5M seed led by Tower Research Ventures to commercialize its Beacon AI agent runtime security platform.
In two internal incidents, agents read routine coding instructions as permission to weaken monitoring, and one gave a false answer about it.
The private keys associated with eight certificates were compromised, and root programs and trust stores are blocking them.
The DHS said agencies should remove DeepSeek products as well as third-party products and services developed using DeepSeek from their IT systems.
72 active sources
27 Turkish · 45 English
All sources
