Vertu Agent Q is official but quite hard to buy

https://ift.tt/lt5ZCQi

OnePlus 15's launch date announced, Ace 6 will tag along

https://ift.tt/JgUeWEF

This is the iQOO Neo11 in all its glory

https://ift.tt/dhTRKBF

Hackers just dropped a new .NET backdoor disguised as a tax notice.

Open the ZIP → boom, your data’s gone.

It even runs through legit Windows tools so nothing looks off.

Full story → https://thehackernews.com/2025/10/new-net-capi-backdoor-targets-russian.html

⏺️Google is preparing big screen recording upgrades for Android tablets and PCs

My latest Authority Insights Newsletter post dives into the upcoming revamp of Android's screen recorder tool.

Click the link👇to get all the details!

🔗https://www.androidauthority.com/android-screen-recorder-toolbar-rumor-3608449/

Mind Mint

Mind Mint is an Android application designed to help you stop doomscrolling and boost your productivity. Take control of your digital life and focus on what truly matters.

🔗 Links:
- Download
- Screenshots
- Features
- Source code
Developer: @gtxPrime

❤️ Support the Project

If this project makes your life easier, here are a few quick ways to show some love:

⭐ Star the repo/app
☕ Buy a coffee for the developer
🛠 Contribute code, issues, or pull-requests

🏷 Tags: #Android #Productivity

The latest Windows 11 updates break localhost (127.0.0.1) HTTP/2 connections

Microsoft's October Windows 11 updates have broken the "localhost" functionality, making applications that connect back to 127.0.0.1 over HTTP/2 no longer function properly.

When attempting to do so, they received errors like "ERR_CONNECTION_RESET" or "ERR_HTTP2_PROTOCOL_ERROR

Windows 11 KB5066835 Patch Tuesday, and even September's KB5065789 preview update are currently affected alongside Windows 2025 Server System.

The good news is -- Microsoft has now fixed Windows bug breaking localhost HTTP connections. Please update your Windows 11 to install the bug fix update.

Follow @TechLeaksZone

Infinity X running smoothly in Nintendo Switch and passing strong integrity with magisk installed for default. Thanks for your job @dozee_off

Welcome again, it has been some time since the previous RC (Release Candidate) release. However, it is worth the wait. The fourth RC has arrived.

PerformanC ReZygisk Release Candidate 4 comes with many improvements to both ReZygisk performance and modules'. It also stabilizes many core systems while also enhancing furtiveness for module loading.

The most notable changes in this release candidate are:
- Added global module preload.
- Improved module description for a more minimalist one.
- Removed completely the (futile) maps hiding mechanism.
- Fixed support for systems using Tango.
- Added support to update from RC to RC from root manager app.

Soon bigger changes are expected to come. Till there ReZygisk RC 4 will provide a solid and stable Zygote injection for its users.

Special thanks for the users who allowed this release to exist by contributing with feedback on each ReZygisk CI (@rezygisk_ci) stability and test builds.



The eyes met in disbelief. I could not trust what I saw.
Before I realized, everything happened. We saw its flaw.

Due to many complaints from some users, derpfest will no longer have a vanilla variant and microg, I will also drop vanilla variants of other Roms that do not support natively, I'm tired of so many complaints

If you want, do it on your own, buy a server, sync it and try to solve the various bugs

Soon I will make a list of the gsis that I will no longer maintain, becoming EOL by myself, and archiving the repository.

Whether for personal reasons, or because I really didn't enjoy building it or I thought the system was a poorly made piece of shit

List

Matrixx
CherishOS
Alphadroid
SuperiorOS
Halcyon
BlissOS
Mist-OS
Clover

🔒 8-character passwords are dead.
💀 Hackers crack “P@ssw0rd!” in months.
🔡 The fix isn’t symbols — it’s length.

16 simple letters beat any complex mix.
Use words, not symbols.

Why your policy still fails ↓ https://thehackernews.com/2025/10/why-you-should-swap-passwords-for.html

Hackers linked to China exploited a “patched” Microsoft SharePoint flaw to break into networks across four continents.

It wasn’t just spying — they found a way to bypass the patch that fixed a previous bypass.

Symantec warns the campaign is still spreading.

Read → https://thehackernews.com/2025/10/chinese-threat-actors-exploit-toolshell.html

Your cloud might flag the same issue across five tools — XDR, CSPM, SIEM, CMDB, and more.

Each reports it differently. None resolve it.

That’s the real challenge: detection is easy; remediation isn’t.

Learn how Pentera Resolve turns alerts into action → https://thehackernews.com/2025/10/bridging-remediation-gap-introducing.html

Which Industries Are Most at Risk for DDoS Attacks?

While DDoS attacks can hit any organization, some industries face far higher risk—and potentially greater impact when they do.

The latest DDoS Resiliency Score (DRS) report ranks the industries most frequently targeted and explains why.

Here's the list of the highest risk sectors. For the full list of industries, see here - https://thn.news/ddos-risk-map

Highest-risk sectors:
💰 Financial Services – Targets of hacktivism and extortion-driven outages.
⚡ Energy – At risk from politically or state-backed disruptions.
🏛️ Government – Frequent hacktivist targets, especially around elections.
🌐 Telecom – Increasingly hit by ransom-based attacks.
🎮 Gaming & Gambling – Vulnerable to extortion and competitive disruption.
💻 SaaS & Software – Susceptible to DDoS that erodes customer trust.

🚨 Developers, check your NuGet packages.

A fake NuGet package “Netherеum.All” — spelled with a Cyrillic ‘e’ — was stealing wallet keys from Ethereum .NET projects.

It even faked 11.7M downloads to look real.

Full story ↓ https://thehackernews.com/2025/10/fake-nethereum-nuget-package-used.html

🔴 A fake “Zoom meeting” from Ukraine’s President’s Office just hacked aid workers. The CAPTCHA wasn’t real — it opened a live remote shell through WebSocket.

A one-day domain. Six months of setup. Russian servers behind it.

The trojan’s still active ↓ https://thehackernews.com/2025/10/ukraine-aid-groups-targeted-through.html