ESET researchers observed tens of thousands of machines infected with AsyncRAT and its variants over the past year. The open-source malware is a popular tool among cybercriminals.

In congressional testimony, President Trump’s former national security adviser said his use of Signal to coordinate military operations was “driven by” cybersecurity guidance from CISA.

OpenAI's image gen model, which is available via ChatGPT for free, now lets you easily create AI images even if you're not familiar with trends or prompt engineering.

Google released a critical Chrome update (138.0.7204.157/.158) patching six vulnerabilities, including CVE-2025-6558, a high-severity zero-day actively exploited in the wild. Update immediately!

Broadcom has released urgent patches for four critical (CVSS up to 9.3) VMware vulnerabilities affecting ESXi, Workstation, and Fusion, allowing host code execution.

Apache CXF versions are vulnerable to DoS attacks and sensitive data leaks (CVE-2025-48795) due to improper handling of large messages. Update immediately!

Cameron Wagenius faces a maximum of 27 years in prison. A researcher that helped with the investigation called this ‘one of the most significant wins in the fight against cybercrime.'

A former US Army soldier, Cameron John Wagenius (kiberphant0m), pleaded guilty to hacking telecom companies, stealing data, and attempting to extort $1 million.

Google secures 3GW of hydropower in a $3B deal to power its AI data centers, while the tech industry faces mounting criticism over its massive water consumption.

The Rainbow Hyena threat cluster is unleashing PhantomRemote, a new backdoor, in phishing attacks against Russia's healthcare and IT sectors, leveraging compromised emails.

GLOBAL GROUP, a rebranded RaaS operation, is aggressively targeting critical infrastructure worldwide, leveraging AI chatbots for automated, high-pressure ransom negotiations.

Cyfirma uncovers "Octalyn Forensic Toolkit," a GitHub-hosted "educational" tool that's actually a modular credential stealer exfiltrating data via Telegram.

McAfee warns of a new Android malware campaign targeting Bangladeshi expats with fake remittance apps like TapTap Send, stealing personal and financial data, including photo IDs.

OpenJS Foundation released critical Node.js updates patching two high-severity flaws (CVE-2025-27210, CVE-2025-27209) affecting Windows apps, including path traversal bypass and HashDoS.

A critical pre-authentication root RCE (CVE-2025-34068) in Samsung WLAN AP WEA453e allows full device takeover. Update firmware immediately to version 5.2.4.T1.

Microsoft's internal AI assistant automates 90% of all pull request reviews (600K/month), enhancing code quality and accelerating development, with advancements feeding into GitHub Copilot.

Windows 10 LTSB 2015 reaches its end-of-life on October 14, 2025. Enterprises must upgrade now to avoid losing critical security updates and facing compliance risks.

The cURL project's bug bounty program is overwhelmed by AI-generated, fraudulent vulnerability submissions, leading the lead developer to consider its discontinuation.

Apple commits $500M to MP Materials to boost U.S. rare earth magnet production and recycling. This partnership strengthens Apple's supply chain and U.S. resource autonomy.

DShield honeypots hit 1M+ logs in a day, marking a major rise in sustained, large-scale malicious scanning across web services.