European Union Vulnerability Database

https://euvd.enisa.europa.eu/

Manjaro 25.0 is among the recent wave of Linux distro releases!

https://news.itsfoss.com/manjaro-25/

The latest Ubuntu release packs in some neat changes! 📹🐧

https://www.youtube.com/watch?v=FaJj8fLxC44

Did someone say Ubisoft and Open Source in the same sentence!? 🤯

https://news.itsfoss.com/ubisoft-chroma/

Galaxy M56: 30% Thinner, Same 5,000mAh Battery and 45W Charging
https://www.gizchina.com/2025/04/17/galaxy-m56-30-thinner-same-5000mah-battery-and-45w-charging/

Android Enhances User Security with New Feature!
https://www.gizchina.com/2025/04/17/android-enhances-user-security-with-new-feature/

How to Unlock Android Smartphone Without Needing a Password
https://www.gizchina.com/2025/04/17/how-to-unlock-android-phone-without-password-apr/

⚡️Finding Balance With Tech
@takebackourtech

In this clip from Above’s 'Breaking Out of Tech Addiction' webinar, I talk about the solutions to technological addiction.

There are a few key strategies, such as mindful usage of your devices and mindful open source tools like usageDirect (available on F-Droid) that can help you keep track of your device usage without invasive surveillance from Big Tech.

Watch the full webinar here.

—
✌️ MORE POSTS | 🗯 CHAT GROUP | 📩 NEWSLETTER | XMPP
Follow 🫶 @takebackourtech

🚨 Targeted iPhone attacks in the wild.

Apple just patched 2 new zero-days—bringing 2025’s total to 5 actively exploited flaws.

→ One lets hackers run code via malicious audio files
→ Another bypasses Pointer Authentication using memory tricks

🔗 Details here: https://thehackernews.com/2025/04/apple-patches-two-actively-exploited.html

Update now: iOS 18.4.1, macOS Sequoia 15.4.1, tvOS, visionOS

🚨 Actively Exploited SonicWall Flaw Hits CISA’s KEV List.

Remote attackers can execute code via SMA 100 Series bug (CVE-2021-20035, CVSS 7.2).

➡️ Injects OS commands as ‘nobody’ user
➡️ Impacts SMA 200–500v on outdated firmware
➡️ FCEB agencies must patch by May 7, 2025

Your VPN gateway could be the backdoor. Patch it

Learn more: https://thehackernews.com/2025/04/cisa-flags-actively-exploited.html

🚨 Microsoft Alert: Node.js-Powered Malware Campaign Ongoing...

Since Oct 2024, fake Binance & TradingView installers have been used to deploy malware via Node.js and PowerShell.

Linked threats include ClickFix tricks, SectopRAT malware, fake PDF tools, and HR-themed phishing kits.

Learn more: https://thehackernews.com/2025/04/nodejs-malware-campaign-targets-crypto.html

🚨 CVSS 10.0 ALERT: Remote Code Execution in Erlang/OTP SSH (CVE-2025-32433)

No auth. Full control. Widespread impact.

Used in Cisco, Ericsson, OT/IoT, and edge systems, this bug lets attackers run code without logging in.

If SSH runs as root? Game over. 👀

🔗 Full details → https://thehackernews.com/2025/04/critical-erlangotp-ssh-vulnerability.html

🔥 Fix now → OTP-27.3.3 / 26.2.5.11 / 25.3.2.20 Block SSH ports as temp fix.

🔥 Blockchain won’t kill passwords yet—but it may change how we authenticate.

Decentralized IDs + cryptographic keys = fewer breaches, no central targets.

Used in finance (KYC) & healthcare (patient data), it’s real—and growing.

But until blockchain scales, passwords stay. Just make them strong.

➡️ Learn more: https://thehackernews.com/2025/04/blockchain-offers-security-benefits-but.html

🚨 Copy. Paste. Get hacked.

North Korea, Iran & Russia are now pushing ClickFix—a sneaky trick that fools users into running malware on their own devices.

Learn more → https://thehackernews.com/2025/04/state-sponsored-hackers-weaponize.html

🚨 AI isn’t just coding faster—it’s rewriting the rulebook.

LLMs have entered the threat landscape. From spear-phishing and voice fraud to malware with OCR, attackers are now using AI to scale, blend, and evolve.

Defenders use AI too—but GenAI interfaces expose a new attack surface.

🔗 Full deep dive in Security Navigator 2025: https://thehackernews.com/2025/04/artificial-intelligence-whats-all-fuss.html

🚨 China-backed hackers are deploying TONESHELL v3, StarProxy, and stealth tools like SplatCloak to breach Myanmar targets—dodging EDR, logging keystrokes, and hopping across networks with FakeTLS tricks.

• 3 TONESHELL variants
• 2 new keyloggers (PAKLOG, CorKLOG)
• StarProxy – a lateral movement proxy over FakeTLS
• SplatCloak – a Windows kernel-level EDR evasion driver

Details here 👉 https://thehackernews.com/2025/04/mustang-panda-targets-myanmar-with.html

Codex

A Lightweight coding agent that runs in your Linux terminal

🔗Links
- Requirements
- Installation
- Source code & more info

Organization: OpenAI

🏷 Tags: #AI #Linux #WSL #MacOS #Utilities #Coding

Scrcpy Android

A port of Scrcpy program for android devices.

🔗Links
- Download
- Screenshot
- Source code
Developer: zwc

❗️Friendly reminder:

If you find it useful, You may star the repo, donate to the developer, or perhaps you may also contribute to the development of this project.

🏷 Tags: #Android #Utilities